Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/zs-gGTC5Zr_oSEwWf7Ky5sJ8G2w.roa
File: zs-gGTC5Zr_oSEwWf7Ky5sJ8G2w.roa (raw, json)
Hash identifier: ZB3Jwoul3orlpIklAyNxELRBcr8UhTvvGBreKayfyYg=
Subject key identifier: CE:CF:A0:19:30:B9:66:BF:E8:48:4C:16:7F:B2:B2:E6:C2:7C:1B:6C
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0594F462
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/zs-gGTC5Zr_oSEwWf7Ky5sJ8G2w.roa
Signing time: Mon 23 May 2022 03:53:29 +0000
ROA not before: Mon 23 May 2022 03:53:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36131
IP address blocks: 185.155.138.0/24 maxlen: 24
185.155.139.0/24 maxlen: 24
185.155.136.0/22 maxlen: 22
185.155.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93647970 (0x594f462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: May 23 03:53:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cecfa01930b966bfe8484c167fb2b2e6c27c1b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:24:24:b7:16:51:45:4e:ca:04:87:d2:7a:
89:a6:9e:cb:c9:07:c7:8d:05:bc:61:d6:b3:44:6b:
33:83:eb:2e:bc:c3:c8:25:60:c9:0d:44:de:25:42:
25:f4:66:23:14:0d:89:c3:50:10:81:eb:31:46:8e:
81:20:78:48:76:33:b1:37:f9:f7:72:1a:08:19:d5:
84:ac:0a:cb:1a:db:f8:c8:de:b1:57:d1:4d:79:68:
da:e1:0b:b5:62:5a:cd:40:79:0d:75:43:c5:f0:7b:
07:f0:e9:98:72:d8:aa:46:0d:44:0e:ee:51:02:88:
e7:9b:c3:81:67:20:d6:c9:e2:7a:7f:04:58:e8:43:
29:4c:26:ba:b5:53:18:5d:5f:6b:de:3e:31:27:26:
4b:bc:78:c8:81:ea:91:d8:5d:2d:51:5b:a7:c2:60:
f2:d9:bc:5b:aa:d8:24:15:69:dc:d1:a8:c1:20:d7:
ca:c5:fb:d4:cb:23:07:a3:60:59:9b:be:cb:8e:a8:
a5:22:eb:37:1c:4b:74:29:ea:2d:bb:cb:e5:62:65:
e2:68:e6:63:81:0e:f1:a8:9b:d1:98:87:7a:0a:cf:
24:75:f0:95:3c:0c:db:9c:a3:5b:37:cd:d7:3c:d7:
9e:f9:67:1d:38:be:eb:d1:c2:62:0e:29:68:65:40:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:A0:19:30:B9:66:BF:E8:48:4C:16:7F:B2:B2:E6:C2:7C:1B:6C
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/zs-gGTC5Zr_oSEwWf7Ky5sJ8G2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/22
Signature Algorithm: sha256WithRSAEncryption
25:9e:08:64:72:c6:4f:e4:a4:44:d9:9c:cb:b7:c0:ac:9f:72:
89:01:bf:8f:6b:6e:53:23:e3:6b:61:58:31:80:10:37:02:3b:
73:7d:24:73:7e:2c:f7:4d:a1:1f:40:9a:55:b6:5c:07:35:9e:
fe:74:17:73:c2:b7:b0:26:db:72:2f:25:4b:40:02:77:82:f8:
35:3f:61:7d:f2:bc:3d:54:dc:dd:46:72:c3:a7:2f:bf:16:50:
38:85:a5:0f:ba:83:da:ec:9b:01:e9:cc:53:97:51:35:52:77:
df:e9:4d:ac:19:61:73:43:3f:0a:13:ef:68:33:43:40:0b:10:
ae:1a:73:43:ff:04:a6:e8:98:7b:20:6d:f3:24:77:7d:88:3f:
c0:01:01:9e:84:7e:02:29:70:32:a9:bb:cb:7c:8e:88:e4:e5:
95:62:b1:11:66:99:50:da:2e:06:88:91:a0:cf:f5:14:be:ab:
b6:83:ac:4d:c2:3f:67:e1:b9:b0:76:34:ea:f0:45:69:a9:cd:
b5:d8:be:52:00:a7:cf:ad:78:11:5e:b1:2f:c4:11:ea:7a:c3:
d4:87:43:27:68:c1:43:b6:5e:3d:69:37:24:69:8d:ed:f5:6a:
d9:8a:bb:d8:7e:ae:1c:c0:85:97:e3:5d:ac:25:a3:f7:aa:ff:
bd:c9:0f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:43 2023 by rpki-client on console-fra.rpki-client.org