Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZV9RoVdGQco6pFNDRFr_37nVPXQ.roa
File: ZV9RoVdGQco6pFNDRFr_37nVPXQ.roa (raw, json)
Hash identifier: fPt6ReF5xor6BgKeCiYvJmtJvQp1mDrLJvxtJGvhWFI=
Subject key identifier: 65:5F:51:A1:57:46:41:CA:3A:A4:53:43:44:5A:FF:DF:B9:D5:3D:74
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0183D3AF823BFFBC0FF5147AEC42FFFE980E
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZV9RoVdGQco6pFNDRFr_37nVPXQ.roa
Signing time: Thu 13 Oct 2022 23:30:38 +0000
ROA not before: Thu 13 Oct 2022 23:30:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44208
IP address blocks: 94.74.190.0/24 maxlen: 24
109.203.160.0/19 maxlen: 24
94.74.128.0/18 maxlen: 24
94.74.136.0/24 maxlen: 24
31.170.48.0/20 maxlen: 24
185.34.160.0/22 maxlen: 24
94.74.165.0/24 maxlen: 24
94.74.168.0/23 maxlen: 24
94.74.166.0/23 maxlen: 23
176.46.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d3:af:82:3b:ff:bc:0f:f5:14:7a:ec:42:ff:fe:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 13 23:30:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=655f51a1574641ca3aa45343445affdfb9d53d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3a:54:49:4e:3e:2b:d1:0e:10:cc:85:f1:44:
43:06:c2:f5:6b:87:96:49:5d:b8:16:9d:94:b5:59:
63:57:e7:30:55:61:de:80:52:df:d9:83:6f:e3:c5:
f2:fa:77:05:d8:db:a5:2e:b1:36:18:41:31:9f:5a:
aa:00:93:32:24:3e:98:37:ce:6f:a5:ba:d8:45:cb:
dd:df:9c:b9:f6:4c:fc:2b:7e:96:c6:48:aa:1d:37:
11:f7:00:94:37:9a:b8:b7:0f:4c:77:0c:e1:20:00:
97:c8:9d:33:b4:d8:be:6d:66:4e:c3:a2:c3:3b:df:
7e:c5:7a:04:00:93:b6:8a:2e:da:38:77:c9:24:30:
fc:eb:39:ab:e9:a5:e2:e4:40:0f:c5:f7:55:11:2f:
08:9d:c9:0a:dc:73:d6:a5:57:78:e2:50:ef:8c:88:
e3:bb:ef:11:30:a4:f2:e6:04:63:4b:c5:14:6e:4b:
2d:3e:04:c0:1a:4a:92:b8:1f:59:83:2b:62:66:17:
a6:5f:0a:78:44:62:8b:93:ed:68:de:d9:a0:80:5a:
39:94:eb:b2:66:c5:78:eb:fa:bd:ad:7d:b3:16:5f:
83:d8:6b:7e:b3:3b:d0:02:10:27:df:bd:5a:cf:51:
96:04:32:50:77:47:93:80:04:de:16:b7:75:15:81:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5F:51:A1:57:46:41:CA:3A:A4:53:43:44:5A:FF:DF:B9:D5:3D:74
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/ZV9RoVdGQco6pFNDRFr_37nVPXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.48.0/20
94.74.128.0/18
109.203.160.0/19
176.46.128.0/19
185.34.160.0/22
Signature Algorithm: sha256WithRSAEncryption
86:5c:de:83:40:07:a6:3c:7f:18:c3:26:3f:f7:95:59:5a:57:
8e:59:d6:b5:d1:ca:70:9d:dd:e7:04:9f:12:e0:8a:ca:36:a5:
e4:58:5c:8e:94:c7:5a:7c:99:9c:13:64:01:f1:b7:b1:7b:f9:
bc:29:ba:b3:45:12:0d:db:95:0b:f5:3c:b8:11:a3:4d:c4:03:
2e:82:32:18:c4:67:84:4a:b1:49:e0:c1:50:af:69:9a:f7:08:
45:73:08:67:d5:78:ad:a3:17:db:28:d0:26:6e:20:02:f0:fe:
79:64:fc:c1:b2:38:9e:f0:81:e9:c1:9d:ba:f4:1f:36:50:a1:
4d:2a:b7:72:ab:4b:c0:68:f0:db:e6:68:83:b7:3a:e4:b2:7d:
fc:23:8b:ea:f9:7b:e4:5f:af:79:8f:63:ad:85:d9:1c:18:fd:
f0:18:69:06:0e:f1:a4:c8:72:73:c2:91:9d:d2:ba:ce:ce:27:
0e:15:99:0b:02:74:ce:91:2a:42:e6:c6:e6:99:d5:b5:d4:86:
a9:af:71:87:10:09:ad:65:e1:4e:88:35:90:62:0f:11:27:47:
52:fe:18:73:28:7b:d8:39:85:39:4a:5a:ab:78:b4:20:ae:13:
3c:70:12:72:88:49:ea:8f:88:95:bd:60:24:e9:cf:5a:8f:7f:
fc:c2:be:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:30 2025 by rpki-client