Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/zc_zyHqtcgV9RHx1lqJPbztBYuw.roa
File: zc_zyHqtcgV9RHx1lqJPbztBYuw.roa (raw, json)
Hash identifier: s5QdKdVdwFIUWhF8rEMg691e1kUzFbuquw5gdR++MpQ=
Subject key identifier: CD:CF:F3:C8:7A:AD:72:05:7D:44:7C:75:96:A2:4F:6F:3B:41:62:EC
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 050893B8
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/zc_zyHqtcgV9RHx1lqJPbztBYuw.roa
Signing time: Sat 01 Jan 2022 01:54:33 +0000
ROA not before: Sat 01 Jan 2022 01:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62013
IP address blocks: 185.162.140.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84448184 (0x50893b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Jan 1 01:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdcff3c87aad72057d447c7596a24f6f3b4162ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:5b:1b:2c:81:27:11:8a:11:09:ba:7a:06:
08:15:95:26:a9:74:76:7d:8f:14:38:50:b5:fc:65:
a4:b5:1d:1f:38:98:b1:cf:46:d0:c0:7c:47:1a:a9:
da:c2:79:c7:36:9e:f6:6c:99:93:ef:36:8f:36:6d:
08:78:20:ab:b7:a7:cd:d3:94:93:29:9e:59:a2:b1:
ad:37:67:59:3a:97:de:a4:04:55:d4:00:e1:05:0f:
9f:72:3b:6e:98:cf:f3:44:e6:22:c9:08:f9:60:8e:
2c:7b:5c:cc:01:57:9f:7d:7f:b2:a3:ae:1f:31:3c:
cc:18:6b:03:05:4d:de:74:49:e6:4a:e3:07:f0:99:
90:0f:b5:95:38:5d:da:6d:4b:f7:1e:fa:e4:9d:08:
1b:73:60:47:00:ce:31:af:36:61:d9:b0:56:2c:ce:
31:7d:43:21:58:22:23:51:23:ba:71:bd:72:a6:29:
c3:79:ff:b7:67:d7:33:cc:77:47:1a:03:41:08:f2:
c6:fb:10:8c:d6:7a:50:48:53:e0:1f:73:cd:a3:4c:
c4:5c:92:83:0d:3a:11:e9:39:5f:d6:b2:e9:1b:05:
23:3a:a3:8e:49:9b:ca:c5:79:b6:5f:a4:64:51:57:
82:bb:2c:37:e3:9f:3d:0d:21:eb:14:af:a4:a3:18:
e7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:F3:C8:7A:AD:72:05:7D:44:7C:75:96:A2:4F:6F:3B:41:62:EC
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/zc_zyHqtcgV9RHx1lqJPbztBYuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:84:bb:45:d4:37:1c:1b:80:26:88:7c:f3:90:bd:0f:04:1f:
cd:36:8b:c0:f1:f2:9c:31:ee:ae:45:8f:e7:e0:f4:01:0d:18:
8f:c6:0f:d1:ab:33:82:49:7a:bd:c6:49:c3:87:e2:44:8a:ac:
2b:fe:ca:2e:1f:6c:23:27:38:79:3e:a4:e2:84:fc:10:d6:26:
ac:6f:05:28:26:6e:2f:d4:d4:fe:ab:ac:c0:b5:2e:3b:e1:f8:
07:fd:bb:02:79:22:dc:c3:04:1b:1f:f6:57:62:25:53:c0:89:
3b:5f:b4:4a:02:3e:84:f1:89:98:63:be:e0:4d:66:04:32:19:
54:70:0e:c2:57:68:86:0d:ed:2c:b2:2e:24:d7:53:d5:dc:53:
1a:2e:25:71:1a:99:1b:67:91:e3:95:d2:a7:2b:7b:8b:55:04:
a3:2b:7e:b4:8e:f7:2e:9e:ca:b9:25:c7:13:e0:55:6f:45:d6:
80:82:29:13:d8:3a:a0:1f:61:3a:92:45:4b:3c:30:23:7e:55:
1e:00:8b:f2:75:da:42:f0:e6:d8:5c:2c:01:61:8a:1a:55:c2:
19:b0:13:39:45:3b:1f:12:87:04:56:0f:5d:d1:c6:6a:15:d4:
c9:20:70:04:83:3c:67:81:a8:32:27:c9:ba:2b:05:11:b2:b7:
05:f1:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:30:07 2025 by rpki-client