Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/zOBViPFU_hRCjVY3PYHZMjBlql0.roa
File: zOBViPFU_hRCjVY3PYHZMjBlql0.roa (raw, json)
Hash identifier: aZjF1v/v8/UwMNHhH47KctlPBg+DdaG9lV9E1nhlwmg=
Subject key identifier: CC:E0:55:88:F1:54:FE:14:42:8D:56:37:3D:81:D9:32:30:65:AA:5D
Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Certificate serial: 04419D28
Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/zOBViPFU_hRCjVY3PYHZMjBlql0.roa
Signing time: Sat 01 Jan 2022 12:07:08 +0000
ROA not before: Sat 01 Jan 2022 12:07:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8426
IP address blocks: 185.146.92.0/22 maxlen: 22
2a07:4f40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71408936 (0x4419d28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb
Validity
Not Before: Jan 1 12:07:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cce05588f154fe14428d56373d81d9323065aa5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:fe:49:de:30:1c:28:cc:83:99:ee:43:59:
7f:a8:5b:5e:4c:a8:bd:75:cd:d5:79:e2:6c:67:c9:
e6:df:e5:17:9d:42:2a:22:4e:3d:36:e4:0e:d7:7b:
fb:66:29:5c:18:cc:42:de:87:f1:20:ca:01:d6:ae:
40:d4:8d:19:e2:15:81:75:f1:8b:1b:09:6d:7f:b6:
a7:ee:cc:7f:5a:73:f8:56:da:89:cf:08:f5:7c:91:
f4:f1:4d:73:32:d2:53:82:f4:cd:37:f6:1a:27:c4:
14:a4:ea:05:68:0a:73:05:6b:c9:a2:2c:74:34:45:
6f:35:40:18:d3:57:74:db:11:3f:4c:9f:39:f2:a4:
00:1a:d9:b3:b7:4a:63:0e:c5:88:c7:a8:dc:eb:b2:
8e:79:d7:ef:b3:8a:15:d3:7c:85:b4:d6:85:b1:33:
e7:d3:f2:9f:33:bb:01:d6:35:8a:b5:88:8c:e7:a0:
3e:24:d7:73:a4:4f:02:00:ec:9a:7b:dd:88:8c:2e:
83:69:cc:ac:2b:ce:83:7c:f6:d7:f3:67:8d:74:ee:
cc:8d:e4:37:2d:e0:61:0f:de:d3:23:71:13:0c:9e:
51:f9:90:ac:d3:91:d2:59:9d:68:e8:7a:de:eb:a5:
f0:60:66:39:45:74:1b:54:88:ce:74:f7:e5:d4:da:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:55:88:F1:54:FE:14:42:8D:56:37:3D:81:D9:32:30:65:AA:5D
X509v3 Authority Key Identifier:
keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/zOBViPFU_hRCjVY3PYHZMjBlql0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.92.0/22
IPv6:
2a07:4f40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:2d:69:45:db:f2:64:e0:b6:e9:b7:37:d4:3f:2b:04:7f:04:
b2:71:d2:4c:8b:a5:51:47:88:57:6f:d4:c6:96:c3:8c:5b:9c:
92:bb:8c:df:ed:af:0a:68:bd:24:c5:c2:f0:ec:35:b8:b0:c7:
44:6f:14:8e:d8:a3:dc:9a:2d:98:d2:aa:54:81:74:65:f1:9c:
76:91:18:2f:62:80:0d:24:3d:f7:ff:67:7e:f5:ef:0f:09:7c:
56:f3:83:bc:1c:a5:82:1e:61:87:0f:b8:cb:a8:d7:e3:c6:49:
fe:82:63:64:fb:a5:56:ca:18:74:9c:d3:82:a7:3c:f9:7f:85:
ae:99:dd:fe:cb:66:50:b7:b3:db:6d:94:e8:55:dd:c8:8c:5e:
57:be:64:d1:a7:3f:14:6a:9e:5e:0f:cf:e8:6e:e4:56:51:13:
57:c6:c1:c9:d0:da:18:0f:9b:1a:3e:3c:04:bd:fd:63:5b:37:
6a:72:f3:e2:a3:d6:b5:e6:11:1c:0b:47:8d:8d:a0:38:d7:23:
3d:63:f7:7a:b6:e5:20:da:b8:ba:bc:63:54:9e:f0:58:d8:25:
06:54:52:0f:eb:19:97:bc:77:f6:c8:72:80:d5:8c:e1:34:1c:
d0:4f:e0:db:56:87:17:a7:69:bd:d1:21:a9:a2:ce:ac:ef:c3:
d9:7e:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:24 2025 by rpki-client