Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/zMkKHMZ6lYAPp8OlJt9P_g-wJec.roa
File: zMkKHMZ6lYAPp8OlJt9P_g-wJec.roa (raw, json)
Hash identifier: Uf9xV/tlfPtphlSw7exJqOI2E3mHM0ivz1Ax8HHcUfk=
Subject key identifier: CC:C9:0A:1C:C6:7A:95:80:0F:A7:C3:A5:26:DF:4F:FE:0F:B0:25:E7
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 0637DE4E
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/zMkKHMZ6lYAPp8OlJt9P_g-wJec.roa
Signing time: Sat 01 Jan 2022 14:06:12 +0000
ROA not before: Sat 01 Jan 2022 14:06:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204957
IP address blocks: 91.90.195.0/24 maxlen: 24
91.90.194.0/24 maxlen: 24
91.90.193.0/24 maxlen: 24
92.118.151.0/24 maxlen: 24
92.118.150.0/24 maxlen: 24
92.118.149.0/24 maxlen: 24
185.253.46.0/23 maxlen: 23
2a0a:8c44::/32 maxlen: 32
2a0a:8c42::/32 maxlen: 32
2a0a:8c45::/32 maxlen: 32
2a0a:8c43::/32 maxlen: 32
2a0a:8c41::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104324686 (0x637de4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Jan 1 14:06:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccc90a1cc67a95800fa7c3a526df4ffe0fb025e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:02:0f:ef:a9:52:62:93:bc:b9:ce:76:42:
27:c7:0a:4f:03:7c:74:e6:40:2b:d9:c2:6f:9e:fa:
2d:22:3a:2d:62:37:b3:57:37:0d:4d:d7:7d:9c:ce:
4c:9d:ac:73:95:ab:a3:7e:11:44:d5:dd:c6:11:20:
87:db:64:14:7c:a2:54:8f:38:57:ea:39:a4:cc:43:
21:cb:df:57:b5:95:5e:ff:98:50:d0:d5:d6:41:bb:
36:a5:16:76:56:52:03:a5:40:2e:aa:f7:d2:f2:b5:
31:b3:ec:21:ae:56:95:22:d2:4f:f1:87:7a:45:63:
54:46:10:44:3f:91:60:64:49:1c:92:86:ae:25:71:
b9:3f:9b:68:89:82:5b:ed:51:04:3d:83:3c:ec:69:
9c:bf:3c:48:06:7d:a5:1e:55:83:3a:c7:4d:8a:c0:
a8:d5:5b:8f:0d:54:fb:c9:da:01:9c:ea:52:83:21:
4f:04:1e:be:90:d2:d8:55:b5:f9:17:95:ef:33:05:
56:36:b3:73:d1:18:36:27:02:e6:fc:eb:c6:0c:54:
f4:0a:0b:db:9d:17:68:9e:7d:6e:ac:66:05:b3:81:
f8:df:cb:e9:fe:bc:01:f8:ce:c1:9a:fe:90:11:70:
28:2c:fb:48:90:ab:ae:69:75:4a:6e:40:f0:b4:95:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C9:0A:1C:C6:7A:95:80:0F:A7:C3:A5:26:DF:4F:FE:0F:B0:25:E7
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/zMkKHMZ6lYAPp8OlJt9P_g-wJec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.193.0-91.90.195.255
92.118.149.0-92.118.151.255
185.253.46.0/23
IPv6:
2a0a:8c41::-2a0a:8c45:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:18:ea:12:71:a9:49:6a:25:b7:70:dd:6a:cf:5b:73:2b:4e:
6a:49:a3:81:16:5b:fa:09:0d:1e:00:61:eb:9e:a6:c3:ec:db:
29:7c:a7:67:74:2e:5f:db:2d:25:25:47:33:25:2c:d9:78:62:
8c:34:ab:5d:41:ac:6d:d0:4f:07:82:24:11:86:77:f2:6f:36:
f3:7c:c5:13:aa:5d:78:6e:d6:5e:87:92:0b:62:ec:de:8a:03:
c8:3a:f7:e4:1a:b2:fa:26:5e:73:51:ed:26:11:48:6e:92:35:
65:f2:14:70:fd:71:45:4a:da:f6:57:d0:95:26:88:57:41:d4:
2c:9b:cc:f5:5d:53:49:4c:88:be:bf:ab:60:5c:80:3b:12:8b:
fa:6b:a6:fb:1a:20:00:38:9d:2e:19:ad:1f:9b:00:8b:df:10:
03:46:d7:0e:4c:9d:fd:51:99:46:ad:b9:1a:aa:9e:fd:db:59:
27:75:24:83:8f:ca:d6:64:2f:ce:c9:87:fe:c2:23:7d:de:a1:
9d:78:46:61:51:d9:dc:be:22:3e:96:ec:85:ef:c6:41:68:56:
7e:09:49:39:c8:51:78:96:af:43:0e:0b:46:09:d0:99:21:e6:
b7:2d:e2:72:64:51:09:df:a2:7b:1e:5b:59:32:59:0c:c0:ba:
08:b3:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:53:20 2025 by rpki-client