Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/ZdOnzEOGBZOol_2h9KcQhqa4Dds.roa
File: ZdOnzEOGBZOol_2h9KcQhqa4Dds.roa (raw, json)
Hash identifier: ZA2fj+YitaT9vyePTV5y89DnFBwkQPj8MR4v+j9gYTo=
Subject key identifier: 65:D3:A7:CC:43:86:05:93:A8:97:FD:A1:F4:A7:10:86:A6:B8:0D:DB
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 018570F083293499C1CD5E6E3021E634230A
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/ZdOnzEOGBZOol_2h9KcQhqa4Dds.roa
Signing time: Mon 02 Jan 2023 05:24:48 +0000
ROA not before: Mon 02 Jan 2023 05:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 185.172.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:83:29:34:99:c1:cd:5e:6e:30:21:e6:34:23:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Jan 2 05:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d3a7cc43860593a897fda1f4a71086a6b80ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:73:b8:27:79:77:5a:98:8d:70:bc:c2:8f:
a9:eb:c4:f9:c7:80:c7:af:02:a4:9f:18:84:85:83:
3d:83:7f:f3:7c:49:c4:62:b8:e3:3d:34:3c:7c:b8:
22:2b:91:a8:e9:8e:5b:e5:59:31:02:d7:48:6a:1f:
75:6f:f4:10:08:2e:3d:ee:fd:04:cd:0e:46:b9:9e:
28:04:2b:3d:84:28:07:23:ac:d0:c9:c9:64:5f:a8:
9b:cb:42:8c:b1:0f:7d:ac:eb:03:19:b2:da:35:88:
dd:09:53:02:5c:3c:7a:e1:f4:7c:f9:0d:d3:99:be:
81:72:d0:86:18:dd:bc:ac:6e:48:74:59:87:18:6a:
9f:0f:78:65:58:38:85:d6:b5:79:e7:89:f5:b9:4e:
ad:df:3b:b3:ef:52:00:3e:a6:2a:ca:e1:40:7c:fc:
63:73:79:b0:ac:89:11:e5:e0:99:6c:87:60:63:77:
28:8d:fa:43:5e:1f:99:10:95:a2:fe:d7:d9:63:2f:
04:fe:9d:22:f7:f3:a0:67:ed:f0:22:60:87:47:64:
6b:92:42:6f:bc:5c:dd:0a:a6:05:cd:3c:74:cd:9c:
a4:b4:7e:36:7c:91:27:e1:47:93:f4:87:c8:27:46:
cf:18:01:6f:16:cb:cd:58:d9:5e:e6:ff:7b:62:25:
20:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:A7:CC:43:86:05:93:A8:97:FD:A1:F4:A7:10:86:A6:B8:0D:DB
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/ZdOnzEOGBZOol_2h9KcQhqa4Dds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.227.0/24
Signature Algorithm: sha256WithRSAEncryption
70:24:fa:d7:77:0a:26:1e:ea:3c:4d:ec:4b:f6:02:ec:e4:b0:
a9:fe:3b:a2:05:48:d1:c2:c8:18:9f:7d:fb:24:ee:f7:2d:0b:
d7:15:d3:bf:36:6f:50:25:4f:72:7c:56:d6:83:15:18:c3:d5:
68:34:e2:cb:c9:7e:ab:b7:31:9a:67:be:04:3d:48:40:e0:a6:
ed:5d:c0:cd:2a:1a:40:64:74:36:2e:72:65:38:6d:14:56:5b:
0b:73:1f:e3:45:11:ec:39:23:1e:19:74:69:0a:12:72:34:d0:
35:26:ba:a3:72:ad:64:d3:0e:0c:a5:07:2f:4f:04:7a:4a:42:
d7:28:2d:1b:24:00:a3:eb:ee:67:7d:a7:5f:9d:bf:2e:7a:28:
d5:7c:b0:4d:5c:bf:bf:24:df:8b:ad:76:4f:66:3b:fa:66:f9:
91:4c:8f:47:fe:f2:a4:7c:05:74:44:6f:f7:59:4f:66:e1:44:
89:bb:c0:9e:17:d5:a3:1b:1c:07:a7:df:ef:50:8c:4c:15:d1:
0c:71:76:93:27:ab:5c:db:58:41:6c:94:28:0a:38:e2:3b:d0:
9a:50:0b:07:eb:90:fc:f2:19:45:30:10:4a:44:8f:3c:00:f0:
ea:1b:fc:14:55:13:06:a7:ba:69:69:aa:43:42:bc:2e:9c:de:
87:16:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:20:11 2025 by rpki-client