Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/zZz2S5zLyNQ8HdzFZc6GFoLsD-s.roa
File: zZz2S5zLyNQ8HdzFZc6GFoLsD-s.roa (raw, json)
Hash identifier: 2HSD0Gs5eIw3mX5t4H7Hd4UbgnXhBdJ/86m/POGwV8k=
Subject key identifier: CD:9C:F6:4B:9C:CB:C8:D4:3C:1D:DC:C5:65:CE:86:16:82:EC:0F:EB
Certificate issuer: /CN=24b086f4824266384e078cf777375f21bd370b70
Certificate serial: 06FAB44D
Authority key identifier: 24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/zZz2S5zLyNQ8HdzFZc6GFoLsD-s.roa
Signing time: Tue 24 May 2022 08:53:13 +0000
ROA not before: Tue 24 May 2022 08:53:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62382
IP address blocks: 193.143.96.0/24 maxlen: 24
185.37.191.0/24 maxlen: 24
185.37.188.0/22 maxlen: 22
185.37.189.0/24 maxlen: 24
185.37.188.0/24 maxlen: 24
80.72.219.0/24 maxlen: 24
80.72.218.0/24 maxlen: 24
80.72.217.0/24 maxlen: 24
80.72.216.0/21 maxlen: 21
80.72.216.0/24 maxlen: 24
80.72.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117093453 (0x6fab44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b086f4824266384e078cf777375f21bd370b70
Validity
Not Before: May 24 08:53:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd9cf64b9ccbc8d43c1ddcc565ce861682ec0feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:fc:4d:57:64:0a:bf:a3:ba:e4:5e:14:c3:
36:3b:fa:af:89:4f:9b:77:7d:4a:56:90:5f:88:85:
39:8a:c1:e0:92:6f:bb:6c:32:63:ed:56:8b:8e:7f:
53:5f:e0:a2:2f:8a:44:eb:15:08:85:4e:d4:7f:ba:
f7:b5:9b:49:81:6f:6e:aa:14:3b:c2:27:d3:ce:33:
79:7c:58:26:dc:4c:34:02:ca:06:34:98:c0:1e:8b:
9f:ed:32:63:64:ee:57:1a:ff:c3:96:07:73:7c:52:
d4:3b:74:e0:85:3d:8f:00:5a:b7:b9:2c:1d:34:a1:
f1:ea:ed:72:ee:16:78:d6:2b:45:52:4f:24:83:91:
90:64:32:f3:55:68:d5:d0:94:1b:02:a8:3d:12:41:
f6:e3:ad:13:8f:9e:93:0c:fc:85:d7:36:03:91:89:
61:de:f7:8e:64:ae:e0:22:b4:3c:13:e6:83:a3:f1:
9a:a7:3c:02:47:e4:08:7a:07:1e:5a:f6:b3:ec:44:
d4:62:59:e9:f3:d9:0c:43:a4:6a:ea:b4:8c:71:12:
ec:ff:ed:5a:09:5f:32:bd:37:f0:34:c6:bf:84:01:
04:2f:16:ca:e4:ec:ed:f7:da:bb:71:1b:c5:2d:40:
9a:70:32:ee:d9:c3:4d:cd:7f:e9:a4:d1:28:75:73:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:F6:4B:9C:CB:C8:D4:3C:1D:DC:C5:65:CE:86:16:82:EC:0F:EB
X509v3 Authority Key Identifier:
keyid:24:B0:86:F4:82:42:66:38:4E:07:8C:F7:77:37:5F:21:BD:37:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLCG9IJCZjhOB4z3dzdfIb03C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/zZz2S5zLyNQ8HdzFZc6GFoLsD-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee138f-5e63-4cc4-8e75-decb188a000d/1/JLCG9IJCZjhOB4z3dzdfIb03C3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.72.216.0/21
185.37.188.0/22
193.143.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2f:2b:bf:5a:b7:76:cb:88:26:76:21:cd:18:4f:66:d6:e7:
3b:08:60:b8:ee:9a:0e:35:bd:e3:4c:a7:94:e8:3a:3a:f0:d7:
8a:e1:6d:89:b2:c0:68:4c:c9:74:77:db:a3:49:52:a3:cf:3b:
a9:39:47:72:cd:94:58:ac:e2:2c:65:c1:d6:bf:a1:47:4e:c0:
de:13:e8:fd:8d:8d:40:ea:29:ec:f3:fc:e5:16:2b:cb:e3:b0:
79:ed:83:be:68:c2:cb:2e:b5:d2:b2:77:87:e1:9c:18:25:25:
b6:b0:fc:d4:b4:35:46:58:1f:56:ed:ad:e0:31:46:0b:53:f8:
0d:b6:4f:cf:1d:a3:48:0d:23:d5:13:71:6a:1e:c6:97:28:24:
d1:a1:31:d7:55:99:f7:5f:d1:a5:0a:70:48:c2:c9:85:66:b9:
c3:db:77:79:95:96:32:be:2f:2c:0f:65:54:ce:3d:bd:45:7c:
0f:91:4d:01:32:53:97:8b:7d:71:69:1e:76:68:06:da:26:3b:
b9:f9:65:f0:64:4c:7a:cf:0b:22:cc:a4:ef:ab:7e:65:1c:78:
19:3d:15:47:12:cb:41:41:e9:9c:a6:7d:7c:ba:67:e5:7c:8b:
ba:9e:6d:ed:f4:11:33:d3:00:08:7f:29:51:88:b1:ee:3b:9a:
93:d6:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:43 2025 by rpki-client