Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/ZDvn-zVHsyd5haTe3JDlJAQnGR8.roa
File: ZDvn-zVHsyd5haTe3JDlJAQnGR8.roa (raw, json)
Hash identifier: J/Fegg5+ocpW1K3LazY5nIMN566vJGFUpT7FS93YGjI=
Subject key identifier: 64:3B:E7:FB:35:47:B3:27:79:85:A4:DE:DC:90:E5:24:04:27:19:1F
Certificate issuer: /CN=5035205c3d01713f9d8b5b00e3539619b2335232
Certificate serial: 0185730CB3BC5EB963E31BDB6F3A9C71A520
Authority key identifier: 50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/ZDvn-zVHsyd5haTe3JDlJAQnGR8.roa
Signing time: Mon 02 Jan 2023 15:14:50 +0000
ROA not before: Mon 02 Jan 2023 15:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203622
IP address blocks: 185.26.187.0/24 maxlen: 24
37.18.58.0/24 maxlen: 24
185.129.1.0/24 maxlen: 24
185.129.3.0/24 maxlen: 24
185.129.0.0/24 maxlen: 24
185.129.2.0/24 maxlen: 24
185.26.186.0/24 maxlen: 24
185.26.185.0/24 maxlen: 24
185.26.184.0/24 maxlen: 24
2a0f:7040::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:b3:bc:5e:b9:63:e3:1b:db:6f:3a:9c:71:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5035205c3d01713f9d8b5b00e3539619b2335232
Validity
Not Before: Jan 2 15:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=643be7fb3547b3277985a4dedc90e5240427191f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:e8:08:3f:1b:27:57:71:69:93:1d:08:cd:
8d:5f:54:c5:28:c4:a7:3e:49:e6:4c:4e:37:a9:95:
5f:6e:f2:c2:b3:24:a7:3b:aa:58:50:4e:ed:b8:78:
a4:55:42:6f:34:a3:5d:a5:d8:17:87:1a:28:ed:cb:
62:dc:19:66:04:44:dc:0d:2a:0f:56:a0:a3:2c:d1:
45:e9:37:61:ce:7c:3d:8d:8d:18:b3:05:2f:4d:ef:
25:2d:ab:0a:66:60:44:36:c3:b2:b2:75:a8:93:e9:
9e:9f:d1:03:03:81:5c:a3:7e:70:9f:9b:e7:9a:45:
19:8a:a0:93:e6:b0:99:31:16:a9:50:2a:69:d0:b1:
35:97:84:4f:09:08:65:a5:cb:9d:00:68:89:87:48:
cd:a0:ad:46:00:10:cc:64:e9:13:0b:9c:bb:0a:e8:
5b:17:bc:f1:c2:fa:59:68:65:92:30:84:8a:3d:1c:
fc:72:fd:57:28:4f:52:28:c6:b9:a3:06:96:82:a4:
df:8b:05:ed:36:83:1b:2d:75:43:31:7a:23:f2:97:
24:18:96:54:4b:a8:77:72:93:a8:27:40:a5:c7:26:
cc:53:f8:bb:38:67:e1:b4:40:e0:de:99:d6:53:48:
b3:01:c0:7c:a9:b0:47:cc:92:12:eb:19:a4:d6:8e:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:3B:E7:FB:35:47:B3:27:79:85:A4:DE:DC:90:E5:24:04:27:19:1F
X509v3 Authority Key Identifier:
keyid:50:35:20:5C:3D:01:71:3F:9D:8B:5B:00:E3:53:96:19:B2:33:52:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UDUgXD0BcT-di1sA41OWGbIzUjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/ZDvn-zVHsyd5haTe3JDlJAQnGR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/97b9c1-c1de-41ac-a9cb-1602d6ad141a/1/UDUgXD0BcT-di1sA41OWGbIzUjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.58.0/24
185.26.184.0/22
185.129.0.0/22
IPv6:
2a0f:7040::/32
Signature Algorithm: sha256WithRSAEncryption
15:c2:f7:fc:b8:e2:bc:17:2c:97:12:8f:f6:bc:0d:57:b9:90:
1e:ca:84:c0:a6:b4:e2:33:56:7f:5f:d7:ed:45:c3:fc:92:47:
73:66:68:fe:6a:1d:31:9e:5f:9e:96:01:27:1b:80:fc:30:47:
52:b9:23:5e:1c:64:b7:d3:b9:4b:23:a4:47:9e:1d:b0:e8:0e:
83:5a:8c:66:bc:22:2b:92:f8:a4:d6:b8:50:fd:5b:65:50:dc:
1e:21:d6:aa:2b:37:63:ce:95:61:b1:99:16:fe:ac:48:c5:43:
31:92:bb:84:34:e1:79:f8:57:cd:9a:29:b7:f6:b4:b5:e0:47:
14:de:8d:a4:ee:e2:c9:da:6c:8b:f2:85:56:20:33:90:38:33:
99:19:42:db:fd:d4:98:de:2a:87:e9:a0:6c:37:09:cd:e1:2c:
8e:ec:c9:a0:51:5c:ac:73:72:7e:af:e3:56:96:76:3f:78:7f:
43:9e:d6:a5:7c:81:79:bf:4b:24:f5:3b:f7:d4:15:45:be:2e:
e3:92:70:9b:34:18:f4:22:fc:2f:fa:e5:1b:9a:c3:a0:51:7d:
e8:11:e1:30:fe:20:a0:a5:3d:db:64:08:b5:5f:11:f8:62:6b:
0e:0e:53:5f:ba:57:0a:25:e1:46:c3:65:f5:8e:68:6c:fa:f7:
11:0b:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:40:08 2025 by rpki-client