Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/ZABjxm99tamPzAyYfdqWpUCP6Pg.roa
File: ZABjxm99tamPzAyYfdqWpUCP6Pg.roa (raw, json)
Hash identifier: K4Aq/oaYYKPQNp6eoS4Qpaf9meF9jtVvo6e5V0AaN0Q=
Subject key identifier: 64:00:63:C6:6F:7D:B5:A9:8F:CC:0C:98:7D:DA:96:A5:40:8F:E8:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01856FF0533CEA7A10B99AD836CEE1EE1EDA
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/ZABjxm99tamPzAyYfdqWpUCP6Pg.roa
Signing time: Mon 02 Jan 2023 00:44:58 +0000
ROA not before: Mon 02 Jan 2023 00:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198203
IP address blocks: 185.157.209.0/24 maxlen: 24
185.157.210.0/24 maxlen: 24
185.157.211.0/24 maxlen: 24
185.157.208.0/24 maxlen: 24
2a03:afe1::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:53:3c:ea:7a:10:b9:9a:d8:36:ce:e1:ee:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 2 00:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=640063c66f7db5a98fcc0c987dda96a5408fe8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:9f:31:c4:50:07:da:8f:d3:ee:d1:49:84:
0a:e4:5b:8b:20:d4:72:69:c9:92:89:ef:d3:ab:7e:
3b:04:9a:9f:56:9e:04:d5:dd:89:84:d8:06:7e:68:
67:d6:80:48:fa:2b:ff:07:8c:cb:58:55:84:94:26:
e8:52:2a:d3:99:4e:a8:72:37:1d:a2:66:49:22:ec:
b3:fc:02:83:da:da:46:2e:cf:59:fa:32:d4:6a:68:
38:36:62:df:23:2e:4a:eb:02:67:7c:39:fb:2c:17:
b9:3d:00:7a:11:b7:f8:97:9f:56:93:56:c7:4e:e0:
ee:f4:ff:38:38:98:37:ec:f5:ff:8b:05:92:e3:98:
a1:ae:c5:b0:36:31:be:b8:55:28:92:d9:4d:8d:84:
cf:a2:17:a0:5c:b5:21:a5:f9:34:c9:b2:57:6b:19:
fb:3b:fa:38:7e:e5:59:05:cc:29:72:49:64:7e:14:
0f:4f:b4:28:ad:7d:b7:a0:83:9f:45:35:dd:1b:48:
c0:ae:34:ce:6e:47:2d:2f:7c:77:23:2c:9f:9e:0c:
0e:9c:61:4e:01:54:65:04:13:b2:4d:5d:2a:4d:06:
43:04:e3:12:c1:9d:aa:da:bf:c6:2a:8d:5f:81:66:
ae:88:a3:22:80:6d:a3:1e:97:be:65:52:05:6c:4f:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:63:C6:6F:7D:B5:A9:8F:CC:0C:98:7D:DA:96:A5:40:8F:E8:F8
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/ZABjxm99tamPzAyYfdqWpUCP6Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.208.0/22
IPv6:
2a03:afe1::/32
Signature Algorithm: sha256WithRSAEncryption
c2:f8:f7:10:f3:8a:65:56:04:8a:33:fe:15:da:21:2d:b3:66:
34:4d:5d:ab:53:24:7c:c5:93:8e:2c:31:01:2d:41:f5:6c:52:
63:95:93:3c:c8:ba:e8:ae:58:9d:61:3d:9d:55:31:92:4a:64:
a5:a0:ce:8a:e7:1b:c7:d0:1f:9e:62:d8:bf:ab:2d:63:33:11:
92:88:27:5a:a2:94:02:e1:d3:f3:07:9f:29:6c:d9:35:27:49:
a6:07:5b:0d:15:70:99:d9:f4:bb:ce:e8:fb:fb:7f:d1:52:10:
10:2a:e9:d7:e5:01:4e:2d:f3:72:1b:a3:e8:d6:89:c1:53:a8:
b1:20:9a:d7:68:5e:44:cb:04:6d:59:cc:89:c1:10:50:84:4b:
87:d5:88:53:78:d8:f1:2c:4e:d5:0e:d5:df:a2:5e:cb:49:5c:
3a:ac:94:25:db:c6:5f:10:55:0b:c6:fd:7b:f3:2c:19:26:ea:
ae:b6:5c:4f:d8:05:0a:b6:62:13:93:e4:f9:8b:3d:95:7b:7e:
dd:a2:d6:2b:d2:98:bb:86:a9:c3:a1:7b:e9:27:fe:28:3d:1c:
65:e5:88:f8:32:66:87:5a:84:65:30:1a:5a:2a:56:6f:71:ec:
c2:b5:23:da:7c:97:8f:1f:59:5a:dd:c1:49:6f:74:3d:85:f8:
06:22:79:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:25 2025 by rpki-client