Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/ZslB0P_AXLh6oMMoXHezlIdDUys.roa
File: ZslB0P_AXLh6oMMoXHezlIdDUys.roa (raw, json)
Hash identifier: VOKgowN8woypr3f0gwIxXFQqjYXx1gIowTxIbqoENh8=
Subject key identifier: 66:C9:41:D0:FF:C0:5C:B8:7A:A0:C3:28:5C:77:B3:94:87:43:53:2B
Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Certificate serial: 06D8DFB8
Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/ZslB0P_AXLh6oMMoXHezlIdDUys.roa
Signing time: Sat 01 Jan 2022 14:01:22 +0000
ROA not before: Sat 01 Jan 2022 14:01:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1921
IP address blocks: 185.80.190.0/24 maxlen: 24
185.80.191.0/24 maxlen: 24
185.80.188.0/24 maxlen: 24
185.80.189.0/24 maxlen: 24
2a05:7f00:188::/48 maxlen: 48
2a05:7f00:190::/48 maxlen: 48
2a05:7f00:189::/48 maxlen: 48
2a05:7f00:191::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114876344 (0x6d8dfb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7
Validity
Not Before: Jan 1 14:01:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66c941d0ffc05cb87aa0c3285c77b3948743532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:27:7c:d5:62:83:3a:7c:4d:84:f3:ac:98:24:
34:bf:ce:28:96:58:b5:9d:f9:6d:2b:45:93:f7:5c:
64:bd:f9:49:e8:35:9f:19:2e:c2:94:2b:d2:5a:70:
d9:92:5f:76:ad:7d:6b:d7:6c:0c:9c:dc:95:54:d4:
36:57:0e:2d:cd:bf:78:8e:38:0d:64:bf:10:33:da:
12:fc:d4:4a:22:f3:38:ac:86:d1:98:3a:91:90:fe:
1b:09:6d:2f:13:d6:c2:7b:d5:b4:55:12:97:ca:45:
ed:9d:9d:ca:90:1b:e1:e6:85:65:17:6c:8e:04:21:
a1:13:7d:05:69:76:75:ee:18:85:27:f5:e1:a2:e5:
fb:42:6a:32:1d:52:78:f7:b3:2e:3c:ec:17:00:46:
f4:b6:fb:77:f9:35:17:9d:5d:92:a0:76:68:f8:27:
c9:b7:e2:b1:75:ab:d4:1c:e9:46:11:b1:78:88:03:
cd:5b:7a:02:6d:81:b2:f2:8f:e1:c2:64:18:48:ce:
03:3f:ab:88:26:64:b6:2a:ef:28:b3:27:ec:39:43:
6a:0a:9b:ea:e3:f2:62:cd:1e:1a:40:c1:b2:85:f3:
89:f4:1e:de:c6:fa:16:c4:64:67:5a:20:8e:11:12:
d5:83:da:cb:b1:1f:5f:f0:4c:ee:51:33:02:d2:a9:
df:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C9:41:D0:FF:C0:5C:B8:7A:A0:C3:28:5C:77:B3:94:87:43:53:2B
X509v3 Authority Key Identifier:
keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/ZslB0P_AXLh6oMMoXHezlIdDUys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.188.0/22
IPv6:
2a05:7f00:188::/47
2a05:7f00:190::/47
Signature Algorithm: sha256WithRSAEncryption
6a:cb:02:89:d1:20:61:22:e4:eb:c5:08:53:17:be:80:30:ef:
93:58:32:c4:6a:1d:9e:d0:24:1e:d3:d8:49:c0:c3:6e:d9:6b:
27:60:1f:53:67:a5:59:5b:25:65:60:74:2f:6e:1e:aa:83:62:
10:35:75:1c:62:e4:be:66:58:a5:e4:37:af:6d:81:71:4c:2e:
2d:49:71:4e:53:ec:69:d4:f7:15:c1:05:5e:f2:41:d6:5e:a8:
e4:60:08:10:d5:de:f1:b4:f8:a6:fe:00:bb:23:34:93:f2:5e:
36:bc:a8:74:28:f4:db:98:97:01:50:01:5a:28:53:fd:8e:18:
74:84:7e:67:9e:f0:40:13:c2:fb:2e:a2:ec:71:d0:f0:06:b4:
b1:ff:05:4d:bd:81:7e:19:f1:22:94:d8:02:d9:22:ba:8f:69:
6c:5e:96:77:f4:ba:24:c4:20:db:a9:1e:95:73:38:36:06:53:
e2:1b:64:8d:85:b9:be:f0:69:41:6a:4f:e1:03:59:c3:86:bd:
5c:bf:e4:06:85:16:75:62:74:a3:6d:70:7e:43:20:21:f4:98:
30:f3:1d:62:0d:ed:2a:fc:24:88:72:19:e6:fc:fc:bd:a3:21:
06:36:6f:da:37:99:fb:e8:ac:14:3b:93:f4:ce:33:29:6c:c5:
7a:ff:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:34 2023 by rpki-client on console-fra.rpki-client.org