Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/ZztjAkN7SbJIGVdHIl_NAjVfmYY.roa
File: ZztjAkN7SbJIGVdHIl_NAjVfmYY.roa (raw, json)
Hash identifier: tgXCJSPEvKwvQ08gg/3498WddvhgKVUbiKSLu4qgyRU=
Subject key identifier: 67:3B:63:02:43:7B:49:B2:48:19:57:47:22:5F:CD:02:35:5F:99:86
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018587EB9BFB45FC051508ED5307A23BEC9A
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/ZztjAkN7SbJIGVdHIl_NAjVfmYY.roa
Signing time: Fri 06 Jan 2023 16:30:43 +0000
ROA not before: Fri 06 Jan 2023 16:30:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13280
IP address blocks: 95.83.192.0/18 maxlen: 24
89.204.160.0/19 maxlen: 24
89.204.160.0/20 maxlen: 24
31.200.128.0/18 maxlen: 24
89.204.192.0/18 maxlen: 24
92.251.240.0/21 maxlen: 24
185.60.124.0/22 maxlen: 24
213.191.224.0/19 maxlen: 24
178.167.128.0/17 maxlen: 24
95.83.229.0/24 maxlen: 24
92.251.128.0/17 maxlen: 24
62.40.32.0/19 maxlen: 24
80.233.0.0/17 maxlen: 24
83.136.40.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:eb:9b:fb:45:fc:05:15:08:ed:53:07:a2:3b:ec:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 6 16:30:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=673b6302437b49b248195747225fcd02355f9986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:6f:71:76:ed:e7:55:1c:53:7f:2e:1d:08:
8b:0a:1e:b8:b2:b9:3a:4b:11:54:31:20:56:29:59:
78:b3:2f:c3:86:71:63:e2:85:8f:6f:8a:6b:e3:42:
0f:93:7b:6a:29:b4:00:4c:f7:ce:bd:7a:94:eb:1a:
f8:b7:89:c8:a2:a5:0e:79:0f:b1:37:36:7d:39:3a:
02:6b:58:41:cd:ec:64:ae:ef:9d:fd:ad:2c:44:87:
32:a0:c2:9f:83:1e:5e:02:8a:23:d5:25:4e:6e:cc:
6f:36:ed:e4:a0:ea:b7:f3:70:71:c3:11:50:b2:55:
7c:88:47:47:a0:e7:71:8a:6f:71:44:4e:1e:21:9b:
44:ba:75:da:82:02:6b:4d:b6:ef:6b:18:43:38:25:
a2:99:0f:fc:fb:30:4f:98:45:50:db:32:bb:61:20:
d6:d4:fe:c3:b6:19:6d:22:93:98:6e:c6:8a:22:58:
a6:78:6a:cb:4b:25:26:52:8c:05:b0:dc:16:bc:8d:
af:4f:4d:bc:e9:26:6e:39:0c:ff:8b:c0:6b:9c:bb:
11:dc:5d:3d:93:b5:7c:02:5a:8b:de:ec:dd:60:b4:
df:77:6a:c0:a4:0f:09:a6:83:72:5c:45:7f:c4:11:
86:7c:aa:2b:bc:7c:39:31:b7:15:91:15:f5:7c:5b:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3B:63:02:43:7B:49:B2:48:19:57:47:22:5F:CD:02:35:5F:99:86
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/ZztjAkN7SbJIGVdHIl_NAjVfmYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.128.0/18
62.40.32.0/19
80.233.0.0/17
83.136.40.0/21
89.204.160.0-89.204.255.255
92.251.128.0/17
95.83.192.0/18
178.167.128.0/17
185.60.124.0/22
213.191.224.0/19
Signature Algorithm: sha256WithRSAEncryption
52:96:36:09:18:4f:e2:fc:ef:89:a7:d8:25:84:21:68:f8:1c:
d0:6d:5f:42:60:07:46:88:e4:50:07:66:06:b4:dc:7b:0a:e5:
10:62:80:27:98:42:1d:a5:12:0c:4f:79:ab:cf:cd:89:0c:d5:
e5:6d:ea:cf:e3:5f:58:f1:a4:f8:47:1f:ff:00:bb:c2:8c:e4:
63:16:c7:5b:34:ff:23:f5:37:e7:b4:48:4f:b4:48:b0:91:11:
ec:06:6e:a6:26:9c:cb:60:9f:99:ee:8a:ff:43:bb:31:fb:eb:
74:c1:30:55:da:e3:a7:9f:35:44:3d:23:a0:ff:f3:6d:b6:a9:
3e:f0:af:1a:8b:86:cc:bf:ad:b2:37:5d:b1:aa:d4:c1:29:d8:
f3:74:d5:2a:c4:e6:0b:21:d6:a8:71:55:25:74:b5:5b:3f:9b:
f9:ab:91:ab:27:16:f4:ab:81:94:28:fa:22:d2:43:23:b3:bc:
b0:13:29:50:df:c8:9e:f1:f5:57:6b:df:8d:ca:33:91:53:27:
a2:39:1b:b6:b2:96:e1:24:44:dd:54:e9:1c:0a:3c:f2:34:09:
d7:c6:f5:ed:14:65:ad:3a:01:23:96:08:4b:45:4c:e8:82:bc:
ed:59:db:10:c1:04:21:7f:0e:f6:e1:26:8b:e8:1b:78:77:ca:
d9:b3:96:1c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 16:52:21 2025 by rpki-client