Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/1ZBsRExoAY67MZCZezZ_uNr156U.roa
File: 1ZBsRExoAY67MZCZezZ_uNr156U.roa (raw, json)
Hash identifier: dQ7y+cwTc9IqIQeU+VPQv0dWE3G0DpCDND+PggWK7/4=
Subject key identifier: D5:90:6C:44:4C:68:01:8E:BB:31:90:99:7B:36:7F:B8:DA:F5:E7:A5
Certificate issuer: /CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Certificate serial: 05194D67
Authority key identifier: 98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/1ZBsRExoAY67MZCZezZ_uNr156U.roa
Signing time: Sat 01 Jan 2022 13:03:45 +0000
ROA not before: Sat 01 Jan 2022 13:03:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202213
IP address blocks: 185.112.228.0/22 maxlen: 22
185.112.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85544295 (0x5194d67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb7f08f956d3af95719c537fb3f9b7e33006b3
Validity
Not Before: Jan 1 13:03:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5906c444c68018ebb3190997b367fb8daf5e7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:73:b4:6f:e5:c8:45:8f:1c:8a:14:33:2a:
cd:13:f0:ed:5c:16:f3:5a:89:c2:26:34:b8:bf:b0:
90:56:17:65:c8:3f:27:64:c5:94:fe:d7:d8:f2:8a:
39:03:cc:8a:24:62:d7:e2:5a:45:e3:5e:13:b7:96:
fc:a0:33:5c:82:40:e4:81:38:3c:b1:e8:e8:ff:8d:
a2:17:a9:32:df:47:04:25:90:1a:44:e2:fe:45:d6:
0a:c0:d0:c3:e5:c7:60:bd:4e:bc:3e:62:94:4e:39:
51:f6:f3:ca:1e:5a:cb:4b:58:d1:0d:9b:8f:01:90:
51:64:53:4e:de:f1:f9:6e:c2:06:92:7d:39:15:3e:
1f:eb:49:2c:06:ae:a9:dd:b8:9c:27:a4:0f:0c:40:
fb:70:3d:6f:76:7b:80:de:48:7b:5c:c2:d8:77:35:
99:e6:fc:be:d9:cf:6a:74:0c:4d:e8:b1:af:ec:2c:
b0:99:c7:12:21:8d:04:8b:5e:6c:19:23:2d:f2:4c:
92:5c:1d:02:3a:b2:ea:2a:95:db:33:55:3b:71:4d:
b7:83:54:13:da:b4:7b:1d:cd:71:23:a3:82:00:bd:
a7:2a:c7:56:42:bf:26:d8:5c:67:b6:45:0e:7a:ee:
73:a4:58:c3:1e:17:1c:48:bd:2c:54:73:52:25:5d:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:6C:44:4C:68:01:8E:BB:31:90:99:7B:36:7F:B8:DA:F5:E7:A5
X509v3 Authority Key Identifier:
keyid:98:FB:7F:08:F9:56:D3:AF:95:71:9C:53:7F:B3:F9:B7:E3:30:06:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPt_CPlW06-VcZxTf7P5t-MwBrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/1ZBsRExoAY67MZCZezZ_uNr156U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7efb35-9787-46f0-b799-d5c211eb3956/1/mPt_CPlW06-VcZxTf7P5t-MwBrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:bf:a5:38:b0:ae:fa:b1:7c:2b:13:71:92:e9:53:38:7f:86:
57:b5:7e:31:42:4c:3e:f7:f2:41:8b:3b:c8:37:d1:76:23:c2:
67:8b:27:5b:a7:29:1c:be:6b:3e:82:38:18:99:fc:55:36:02:
49:44:11:90:fc:9b:8e:78:9e:21:f9:05:d9:f1:ac:f1:61:3a:
8c:68:94:35:5c:65:29:8c:d0:f5:48:50:66:ad:63:73:1b:0b:
8b:af:16:49:61:24:9b:ff:8e:b0:5e:25:d3:3e:61:0d:02:a3:
0a:88:3f:b5:30:0f:98:0c:d1:00:e2:86:b8:fe:dd:44:4c:87:
17:39:13:b0:14:07:e2:2a:18:75:c1:12:09:4c:ff:1b:e2:e2:
d5:f6:8f:99:71:0f:26:c3:39:2f:83:76:03:02:80:81:00:0c:
c3:78:86:ba:65:c7:fa:5f:0b:8a:20:63:7f:03:b5:2c:42:fd:
90:11:15:9d:cd:16:75:46:d0:a0:e9:4b:c2:06:94:97:8f:64:
5e:29:b6:6d:9d:08:59:e4:05:09:50:28:4d:3e:82:2b:bf:ae:
a6:ca:5b:e0:9d:28:43:cf:97:71:24:a5:09:30:76:be:40:be:
07:6a:f2:91:63:bb:31:d5:6a:71:ac:d6:1b:89:71:f2:0c:8f:
20:4d:41:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:55 2025 by rpki-client