Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/zi2pw6eAcnf9bjKyqOm2ZGJfqfw.roa
File: zi2pw6eAcnf9bjKyqOm2ZGJfqfw.roa (raw, json)
Hash identifier: t9hWSHMwBpkNyjaAy38eOa8TjFUDL0alma8PStQN3Ec=
Subject key identifier: CE:2D:A9:C3:A7:80:72:77:FD:6E:32:B2:A8:E9:B6:64:62:5F:A9:FC
Certificate issuer: /CN=61340818a8633908cf37ea145d66d92452fb73aa
Certificate serial: 01855F0FB10F220B6F8A22AB0A2B73192D88
Authority key identifier: 61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/zi2pw6eAcnf9bjKyqOm2ZGJfqfw.roa
Signing time: Thu 29 Dec 2022 18:05:41 +0000
ROA not before: Thu 29 Dec 2022 18:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39194
IP address blocks: 83.146.192.0/18 maxlen: 18
185.143.60.0/22 maxlen: 22
37.35.16.0/20 maxlen: 20
85.209.100.0/22 maxlen: 22
2a00:7a20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5f:0f:b1:0f:22:0b:6f:8a:22:ab:0a:2b:73:19:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61340818a8633908cf37ea145d66d92452fb73aa
Validity
Not Before: Dec 29 18:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce2da9c3a7807277fd6e32b2a8e9b664625fa9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:55:95:ab:04:1e:50:00:f2:3c:89:e5:88:
99:c6:d7:62:03:b6:ab:9d:78:8d:cc:6b:84:37:97:
0c:84:c6:54:26:8b:2d:6e:4f:4c:44:d5:1b:b9:69:
d8:68:88:09:fd:d5:25:8d:44:8a:49:cd:45:82:28:
8c:a7:7d:e8:20:0a:93:78:27:18:f0:ee:4b:d0:29:
8f:f8:b2:30:75:c2:1a:c2:fe:c0:0c:c2:12:41:bb:
26:b1:9b:1c:e0:d8:51:36:38:b7:cb:65:61:4b:62:
93:b8:a2:17:96:e0:f7:f5:8d:6d:55:e0:e6:8e:13:
2a:38:50:ef:a2:bf:4f:70:a9:cc:db:50:e7:05:5b:
d4:fd:85:4f:8c:8c:72:9c:27:d7:44:ae:2e:5a:ac:
f0:fe:93:29:a4:ac:21:63:b0:b9:d4:de:4d:9a:f5:
f8:7a:4d:93:0f:9b:06:02:34:20:41:b5:af:44:6f:
ba:12:16:92:93:72:53:ed:49:6e:ce:d7:c2:1f:6d:
48:f0:78:cc:0e:d8:5f:53:d8:d6:04:fc:e3:e7:8a:
1b:86:be:49:fb:16:1e:c1:62:3a:e1:f9:f8:15:78:
54:b3:ca:c3:92:ea:39:20:f7:41:4d:66:c2:e5:c9:
4d:03:ef:a7:c2:fc:5b:c7:83:85:8a:a7:69:c6:fb:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:A9:C3:A7:80:72:77:FD:6E:32:B2:A8:E9:B6:64:62:5F:A9:FC
X509v3 Authority Key Identifier:
keyid:61:34:08:18:A8:63:39:08:CF:37:EA:14:5D:66:D9:24:52:FB:73:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTQIGKhjOQjPN-oUXWbZJFL7c6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/zi2pw6eAcnf9bjKyqOm2ZGJfqfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/391dd7-4b96-46a5-afb4-6b615b7dbfe0/1/YTQIGKhjOQjPN-oUXWbZJFL7c6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.16.0/20
83.146.192.0/18
85.209.100.0/22
185.143.60.0/22
IPv6:
2a00:7a20::/32
Signature Algorithm: sha256WithRSAEncryption
42:9f:6d:c5:33:7a:b6:2e:f6:c8:cc:8f:3b:7b:33:60:a6:64:
3d:e5:86:97:1d:ea:7c:89:54:b9:3a:72:57:96:bf:74:df:72:
63:10:2e:02:d4:2e:a8:ef:39:3d:1a:a1:1b:af:4e:a7:5d:45:
c3:38:73:de:c3:2a:a7:38:e2:a1:95:dc:1e:3f:36:50:a4:ba:
a1:35:0f:11:04:a5:66:d1:ac:c4:9a:40:0e:37:09:a6:e1:67:
51:0f:36:bb:36:c1:6f:f8:a4:74:cf:d4:ee:67:83:1e:3d:56:
9a:3e:1a:15:fd:5e:a7:b5:d8:23:29:18:fe:58:24:c5:c1:ec:
2e:56:92:d5:06:fa:0a:49:1d:3d:75:15:58:76:3b:4a:d5:7e:
c0:5c:eb:5f:01:fd:f8:cb:a0:2f:ff:3e:78:0d:a2:e2:51:8b:
39:a1:7b:98:b1:f9:5f:67:54:c5:95:16:38:4f:fb:47:81:1b:
d4:13:61:07:a1:ca:c2:17:f9:02:85:da:e9:3d:b3:5c:2e:be:
2e:8b:9d:59:d2:98:62:48:01:75:ae:52:c4:74:bd:60:be:e0:
a1:b4:88:42:92:33:a1:4a:34:ef:68:99:cb:ba:2b:66:ce:02:
e7:3c:83:5e:87:f2:ab:99:b6:8c:86:6e:38:1c:7e:d4:b6:3b:
4f:49:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:56 2025 by rpki-client