Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/Z8o48BDv2RIIc3QykkguAs31c8Q.roa
File: Z8o48BDv2RIIc3QykkguAs31c8Q.roa (raw, json)
Hash identifier: ZIR8unCvQUrfhUldtNkVTr+mooNYTks8hk/Yc7nS/AY=
Subject key identifier: 67:CA:38:F0:10:EF:D9:12:08:73:74:32:92:48:2E:02:CD:F5:73:C4
Certificate issuer: /CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Certificate serial: 1829527F
Authority key identifier: C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/Z8o48BDv2RIIc3QykkguAs31c8Q.roa
Signing time: Sat 01 Jan 2022 02:54:48 +0000
ROA not before: Sat 01 Jan 2022 02:54:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206063
IP address blocks: 185.39.252.0/24 maxlen: 24
185.39.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405361279 (0x1829527f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cd38d1d1c4a23053cd997163318d649a7b2a57
Validity
Not Before: Jan 1 02:54:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67ca38f010efd9120873743292482e02cdf573c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:06:18:d7:61:c2:70:6d:83:f4:b7:99:56:
1b:f3:95:56:36:a4:d2:bc:fa:7f:ca:ed:18:f3:48:
b5:a1:94:ab:22:f2:87:e9:82:5c:02:73:c8:36:2b:
25:dd:d8:e0:b9:9d:b9:8b:ed:dd:01:fd:74:3e:5a:
da:71:b6:20:ce:0f:a8:d7:d0:f0:02:9a:b0:8a:a6:
b6:9c:7f:19:ac:a4:1e:79:10:00:d2:9a:55:83:bc:
e3:06:dd:47:95:78:b8:76:7d:79:60:30:59:d1:bf:
7e:a7:25:05:9c:27:fd:cf:c7:27:f7:be:59:f3:d9:
c5:05:28:3a:b0:e3:1b:ab:e2:23:a0:29:fc:bd:67:
53:33:37:2f:be:b7:c3:3d:37:4f:65:d0:13:f8:4f:
86:77:cc:c1:79:99:e9:32:b1:9d:9c:a7:7b:57:9f:
93:8e:59:d3:fc:e0:3c:77:59:ae:9e:17:eb:6d:97:
cc:d2:1a:ea:46:79:5b:cc:e0:34:f1:0f:1a:af:11:
4e:9a:67:fd:b2:03:5c:03:db:48:b1:2e:2e:82:ff:
89:97:58:7b:9f:00:11:8d:e2:72:54:f8:b9:f8:e0:
fa:e9:46:21:8a:cc:88:8d:e1:c4:9b:b7:01:2a:94:
e3:33:46:00:79:f3:49:d0:cb:88:c7:f2:65:01:49:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CA:38:F0:10:EF:D9:12:08:73:74:32:92:48:2E:02:CD:F5:73:C4
X509v3 Authority Key Identifier:
keyid:C9:CD:38:D1:D1:C4:A2:30:53:CD:99:71:63:31:8D:64:9A:7B:2A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc040dHEojBTzZlxYzGNZJp7Klc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/Z8o48BDv2RIIc3QykkguAs31c8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/22e49d-6953-4fc8-a896-c5c358837a84/1/yc040dHEojBTzZlxYzGNZJp7Klc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.252.0/24
185.39.254.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:2a:0e:dc:5b:87:10:a2:3f:b0:0e:a4:de:c2:49:6a:09:61:
76:bb:16:a8:dc:5a:4b:71:43:bb:0f:89:3a:c9:15:56:fd:d2:
9a:2a:a4:d5:c8:33:fc:07:e2:54:4c:a3:70:48:27:c1:42:ab:
cc:c7:c3:f8:0e:ef:9d:8f:14:66:78:e4:e5:c3:bd:db:9f:89:
f4:42:5c:21:5f:0c:d9:6d:17:87:a6:db:6e:13:4e:32:c4:fe:
85:d4:e0:60:97:8f:df:17:ef:93:25:e4:11:cb:ac:0e:64:2c:
27:5d:b6:a9:75:54:9b:66:7a:76:25:f4:88:8d:92:c3:3c:fa:
02:58:1c:91:ac:40:94:97:3f:a0:20:77:5b:6f:4a:c4:c2:07:
04:b5:ef:cb:1e:8b:87:6e:ba:a1:a5:f3:4d:92:0e:1b:0b:11:
0b:22:3f:bf:bb:8f:40:64:16:87:e5:db:cb:1b:ff:77:9f:0f:
e1:8e:6f:13:b4:d8:55:ae:02:c0:f7:26:53:cf:33:8c:a1:4d:
85:bd:5b:1e:e1:b0:e3:26:2c:43:90:13:a4:88:0f:54:2a:77:
af:75:4d:79:c4:0d:a8:63:d3:39:25:f9:5b:d1:0f:84:d4:7c:
76:dd:c3:9f:e0:62:b2:e9:8c:c1:a0:51:c7:ec:98:be:30:1d:
cc:8d:5a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:15:29 2025 by rpki-client