Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ZGyp8QysjZE8FXb4xw8VTYmm9RY.roa
File: ZGyp8QysjZE8FXb4xw8VTYmm9RY.roa (raw, json)
Hash identifier: v+JLRK+6RQU74inby0R96OYfOHP4wylFl1JELnSd4yw=
Subject key identifier: 64:6C:A9:F1:0C:AC:8D:91:3C:15:76:F8:C7:0F:15:4D:89:A6:F5:16
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0185C052F1B8F02E2C61B09C19287ECDDA2E
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ZGyp8QysjZE8FXb4xw8VTYmm9RY.roa
Signing time: Tue 17 Jan 2023 15:22:19 +0000
ROA not before: Tue 17 Jan 2023 15:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
109.74.31.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
2a0d:4a40::/29 maxlen: 29
2a0e:d4c0::/29 maxlen: 29
2a09:6e47::/48 maxlen: 48
2a04:27c0::/29 maxlen: 29
2a0d:42c0::/29 maxlen: 29
2a09:6e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c0:52:f1:b8:f0:2e:2c:61:b0:9c:19:28:7e:cd:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jan 17 15:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646ca9f10cac8d913c1576f8c70f154d89a6f516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:60:39:08:ea:b3:b2:08:23:3a:62:cb:ae:
b9:a2:de:27:c4:a5:e6:d1:cc:90:6a:10:ee:31:6a:
66:a1:b8:da:24:45:44:d3:6e:44:fe:56:14:ed:04:
95:cf:0a:28:51:40:a9:ad:57:0e:ec:14:e9:17:12:
09:e4:2c:ba:8b:be:e1:e8:c6:e5:d3:93:c3:dc:9a:
0e:f4:46:eb:c8:f6:23:6f:5f:39:ae:54:1f:88:2f:
5f:a7:b6:78:5d:90:81:56:b1:4e:25:ac:87:d4:46:
ab:37:28:70:d0:52:1a:0c:c4:2d:fa:a0:e3:02:90:
33:72:0e:a4:bf:e1:55:3e:10:0f:f4:10:b5:3d:fc:
e7:4f:04:c5:05:7d:37:43:f0:0c:41:50:a4:14:76:
4b:05:48:bc:b5:e2:e7:3e:58:5b:77:9e:9d:eb:b1:
c0:18:46:2f:0a:da:8a:c0:25:be:3d:e3:f7:e1:1d:
8f:83:a8:3e:57:e0:66:bc:4f:36:2f:08:5b:25:7d:
56:da:60:47:9c:0b:5f:f5:c4:19:5d:b4:9b:b3:d8:
32:46:07:cc:83:5a:18:92:1a:a8:25:8d:ef:0a:7a:
cf:a7:47:03:aa:08:63:37:49:6e:d4:1e:02:b8:8e:
92:4b:b8:22:99:07:4c:85:23:0b:9d:8b:b3:31:ad:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6C:A9:F1:0C:AC:8D:91:3C:15:76:F8:C7:0F:15:4D:89:A6:F5:16
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/ZGyp8QysjZE8FXb4xw8VTYmm9RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
45.142.24.0-45.142.26.255
109.74.28.0/22
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:16:4f:80:ed:7c:da:7b:dd:f4:32:9b:44:2a:a2:27:22:87:
ef:53:ba:74:1c:59:df:05:4b:e0:dd:02:00:b1:f2:45:a2:da:
8f:6c:45:e6:0d:8c:f6:60:97:37:3c:cb:c2:df:00:c4:2f:17:
ad:41:45:e7:8d:ce:6a:b3:2b:da:ff:78:84:90:08:a2:87:7a:
6d:51:b2:5e:fd:98:74:df:9b:dd:e6:5c:eb:da:84:a1:f2:a5:
2a:9f:ed:2a:b0:7f:e1:59:a7:d4:3c:fe:25:47:30:62:8b:48:
1d:f6:d4:9c:41:5a:92:ac:62:c5:00:ca:c0:d6:7e:20:cc:c7:
79:57:e7:f9:5a:e1:46:3f:d6:4e:6d:0e:e6:2e:96:a7:11:e7:
dd:7d:f3:b4:7b:75:20:f2:db:df:de:68:c3:4d:ef:b7:4b:ff:
f6:c2:bc:47:7e:79:d9:38:7d:d7:86:79:7c:5a:f3:7f:7f:ff:
33:af:73:5d:47:3b:81:a8:86:9a:79:a7:29:ef:37:a9:c7:3e:
2e:54:ff:87:cf:07:22:67:31:99:5a:a8:f1:ce:af:07:05:55:
c3:c4:77:4e:a2:3d:08:b5:f5:09:56:73:73:0c:cc:82:03:ea:
8c:21:0d:5a:62:ff:98:91:3c:86:34:fb:8b:fc:d9:e3:06:3a:
e0:e2:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:15 2025 by rpki-client