Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/ZiY3fC8XiMC1Q0o1A9PYow7q_tM.roa
File: ZiY3fC8XiMC1Q0o1A9PYow7q_tM.roa (raw, json)
Hash identifier: 3DjiFQ+KEMy9/PQ6dzl2l0Nm1cSfWoxbYkGAsZi2k70=
Subject key identifier: 66:26:37:7C:2F:17:88:C0:B5:43:4A:35:03:D3:D8:A3:0E:EA:FE:D3
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 01856E2F963B24C99186A9E84C2C1743C775
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/ZiY3fC8XiMC1Q0o1A9PYow7q_tM.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199993
IP address blocks: 185.39.210.0/24 maxlen: 24
185.39.208.0/24 maxlen: 24
185.39.209.0/24 maxlen: 24
2a04:6d81::/32 maxlen: 32
2a04:6d82::/32 maxlen: 32
2a04:6d80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:96:3b:24:c9:91:86:a9:e8:4c:2c:17:43:c7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6626377c2f1788c0b5434a3503d3d8a30eeafed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:b9:3e:19:78:22:cb:84:cf:5e:74:29:90:
c2:ca:45:17:c0:23:4c:09:8a:f8:99:40:03:06:8e:
26:e0:da:e0:b1:62:43:3f:82:88:db:25:85:eb:d3:
8c:c9:b9:7f:ce:d4:41:0d:71:68:d3:6e:ab:d8:be:
56:5c:46:34:d3:1a:a8:ec:fd:38:e5:e5:0e:7a:5e:
c1:dc:d7:5f:98:01:f5:3d:77:5b:a0:c1:0d:3d:b6:
61:ae:f7:1b:34:85:7a:4d:38:ad:ab:ce:f4:4f:dc:
03:32:3d:3f:25:25:c4:37:c5:9c:65:bd:ec:a0:43:
d2:77:d2:18:f9:dd:6a:18:76:c2:20:3f:40:20:4c:
69:5b:c5:4d:fe:1a:97:cc:4a:75:75:c9:4e:8a:34:
97:b3:a7:bc:fc:cf:67:1f:07:2a:77:4b:0e:bd:94:
10:fd:64:fa:28:41:1b:fc:d6:6c:d0:12:0a:4c:49:
92:ba:de:cb:36:38:3c:35:cd:57:a5:6a:a4:3a:c8:
a6:08:26:af:2c:5d:eb:49:dd:a1:bd:7a:12:91:db:
66:24:5b:84:1a:d6:a4:c9:eb:e4:d7:22:41:3e:4e:
eb:77:04:ab:15:cf:01:ef:2a:69:5b:4e:7f:fb:eb:
4c:97:c3:6e:90:65:31:82:23:d8:61:08:ac:86:3a:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:37:7C:2F:17:88:C0:B5:43:4A:35:03:D3:D8:A3:0E:EA:FE:D3
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/ZiY3fC8XiMC1Q0o1A9PYow7q_tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.208.0-185.39.210.255
IPv6:
2a04:6d80::-2a04:6d82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:31:12:22:10:35:2a:41:17:c3:6c:57:e2:3b:85:de:11:43:
be:bd:2c:d9:73:b2:21:aa:43:5f:2c:a0:ba:f5:49:8c:38:60:
07:10:ce:10:c9:7d:7f:6a:42:b7:d2:a1:a5:81:17:4b:7c:b7:
88:ef:24:64:c9:06:e7:1d:a2:62:13:4d:93:15:2e:c6:e6:be:
47:5d:49:ee:81:a1:53:6d:a1:cf:f1:8f:ae:a9:bf:e5:07:14:
78:42:64:b3:1a:72:b9:e2:c0:05:7e:a8:1c:51:75:bd:36:d9:
98:21:99:16:18:8c:a9:1d:f9:25:ef:0d:cf:a5:0e:bb:81:aa:
41:7d:0a:88:27:e5:71:b4:bd:e0:b2:c0:c3:24:24:87:1b:2b:
0f:15:60:6b:25:bc:ec:c8:43:9a:44:76:b9:ed:55:7e:55:d0:
88:24:51:ae:51:a4:96:c9:a8:71:8a:49:21:51:87:fa:04:7a:
0a:59:7f:82:cf:eb:83:68:1b:a6:e8:f9:5e:75:e1:8d:fd:75:
2f:31:91:8c:6a:d6:3f:16:28:01:fc:c2:4c:1d:5c:a3:a5:75:
b0:07:04:39:2e:e8:6e:e6:77:46:b9:0a:84:c4:1f:90:e0:f7:
43:19:cb:57:f1:e7:4c:60:60:4a:38:c4:fc:7a:8e:67:15:25:
c7:17:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:39 2025 by rpki-client