Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/zv6KHKekFb8ll4ZDfxk6k1--6Bs.roa
File: zv6KHKekFb8ll4ZDfxk6k1--6Bs.roa (raw, json)
Hash identifier: mmhJnQfQXaUvbA4GCU5uCdYwed5RTOkLPkf/knRrQzE=
Subject key identifier: CE:FE:8A:1C:A7:A4:15:BF:25:97:86:43:7F:19:3A:93:5F:BE:E8:1B
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 07FB36EA
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/zv6KHKekFb8ll4ZDfxk6k1--6Bs.roa
Signing time: Sat 01 Jan 2022 06:06:21 +0000
ROA not before: Sat 01 Jan 2022 06:06:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204880
IP address blocks: 185.236.240.0/23 maxlen: 24
185.236.242.0/23 maxlen: 24
2a0d:eb00::/32 maxlen: 32
2a0d:eb01::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133904106 (0x7fb36ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jan 1 06:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cefe8a1ca7a415bf259786437f193a935fbee81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:04:aa:34:93:7e:85:af:54:c4:30:fc:e0:
c0:ec:4e:5f:4f:8b:7f:f3:fc:51:0a:49:9a:a6:99:
12:0a:f0:4b:a8:90:df:a3:ac:da:10:e2:4b:af:a3:
59:a1:cb:73:b7:0b:55:af:9a:48:36:fb:29:ad:5e:
15:db:74:91:d9:83:0e:5c:54:bf:cd:6d:d5:f3:73:
14:b1:39:ef:87:c8:bb:92:6a:e1:61:04:48:8c:9f:
03:6b:85:fe:49:87:2f:5a:62:21:58:f1:12:78:45:
a2:4c:df:d3:29:d4:70:fa:47:68:63:ad:11:45:3d:
fe:c1:5b:5a:c5:b6:d2:3a:cf:28:5f:51:ed:6a:cf:
db:92:dc:51:db:ed:24:e3:0f:17:b5:7f:d1:86:74:
aa:e2:65:be:02:0f:0b:0c:b5:aa:2f:2c:65:36:ea:
50:35:0c:ef:48:52:5f:5c:fb:aa:b3:25:6c:1c:99:
32:6e:4b:0b:ff:6c:e1:aa:54:ec:e0:5b:36:27:5c:
f4:30:cb:e3:24:d6:b0:1b:c1:bd:b8:61:c6:e9:47:
58:9a:a0:c7:1b:1f:94:c3:44:56:5b:08:92:1e:db:
5e:a4:be:56:50:3b:32:d4:30:be:7f:d1:1c:9b:28:
d9:24:34:99:12:3c:70:2b:02:e1:08:a8:2d:b7:8b:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:8A:1C:A7:A4:15:BF:25:97:86:43:7F:19:3A:93:5F:BE:E8:1B
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/zv6KHKekFb8ll4ZDfxk6k1--6Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.240.0/22
IPv6:
2a0d:eb00::-2a0d:eb01:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:a5:b5:04:42:2f:56:81:e0:5c:de:15:e7:c6:bf:60:94:b3:
0e:40:a1:4d:be:88:02:65:e9:0c:4e:d6:8f:4e:79:fb:83:42:
ba:9f:cf:0c:88:1b:77:b7:20:bb:13:e4:36:e9:df:37:07:26:
04:f5:ec:08:c3:09:5b:62:ed:ca:c6:c1:24:41:2a:af:96:67:
ef:e3:ae:20:27:65:e7:b8:f6:2b:9c:9e:48:d3:91:e3:f9:f6:
46:e6:10:c0:8f:96:47:ef:82:41:0a:a5:7c:bf:e0:e3:70:d0:
88:ba:b5:12:48:9f:75:8c:ec:d3:3d:78:77:2a:86:2b:46:ca:
04:84:a5:54:1c:8c:ca:c6:d2:d5:4e:78:17:3b:b5:68:87:b1:
01:a1:9d:d4:6b:0e:b6:3b:71:2a:33:2f:83:f0:e1:f4:82:cf:
04:54:dd:16:4f:a3:cc:9e:f0:93:94:d1:a9:a8:81:f8:29:b5:
1e:bd:ff:84:88:3d:ec:24:a8:0e:f5:40:7c:7d:9a:79:37:d4:
e5:da:16:4b:d2:0d:e7:8a:e9:9e:fb:ac:08:52:1c:62:c8:a1:
6f:ae:79:5d:e2:b7:10:56:fc:b3:a9:3a:35:0c:b1:f2:5e:cc:
bd:b2:09:55:79:a5:0e:91:0c:d8:8f:b8:41:b0:49:16:b7:41:
52:f7:3d:58
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEB/s26jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
MjViNzA1YTkxZGJjMzBlZDEwZWI3MjIyYjc3OTdiODM0ZTAxODYzMB4XDTIyMDEw
MTA2MDYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2VmZThhMWNhN2E0
MTViZjI1OTc4NjQzN2YxOTNhOTM1ZmJlZTgxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSyBKo0k36Fr1TEMPzgwOxOX0+Lf/P8UQpJmqaZEgrwS6iQ
36Os2hDiS6+jWaHLc7cLVa+aSDb7Ka1eFdt0kdmDDlxUv81t1fNzFLE574fIu5Jq
4WEESIyfA2uF/kmHL1piIVjxEnhFokzf0ynUcPpHaGOtEUU9/sFbWsW20jrPKF9R
7WrP25LcUdvtJOMPF7V/0YZ0quJlvgIPCwy1qi8sZTbqUDUM70hSX1z7qrMlbByZ
Mm5LC/9s4apU7OBbNidc9DDL4yTWsBvBvbhhxulHWJqgxxsflMNEVlsIkh7bXqS+
VlA7MtQwvn/RHJso2SQ0mRI8cCsC4QioLbeLsMMCAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBTO/oocp6QVvyWXhkN/GTqTX77oGzAfBgNVHSMEGDAWgBRSW3BakdvDDtEO
tyIrd5e4NOAYYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1VsdHdXcEhid3c3UkRyY2lLM2VYdURUZ0dHTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvZjQ2MmRjLTllNTktNGU4ZC05YzZkLWY0Njg4N2RmOTg2My8x
L3p2NktIS2VrRmI4bGw0WkRmeGs2azEtLTZCcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
ZjQ2MmRjLTllNTktNGU4ZC05YzZkLWY0Njg4N2RmOTg2My8xL1VsdHdXcEhid3c3
UkRyY2lLM2VYdURUZ0dHTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwDAQCAAEwBgMEArns8DAWBAIAAjAQMA4DBAAqDesD
BgAqDesBADANBgkqhkiG9w0BAQsFAAOCAQEAkqW1BEIvVoHgXN4V58a/YJSzDkCh
Tb6IAmXpDE7Wj055+4NCup/PDIgbd7cguxPkNunfNwcmBPXsCMMJW2LtysbBJEEq
r5Zn7+OuICdl57j2K5yeSNOR4/n2RuYQwI+WR++CQQqlfL/g43DQiLq1EkifdYzs
0z14dyqGK0bKBISlVByMysbS1U54Fzu1aIexAaGd1GsOtjtxKjMvg/Dh9ILPBFTd
Fk+jzJ7wk5TRqaiB+Cm1Hr3/hIg97CSoDvVAfH2aeTfU5doWS9IN54rpnvusCFIc
Ysihb655XeK3EFb8s6k6NQyx8l7MvbIJVXmlDpEM2I+4QbBJFrdBUvc9WA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:14 2025 by rpki-client