Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/zH-DKgdHhTZMP3ECAcWOhrQLVrk.roa
File: zH-DKgdHhTZMP3ECAcWOhrQLVrk.roa (raw, json)
Hash identifier: aFmaK0U9R99jH8pgGHDrBy6C/SJgsau0Tub0qp+XFjA=
Subject key identifier: CC:7F:83:2A:07:47:85:36:4C:3F:71:02:01:C5:8E:86:B4:0B:56:B9
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 1951778F
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/zH-DKgdHhTZMP3ECAcWOhrQLVrk.roa
Signing time: Sat 01 Jan 2022 06:03:02 +0000
ROA not before: Sat 01 Jan 2022 06:03:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59780
IP address blocks: 185.71.120.0/22 maxlen: 24
185.177.84.0/22 maxlen: 24
2a05:3240::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424769423 (0x1951778f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Jan 1 06:03:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc7f832a074785364c3f710201c58e86b40b56b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:73:8a:d1:4a:33:55:20:0b:31:da:48:5b:
9d:0a:bd:e6:7c:ea:6b:05:15:31:3d:c6:51:53:b1:
a5:63:c8:b6:10:57:db:0c:9c:5b:ed:15:b8:c9:64:
ab:18:25:1b:f6:cb:a0:d0:b4:44:7c:7f:d9:19:56:
40:57:98:74:5f:1e:a3:67:89:8f:86:45:9e:d8:ad:
04:09:57:dc:f4:ff:dc:b3:57:4b:5b:06:45:dd:30:
a7:e6:e7:13:11:33:38:6e:96:41:1c:90:0f:b5:b8:
1f:ae:12:e0:97:fc:4a:9e:cd:ff:c6:f7:a8:b5:8f:
cb:1e:a6:4b:f6:e9:76:9e:7c:ba:12:26:3e:9a:6c:
c0:dd:5e:e9:94:70:b9:08:48:f9:0e:e6:c5:69:8f:
d5:2d:95:1c:1e:f6:a5:6d:a8:1d:98:19:d7:d6:c5:
73:72:a6:3c:8f:22:21:fc:23:ee:56:da:2f:fb:98:
3a:bf:2c:72:73:ae:fe:a5:ea:e4:a0:60:3a:ee:ce:
66:63:00:fa:a2:15:7e:38:7a:6c:55:93:19:0a:4d:
f2:a9:2a:86:e7:c2:15:be:76:33:4d:c7:bd:a1:2a:
b5:b9:5e:35:1f:1c:9f:56:50:35:1d:97:30:5f:c7:
8f:9e:fe:da:88:a4:6e:f7:85:5f:bd:e6:60:6a:ea:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:83:2A:07:47:85:36:4C:3F:71:02:01:C5:8E:86:B4:0B:56:B9
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/zH-DKgdHhTZMP3ECAcWOhrQLVrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.120.0/22
185.177.84.0/22
IPv6:
2a05:3240::/29
Signature Algorithm: sha256WithRSAEncryption
31:57:0e:67:07:c5:a8:92:90:d8:a4:ff:60:7d:42:2f:a8:d4:
e5:14:1d:96:c2:75:ac:71:16:ab:82:1c:c9:8c:81:ba:16:f9:
fe:7f:8c:e4:8d:e6:fb:ab:32:60:10:ee:39:bb:d1:12:58:e8:
37:a4:80:ad:01:d7:34:7f:fc:e9:42:21:20:59:bf:8a:45:5c:
bc:3e:91:40:36:45:ce:2a:9d:28:20:bb:eb:ba:23:b0:8d:56:
29:2f:79:3a:eb:d1:bd:57:cd:3e:3a:22:88:43:07:0c:1e:9c:
0b:19:d3:d6:2b:be:36:1f:71:eb:23:62:b3:9c:55:94:80:2c:
e6:7f:34:c2:19:f1:06:d0:53:e7:2d:ed:cf:be:ca:89:67:02:
fc:c3:7b:a1:32:18:4a:f8:0f:e7:07:74:43:43:e4:4b:1b:c9:
e5:c6:84:fb:f5:45:16:c9:ad:b3:07:1d:5e:8e:fb:b4:33:25:
0a:ec:83:b8:e2:ce:c6:f3:1b:05:34:65:7f:0f:18:94:c0:dc:
eb:c5:88:44:cb:37:bb:ba:74:65:c4:9e:d9:28:d8:9f:0e:c8:
72:f0:d4:5a:ac:cc:b6:18:72:a1:60:5d:91:8a:7c:d7:0c:29:
d5:15:1c:30:ea:8b:c2:05:55:fa:15:40:cc:e1:93:da:c5:54:
2f:45:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 10:29:50 2025 by rpki-client