Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZVeT6n-hL2G2luC21T5WrlomIDM.roa
File: ZVeT6n-hL2G2luC21T5WrlomIDM.roa (raw, json)
Hash identifier: 0WYEMM447wnBE9x2smbzB618gqJBiI20QoIyB90Vo1A=
Subject key identifier: 65:57:93:EA:7F:A1:2F:61:B6:96:E0:B6:D5:3E:56:AE:5A:26:20:33
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018529D424F830CBA8A61791BCA359E74B4B
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZVeT6n-hL2G2luC21T5WrlomIDM.roa
Signing time: Mon 19 Dec 2022 10:00:46 +0000
ROA not before: Mon 19 Dec 2022 10:00:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205512
IP address blocks: 185.93.120.0/22 maxlen: 24
185.120.44.0/22 maxlen: 24
2a06:8f40::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:d4:24:f8:30:cb:a8:a6:17:91:bc:a3:59:e7:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Dec 19 10:00:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=655793ea7fa12f61b696e0b6d53e56ae5a262033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:74:e1:53:89:4b:c1:e3:e7:30:ed:da:c5:
e6:cf:89:80:f8:c9:76:0c:5c:81:a4:9e:ee:16:f4:
57:5f:6d:56:09:ab:ef:6b:a0:78:f9:28:96:f0:f3:
25:2a:27:93:fd:a5:98:4a:91:2b:36:9e:95:38:42:
7d:ef:06:27:6e:0f:d8:07:e2:f2:6c:21:4a:70:0a:
e5:e5:9c:13:24:ca:ab:9a:db:83:8b:92:c8:c5:85:
08:99:20:57:a6:a5:7c:49:47:2c:f5:43:7a:58:6c:
ed:84:18:78:dd:7f:53:e3:b5:ec:53:df:19:81:86:
c3:72:b4:95:cc:f6:15:2e:e6:d9:b3:67:57:9e:59:
7c:39:4b:1d:37:d1:2a:3d:94:56:82:b2:80:96:7c:
21:c2:a5:f0:32:46:e5:18:c2:52:7a:ca:ea:3c:f4:
15:46:c7:87:38:dc:00:68:dd:93:3b:1d:61:25:ac:
f5:1b:7b:04:6a:26:95:f7:95:6f:55:c7:b9:17:7a:
cb:e3:a5:0d:0f:cd:3c:f0:1a:b2:d9:a3:ba:a2:02:
9a:4f:c1:e8:87:42:41:93:3e:c2:a3:a7:7e:87:5d:
17:b7:8d:99:55:77:a1:b5:21:8d:b6:48:26:d4:59:
e3:c3:80:e5:ec:b1:e7:ce:f3:59:53:51:f4:80:bc:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:57:93:EA:7F:A1:2F:61:B6:96:E0:B6:D5:3E:56:AE:5A:26:20:33
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/ZVeT6n-hL2G2luC21T5WrlomIDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.120.0/22
185.120.44.0/22
IPv6:
2a06:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
7b:43:6d:3c:57:75:71:9b:b7:33:ae:de:ef:29:c1:a3:b5:8e:
7c:08:d1:be:4e:ee:be:93:22:e6:21:5e:8c:a2:f1:e9:54:e6:
df:2b:a6:82:22:a0:10:ab:55:6a:c6:41:bb:fa:51:b8:77:95:
e6:0b:32:85:b6:9b:52:36:07:c2:e4:27:29:60:40:f5:93:a9:
07:35:0a:ed:81:bf:90:dd:17:09:1a:be:8b:0b:3a:6f:5a:1b:
3c:9f:85:d2:93:6e:3f:80:a9:dc:98:2b:d2:36:3e:80:a7:c8:
ca:05:8f:4f:00:fd:dc:06:8b:fb:75:c7:39:27:3b:6e:89:21:
bc:2f:0f:b7:78:db:63:d7:e9:42:b0:ad:42:6d:38:33:82:e5:
b7:8d:9e:c3:f1:23:d9:bb:10:59:d4:db:ff:6f:98:07:8c:67:
7f:1c:b7:2c:c2:69:fc:da:6e:58:12:d1:ea:13:75:9a:be:70:
99:ee:5f:b2:d8:99:62:53:14:06:90:77:55:ab:99:39:11:d0:
c7:a3:f9:4e:47:1b:b5:2b:53:87:d8:5c:bd:0e:5e:f1:11:21:
6a:ef:78:3a:50:46:92:70:d9:e0:5a:ca:c6:f2:06:3e:0b:48:
0b:60:40:00:f4:e1:97:87:a8:76:67:72:32:81:4a:90:ad:b6:
0f:80:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org