Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/ZXZs3gAiSYCg3AvoAGrH67QDJl4.roa
File: ZXZs3gAiSYCg3AvoAGrH67QDJl4.roa (raw, json)
Hash identifier: HKFZgKvFWFwv3z/0ElnCQ1kPd071ItdBEKG1UhY9VV8=
Subject key identifier: 65:76:6C:DE:00:22:49:80:A0:DC:0B:E8:00:6A:C7:EB:B4:03:26:5E
Certificate issuer: /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial: 0CB58333
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/ZXZs3gAiSYCg3AvoAGrH67QDJl4.roa
Signing time: Sat 01 Jan 2022 02:57:47 +0000
ROA not before: Sat 01 Jan 2022 02:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206347
IP address blocks: 185.193.168.0/22 maxlen: 24
138.124.160.0/20 maxlen: 24
37.48.225.0/24 maxlen: 24
37.48.226.0/23 maxlen: 23
138.124.175.0/24 maxlen: 24
37.48.228.0/24 maxlen: 24
37.48.231.0/24 maxlen: 24
185.67.232.0/22 maxlen: 24
185.102.132.0/22 maxlen: 24
2a0b:de40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213222195 (0xcb58333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
Validity
Not Before: Jan 1 02:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65766cde00224980a0dc0be8006ac7ebb403265e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:0b:29:50:16:55:0c:a0:27:04:99:7e:f3:
ca:bf:78:d5:32:ff:e2:dd:91:b7:5f:b1:2b:90:14:
ed:d8:0d:96:f9:6e:fa:66:62:6e:b5:9d:21:29:f2:
bd:0b:8e:73:c7:25:24:4f:d3:6d:1a:a8:79:41:12:
b2:6b:04:1e:1d:ee:08:52:84:1b:2f:b4:61:9c:23:
d3:b4:c0:f3:98:0d:91:e7:68:05:24:72:c3:46:d8:
a4:46:83:aa:60:ff:ab:e8:8c:0c:a5:58:c4:60:4d:
66:41:55:79:a1:ee:bf:95:cd:21:45:0c:b8:c3:5f:
15:aa:7b:f4:f9:36:8a:44:86:00:57:76:dd:ea:b3:
a8:0a:61:b1:05:da:5d:74:29:ac:71:08:7d:b9:cf:
d9:49:65:7b:17:f5:0b:5d:8d:13:45:f6:de:a3:f9:
f6:ef:7d:bc:c7:d9:c8:33:3c:d6:4c:74:37:3d:28:
4d:00:73:24:82:7e:05:e8:cb:a8:16:8e:b1:28:52:
32:16:8a:40:04:10:3c:3c:67:16:55:8e:05:ac:ef:
b9:10:a6:2f:ca:4b:6c:db:ad:20:d3:89:dc:15:a8:
db:25:eb:cf:54:d6:a4:a2:03:c5:16:e9:18:d3:ea:
50:fe:e0:ee:0b:fa:97:8d:fc:45:db:bf:d5:c4:1e:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:76:6C:DE:00:22:49:80:A0:DC:0B:E8:00:6A:C7:EB:B4:03:26:5E
X509v3 Authority Key Identifier:
keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/ZXZs3gAiSYCg3AvoAGrH67QDJl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.225.0-37.48.228.255
37.48.231.0/24
138.124.160.0/20
185.67.232.0/22
185.102.132.0/22
185.193.168.0/22
IPv6:
2a0b:de40::/29
Signature Algorithm: sha256WithRSAEncryption
a8:99:6a:87:5c:a7:63:19:7c:9a:8a:07:fc:30:58:bf:de:d3:
48:8e:f3:cc:ab:d4:32:70:98:60:15:69:05:95:7f:cd:d7:09:
ac:ea:cd:ed:95:55:8f:59:9b:96:3a:c6:22:8b:f8:77:4e:a2:
1f:50:ac:83:c4:61:6f:b5:8a:14:3f:86:8c:5b:9a:52:6b:e2:
d9:89:ec:85:7c:4a:e1:29:41:0b:a5:9d:ba:d5:65:41:b5:08:
98:e4:c7:05:1d:94:13:33:bd:75:86:a8:06:9a:d0:d8:ee:df:
49:6b:1f:aa:97:f5:dc:ef:91:05:c0:31:34:83:05:db:cf:1c:
a3:37:b6:b3:98:6a:e1:6b:9b:36:d7:fa:03:eb:63:ca:14:14:
0c:69:65:25:93:e9:be:5e:94:dc:2f:7d:42:bb:51:c9:8a:9a:
a5:43:1c:49:51:3d:31:ab:0b:a7:5d:1d:c6:33:a7:c9:8c:a0:
7e:d1:37:3f:db:26:63:13:ef:df:86:e8:7a:98:bf:73:4a:7f:
9a:d8:a8:c1:80:d2:6e:00:b9:61:4e:39:b2:1a:ac:23:d9:db:
bd:23:4a:b2:96:89:74:29:0e:89:f8:25:69:34:4d:b6:54:06:
a9:37:f3:c0:50:10:5a:f2:86:fb:fb:71:3e:9d:fb:6a:a6:d7:
a3:0e:86:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:19 2025 by rpki-client