Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/zbTDLKXHNbHKO5A92wMSwSdpaDQ.roa
File: zbTDLKXHNbHKO5A92wMSwSdpaDQ.roa (raw, json)
Hash identifier: hIPug2V2niSMkZx2PgzNC95Tl5AixAhnx1roaz4K7lk=
Subject key identifier: CD:B4:C3:2C:A5:C7:35:B1:CA:3B:90:3D:DB:03:12:C1:27:69:68:34
Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Certificate serial: 0372B40C
Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/zbTDLKXHNbHKO5A92wMSwSdpaDQ.roa
Signing time: Sat 01 Jan 2022 13:59:57 +0000
ROA not before: Sat 01 Jan 2022 13:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206516
IP address blocks: 185.184.98.0/23 maxlen: 24
185.184.96.0/23 maxlen: 24
185.184.96.0/22 maxlen: 24
2a0b:3080:10::/44 maxlen: 44
2a0b:3080:8010::/44 maxlen: 44
2a0b:3080::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57848844 (0x372b40c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6
Validity
Not Before: Jan 1 13:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb4c32ca5c735b1ca3b903ddb0312c127696834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:59:c1:5a:e2:ff:a3:c3:cc:4a:ca:48:3d:2d:
6b:ec:a5:23:e8:ee:1a:dc:8b:ca:f8:8c:e8:29:c8:
53:48:4a:9c:6b:5c:c7:a5:20:01:24:eb:ee:b2:c0:
96:54:41:2d:de:39:65:75:90:57:7e:b1:b6:25:0e:
2d:44:01:85:9e:2f:62:de:3e:22:03:88:d2:15:95:
38:d5:ea:e5:60:e3:3c:70:9f:61:84:f3:85:67:50:
36:46:ff:19:a4:77:c2:22:c0:c8:8b:5c:d5:71:ff:
80:32:34:16:af:4b:a4:66:8f:a6:37:60:23:af:3c:
b0:d0:13:41:1e:94:fc:9b:06:5e:47:0f:cc:c2:56:
cb:c1:54:f8:42:97:e5:71:3d:9e:fb:fc:26:bd:68:
ee:a6:fa:99:b5:86:42:80:53:3a:29:36:6d:88:61:
ed:5e:89:35:00:83:68:3a:2a:22:47:11:c7:54:a7:
2a:ac:c8:06:72:ef:5d:23:68:34:6b:15:4b:5e:98:
22:61:09:90:69:2d:da:a6:5d:41:9c:bf:14:3d:64:
25:28:ad:7d:64:5f:be:1b:bd:44:54:cd:5d:f5:5b:
92:35:6d:3b:26:0a:48:a0:cc:04:15:c0:9f:52:a9:
66:48:17:81:d6:b2:fd:ab:cb:fd:85:2d:50:76:74:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B4:C3:2C:A5:C7:35:B1:CA:3B:90:3D:DB:03:12:C1:27:69:68:34
X509v3 Authority Key Identifier:
keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/zbTDLKXHNbHKO5A92wMSwSdpaDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.96.0/22
IPv6:
2a0b:3080::/32
Signature Algorithm: sha256WithRSAEncryption
1f:9f:5f:71:36:0b:65:9e:cb:98:ec:2e:ac:24:30:27:7e:07:
8e:4a:74:bc:22:9c:ef:c8:20:8a:fe:e3:49:bb:54:2f:c7:8f:
a9:f4:64:3f:11:9c:27:6f:f7:82:64:49:ba:21:ae:0c:95:29:
68:7a:1e:2f:fa:a0:6b:03:d3:31:f9:3a:62:34:2c:49:6a:81:
c2:45:ad:f7:20:2c:b1:71:03:11:78:ed:bb:bc:96:15:4c:54:
1e:fe:02:b7:11:10:e7:8f:77:04:a3:61:e0:60:39:d1:1f:a7:
39:6a:f2:c7:7d:b9:21:8b:f2:65:b1:5b:3d:68:d6:b7:be:43:
65:b3:cb:50:90:34:27:1c:ad:76:bc:65:ab:a1:16:b2:01:7f:
59:1a:20:5b:6f:d6:87:59:35:f7:fe:00:4b:6a:c8:5c:d6:a3:
b7:8f:ea:25:25:87:0f:c6:ba:94:ed:6d:0f:57:41:1c:c5:e7:
cf:98:bf:77:5a:e8:e9:6a:b9:d5:fb:6b:28:d0:b2:11:30:7b:
fb:60:55:11:ef:03:67:87:45:77:a6:27:dc:1c:75:21:fe:e0:
69:49:eb:c0:1b:6a:1c:8a:73:69:7e:6b:23:05:b3:e0:59:dd:
34:61:d5:f4:63:36:25:08:39:be:40:1c:1a:82:58:2f:17:f2:
73:8c:64:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:09 2024 by rpki-client on console-fra.rpki-client.org