Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/_zuUtntgWxqG7fLyQlAPqEWaS7w.roa
File: _zuUtntgWxqG7fLyQlAPqEWaS7w.roa (raw, json)
Hash identifier: hsIC3p3Edi4HqGEkGCnLC5wtp3BzjoXwGvtcX6Fsr/4=
Subject key identifier: FF:3B:94:B6:7B:60:5B:1A:86:ED:F2:F2:42:50:0F:A8:45:9A:4B:BC
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 018572713149A6C91581C4B0C78428869D5A
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/_zuUtntgWxqG7fLyQlAPqEWaS7w.roa
Signing time: Mon 02 Jan 2023 12:24:58 +0000
ROA not before: Mon 02 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 185.237.224.0/23 maxlen: 23
91.210.164.0/23 maxlen: 23
91.90.195.0/24 maxlen: 24
91.90.194.0/24 maxlen: 24
91.90.193.0/24 maxlen: 24
92.118.151.0/24 maxlen: 24
92.118.150.0/24 maxlen: 24
92.118.149.0/24 maxlen: 24
185.253.44.0/23 maxlen: 23
185.253.46.0/23 maxlen: 23
2a0a:8c44::/32 maxlen: 32
2a0a:8c45::/32 maxlen: 32
2a0a:8c43::/32 maxlen: 32
2a0a:8c42::/32 maxlen: 32
2a0a:8c41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:31:49:a6:c9:15:81:c4:b0:c7:84:28:86:9d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 2 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff3b94b67b605b1a86edf2f242500fa8459a4bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:aa:cf:08:67:5a:cb:2d:44:4f:11:95:bc:
ed:34:2d:e4:40:5e:ca:e2:fa:df:a4:8d:1c:e5:3e:
b1:a8:bd:f1:8a:61:06:f0:af:3f:b3:11:4b:87:58:
85:c0:e3:48:42:7b:b1:24:bf:6c:16:3d:91:f6:65:
98:08:c5:44:3d:9b:fb:76:28:47:3e:9f:c1:d5:91:
3a:6a:b0:2c:02:c1:c0:6f:2b:d9:af:84:a8:6e:53:
9e:9f:bc:31:31:d5:1b:cc:ab:1d:00:1f:3c:08:82:
0e:aa:60:02:95:81:6f:70:4b:60:d6:48:ff:cd:a3:
60:00:3e:92:d0:3d:c2:5a:b9:95:a4:19:d0:77:2c:
d6:11:bb:06:38:57:9f:e4:a0:2d:9b:0a:56:ce:a7:
98:fe:28:d2:3a:72:48:46:7c:b2:70:f4:9d:23:34:
06:b1:84:2c:32:51:2d:0b:a1:38:9b:76:18:c5:ef:
b9:0c:17:ca:c1:eb:e3:d4:8c:71:58:e7:33:a5:1f:
8d:ed:0d:f1:ce:21:7a:d2:aa:a6:1e:ba:1e:76:6f:
46:ac:80:cd:c2:0c:81:74:fe:dc:c8:89:78:63:47:
52:89:67:9f:48:5d:7c:e3:c8:eb:89:75:fa:43:9b:
50:f8:c4:0c:0a:8c:54:67:d1:11:11:61:da:f9:8d:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3B:94:B6:7B:60:5B:1A:86:ED:F2:F2:42:50:0F:A8:45:9A:4B:BC
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/_zuUtntgWxqG7fLyQlAPqEWaS7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.193.0-91.90.195.255
91.210.164.0/23
92.118.149.0-92.118.151.255
185.237.224.0/23
185.253.44.0/22
IPv6:
2a0a:8c41::-2a0a:8c45:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a0:0f:fd:fe:62:47:81:95:8a:2f:f2:66:e7:4a:3d:72:25:85:
1c:07:2d:57:98:cb:87:8a:20:5f:42:1d:a8:73:f7:67:cd:c5:
69:d7:04:d2:88:65:b4:ee:b3:79:39:fd:d2:d5:50:8e:12:23:
18:2b:01:28:c0:5c:79:97:d9:9d:bf:1d:d4:44:fa:30:4f:08:
2e:97:2b:51:24:7b:75:28:63:1d:be:4e:58:37:4f:ce:ba:95:
63:89:c2:e9:0d:74:32:9f:d9:67:ef:37:3a:11:05:5b:dd:bd:
d6:5b:d0:f3:25:4c:7e:05:9d:98:99:46:f2:5c:e5:c5:0f:26:
b9:11:94:95:29:21:ef:9d:75:61:e7:56:49:9b:9e:67:87:1b:
f4:e0:5e:aa:99:fb:6b:e8:97:fd:a7:75:9f:90:26:90:12:3b:
d7:82:97:07:40:4e:ac:23:ec:3e:55:a3:12:4a:22:b0:7a:c3:
0d:1e:e5:98:1a:a0:93:c0:ce:8a:a0:13:4a:09:70:56:19:6b:
c1:63:b8:3d:13:e5:3b:ee:e3:85:f0:94:cb:14:22:9d:ea:e5:
c0:41:22:7a:3e:c3:96:72:7b:99:27:45:1a:07:8a:1b:fd:66:
53:8e:f8:8c:9a:0b:b8:ce:a8:a3:6f:9c:4e:61:dd:6a:15:c9:
bf:e2:8b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:44:23 2025 by rpki-client