Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/zvNJb1-8OM0spG66PG2BmKdsIdw.roa
File: zvNJb1-8OM0spG66PG2BmKdsIdw.roa (raw, json)
Hash identifier: b4ifAB0zTBu58XYTvh8MxpZw/19TsES5lTg4HPOJHxo=
Subject key identifier: CE:F3:49:6F:5F:BC:38:CD:2C:A4:6E:BA:3C:6D:81:98:A7:6C:21:DC
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0602627B
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/zvNJb1-8OM0spG66PG2BmKdsIdw.roa
Signing time: Sat 01 Jan 2022 16:01:20 +0000
ROA not before: Sat 01 Jan 2022 16:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207274
IP address blocks: 185.36.140.0/23 maxlen: 24
185.225.204.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100819579 (0x602627b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef3496f5fbc38cd2ca46eba3c6d8198a76c21dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:23:b7:14:c7:55:de:f6:48:72:fc:91:c4:3b:
84:3e:f0:21:79:4e:88:19:ad:c1:63:f6:54:2f:4f:
26:8b:bb:6d:38:71:ed:90:d0:13:d4:7c:ed:fd:4b:
d6:18:61:7a:ce:0e:18:8f:5b:22:63:40:7f:0a:7f:
3d:9e:a7:ef:5e:c3:b7:21:54:84:fc:3c:07:81:69:
fa:7a:6e:bd:8e:d1:ec:a0:62:5d:d3:33:ea:7c:ee:
48:7d:00:2b:67:c4:89:0c:5d:e3:82:14:b1:74:1d:
c5:b0:4d:88:ac:be:20:b0:b4:b3:82:68:7d:7e:91:
27:c3:08:94:fe:4a:c4:42:1f:c7:e2:60:3d:c0:fe:
d9:3f:bf:0f:1c:ce:8e:70:7b:74:92:e8:4f:24:37:
95:31:0a:a4:4b:5d:57:8d:b4:4c:4d:d5:11:b2:4f:
78:29:b4:7e:1e:fa:4b:d9:d2:61:8c:e4:9f:a7:a7:
20:b9:0d:a0:e6:1d:f8:a7:73:80:80:42:a5:cf:05:
b6:45:d0:23:b9:db:61:54:c7:9c:d5:cc:53:91:51:
a9:db:f4:9f:c8:73:af:44:72:fb:33:73:1b:19:d5:
68:b8:f4:f2:81:ae:78:37:a1:8c:38:32:53:fd:fd:
be:3a:c8:3d:86:8a:d8:b7:36:45:e0:77:10:f8:83:
2b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:49:6F:5F:BC:38:CD:2C:A4:6E:BA:3C:6D:81:98:A7:6C:21:DC
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/zvNJb1-8OM0spG66PG2BmKdsIdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.140.0/23
185.225.204.0/23
Signature Algorithm: sha256WithRSAEncryption
31:19:42:85:8b:f5:c3:b2:b2:27:49:b5:a2:c0:ec:ad:85:14:
16:5e:fa:9b:db:c1:e4:68:28:74:49:ef:28:c3:c7:45:ef:3e:
82:1d:89:0c:d4:74:56:c8:3a:44:d2:7e:d2:a8:26:ed:47:52:
94:7e:f6:41:a3:41:15:d7:ed:ae:2c:4f:0f:32:55:5d:fa:cb:
07:69:37:e7:cf:4f:8d:94:27:17:95:74:85:1a:06:6e:75:c8:
72:c1:f2:42:09:14:07:19:30:91:dc:fd:c0:ef:61:27:82:27:
45:49:3b:82:8f:42:bc:b6:8a:05:14:8b:40:9e:98:d1:2b:cf:
f7:f7:d3:93:e3:8b:44:29:c6:a9:b6:16:f3:a4:dd:dd:64:da:
fe:4c:0e:0a:22:df:fa:52:ef:4e:be:93:b4:8a:df:a9:d2:f0:
3d:97:82:0f:f0:c5:07:bb:e6:1e:33:d2:f0:e7:a0:df:8e:47:
bf:3f:46:e6:35:bd:2b:ca:be:94:76:a8:42:c7:fa:aa:a5:15:
55:6c:6b:9b:2b:74:e4:89:55:59:ff:41:82:82:a3:30:c0:5b:
dc:cb:d9:5a:e4:8d:64:a5:e0:57:41:a0:92:9f:35:d2:82:6d:
e6:ab:d2:f0:43:7b:68:5c:30:9b:42:e9:e4:c3:c3:3d:0b:81:
42:fd:42:a9
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBgJiezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NjZkOWQ1MGIzYjg5ZDUxYzhhYTI0OTNlN2VmNDcwMWQ2MjUxZGFkMB4XDTIyMDEw
MTE2MDEyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VmMzQ5NmY1ZmJj
MzhjZDJjYTQ2ZWJhM2M2ZDgxOThhNzZjMjFkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOsjtxTHVd72SHL8kcQ7hD7wIXlOiBmtwWP2VC9PJou7bThx
7ZDQE9R87f1L1hhhes4OGI9bImNAfwp/PZ6n717DtyFUhPw8B4Fp+npuvY7R7KBi
XdMz6nzuSH0AK2fEiQxd44IUsXQdxbBNiKy+ILC0s4JofX6RJ8MIlP5KxEIfx+Jg
PcD+2T+/DxzOjnB7dJLoTyQ3lTEKpEtdV420TE3VEbJPeCm0fh76S9nSYYzkn6en
ILkNoOYd+KdzgIBCpc8FtkXQI7nbYVTHnNXMU5FRqdv0n8hzr0Ry+zNzGxnVaLj0
8oGueDehjDgyU/39vjrIPYaK2Lc2ReB3EPiDK4kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTO80lvX7w4zSykbro8bYGYp2wh3DAfBgNVHSMEGDAWgBTGbZ1Qs7idUciq
JJPn70cB1iUdrTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3htMmRVTE80blZISXFpU1Q1LTlIQWRZbEhhMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTUvNGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8x
L3p2TkpiMS04T00wc3BHNjZQRzJCbUtkc0lkdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTUv
NGJiNzRiLThkNmQtNDUxNC1hMzljLWI3YzU3OGI3NGUzNS8xL3htMmRVTE80blZI
SXFpU1Q1LTlIQWRZbEhhMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbkkjAMEAbnhzDANBgkqhkiG9w0B
AQsFAAOCAQEAMRlChYv1w7KyJ0m1osDsrYUUFl76m9vB5GgodEnvKMPHRe8+gh2J
DNR0Vsg6RNJ+0qgm7UdSlH72QaNBFdftrixPDzJVXfrLB2k3589PjZQnF5V0hRoG
bnXIcsHyQgkUBxkwkdz9wO9hJ4InRUk7go9CvLaKBRSLQJ6Y0SvP9/fTk+OLRCnG
qbYW86Td3WTa/kwOCiLf+lLvTr6TtIrfqdLwPZeCD/DFB7vmHjPS8Oeg345Hvz9G
5jW9K8q+lHaoQsf6qqUVVWxrmyt05IlVWf9BgoKjMMBb3MvZWuSNZKXgV0Ggkp81
0oJt5qvS8EN7aFwwm0Lp5MPDPQuBQv1CqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org