Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/zTCLaclg17ZFCcq3kIOiBkY9yYE.roa
File: zTCLaclg17ZFCcq3kIOiBkY9yYE.roa (raw, json)
Hash identifier: VaYNtzIvAXAitMML5GSKbWBS4OgnMCYGL/3rnm/q784=
Subject key identifier: CD:30:8B:69:C9:60:D7:B6:45:09:CA:B7:90:83:A2:06:46:3D:C9:81
Certificate issuer: /CN=e7334ad9b3fc521030be99a5157211b663216c94
Certificate serial: 01C44517
Authority key identifier: E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/zTCLaclg17ZFCcq3kIOiBkY9yYE.roa
Signing time: Sat 01 Jan 2022 05:55:25 +0000
ROA not before: Sat 01 Jan 2022 05:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208649
IP address blocks: 185.75.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29639959 (0x1c44517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7334ad9b3fc521030be99a5157211b663216c94
Validity
Not Before: Jan 1 05:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd308b69c960d7b64509cab79083a206463dc981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:e9:a1:10:c3:4d:07:32:33:f7:2e:67:14:
e7:20:d8:23:26:9b:5d:66:5d:52:af:28:eb:e5:54:
19:0f:db:ef:fd:eb:fb:0e:34:36:de:15:21:f2:76:
8f:c9:5f:52:19:b3:77:26:69:80:04:35:74:d8:5e:
bf:80:b0:e0:35:63:01:80:c5:97:47:74:b8:50:3b:
12:de:07:b1:d1:a9:9d:d5:fd:24:63:49:83:63:ff:
83:fd:92:b3:67:b8:5a:ff:25:03:b7:2c:8d:cc:76:
36:ca:9a:47:65:eb:5e:dd:f1:38:cb:be:b5:ea:55:
a8:25:4b:ad:f5:a1:7a:e6:80:8d:1a:1c:ac:74:6a:
e4:a5:9c:a2:dc:52:e5:f1:75:47:80:04:3e:81:7c:
ea:6e:d3:17:34:32:d6:c4:e7:a0:3c:a3:a4:a0:57:
bf:67:ba:19:43:f1:66:32:08:bf:af:ed:e7:60:6e:
60:9d:d9:e4:44:fc:0b:d5:48:3e:dc:0e:a1:4f:c7:
ff:6c:75:0c:69:62:69:8d:6d:63:33:b9:02:a1:97:
60:b2:81:01:10:03:70:0b:70:c8:f7:66:18:cb:c1:
7f:10:40:6f:b8:0d:55:06:b8:94:9f:e4:9f:23:8f:
54:7f:47:be:ba:05:a2:cb:9c:7d:26:fc:54:c4:31:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:30:8B:69:C9:60:D7:B6:45:09:CA:B7:90:83:A2:06:46:3D:C9:81
X509v3 Authority Key Identifier:
keyid:E7:33:4A:D9:B3:FC:52:10:30:BE:99:A5:15:72:11:B6:63:21:6C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/zTCLaclg17ZFCcq3kIOiBkY9yYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b04b2e-73e6-4887-8df1-3722df073603/1/5zNK2bP8UhAwvpmlFXIRtmMhbJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
69:80:14:72:23:16:4f:6c:17:21:de:d3:8c:58:fb:61:7f:fb:
be:2c:c7:f8:0e:6e:97:87:23:e3:5a:f6:fc:98:09:b8:a6:76:
24:bd:f7:a0:84:a2:4d:f7:1c:d3:54:66:6c:f7:8c:4d:cc:95:
9b:da:91:a9:be:77:84:f4:40:a5:8e:0e:7c:4a:13:cf:fc:a5:
58:1c:3f:6c:a1:61:3e:1e:43:e1:b1:45:70:c1:54:52:cd:5f:
ec:b9:49:69:0a:0e:60:8d:03:31:20:7e:6c:a5:a7:37:61:8b:
00:68:47:d4:50:19:60:41:d2:9c:17:af:38:1f:e2:62:e9:f5:
d5:65:bc:12:8c:99:76:95:b6:a4:3d:76:4c:54:4f:c7:db:fc:
cb:a2:68:80:f1:de:c1:35:7f:e5:85:ac:d3:17:96:bb:49:4a:
f7:0d:58:66:90:eb:99:08:c0:d0:05:eb:49:61:c8:13:c6:97:
23:2b:47:65:62:79:67:f6:db:4a:c3:3a:5b:de:eb:b2:33:5b:
30:7d:59:19:b4:56:4c:7a:a3:15:a0:8f:2b:fd:88:b6:41:e4:
0b:f1:2a:d0:ad:04:c9:c6:01:f0:66:da:fd:07:99:35:38:58:
5b:53:33:43:ac:eb:d6:d4:34:b8:4e:e0:c9:b4:2f:5b:b5:a0:
53:7b:d1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:07 2025 by rpki-client