Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/zmR_eTf6bkKqySn57Eiz9HnmLy0.roa
File: zmR_eTf6bkKqySn57Eiz9HnmLy0.roa (raw, json)
Hash identifier: 00i1m4dzav12mvz3PwZRXenEWYfTOKXR919NUynw2xw=
Subject key identifier: CE:64:7F:79:37:FA:6E:42:AA:C9:29:F9:EC:48:B3:F4:79:E6:2F:2D
Certificate issuer: /CN=38728e9bd37399df9ffae587bd06884b350a65b7
Certificate serial: 052A1FA2
Authority key identifier: 38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/zmR_eTf6bkKqySn57Eiz9HnmLy0.roa
Signing time: Sat 01 Jan 2022 07:56:02 +0000
ROA not before: Sat 01 Jan 2022 07:56:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20495
IP address blocks: 185.184.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86646690 (0x52a1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38728e9bd37399df9ffae587bd06884b350a65b7
Validity
Not Before: Jan 1 07:56:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce647f7937fa6e42aac929f9ec48b3f479e62f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:0b:7e:88:21:58:54:dd:4a:44:26:cf:aa:
94:53:01:ce:2c:39:54:05:b4:a1:e3:27:27:9f:4f:
09:b8:15:0b:09:6e:8b:56:a8:42:d1:91:57:18:40:
da:87:55:f7:af:e4:df:e4:0d:74:3d:61:1f:3a:b8:
b0:66:84:13:0b:ab:8e:3a:5f:3e:8b:eb:c5:09:87:
7d:0c:b1:b6:97:1e:82:5b:95:e1:b7:51:cf:a2:30:
ce:04:67:b6:fc:26:e3:bb:0c:3b:ed:49:39:ee:67:
a4:b7:ba:a1:4e:0b:b0:0c:9f:59:ea:a1:87:b9:dd:
b2:7a:99:3f:13:a1:58:4d:3d:e3:0e:cc:ce:33:fb:
22:5b:c5:dc:79:25:8d:d4:41:f1:52:f7:f9:44:db:
cc:a6:d6:92:33:56:03:43:bc:7d:96:e9:86:d0:2a:
1b:5e:9e:9e:7f:61:7d:54:03:a8:4f:65:e7:9a:ac:
a7:11:2e:5f:bf:07:fb:57:f6:a1:c2:fa:66:1b:cd:
50:bd:cf:7c:99:0b:7c:91:a3:5b:b2:d0:7f:7d:00:
35:41:98:9c:37:74:13:c5:f0:8a:51:66:2e:eb:f2:
bf:01:13:95:a0:9e:a0:95:45:92:83:05:90:a9:71:
3d:93:8d:88:21:63:0d:d5:3b:a1:e6:83:62:f7:c3:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:7F:79:37:FA:6E:42:AA:C9:29:F9:EC:48:B3:F4:79:E6:2F:2D
X509v3 Authority Key Identifier:
keyid:38:72:8E:9B:D3:73:99:DF:9F:FA:E5:87:BD:06:88:4B:35:0A:65:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHKOm9Nzmd-f-uWHvQaISzUKZbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/zmR_eTf6bkKqySn57Eiz9HnmLy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/be3e25-881c-4aec-a932-f8cfa33d684e/1/OHKOm9Nzmd-f-uWHvQaISzUKZbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.108.0/22
Signature Algorithm: sha256WithRSAEncryption
03:3b:29:1b:c6:87:1e:73:5f:74:08:52:d6:d1:a4:68:c2:2a:
d6:8b:00:d3:4f:af:47:53:a3:e6:f2:54:35:c7:76:c2:97:f0:
87:b9:3d:ad:82:3b:d8:62:1d:53:bd:0c:33:88:38:71:16:1a:
59:16:2e:3e:2b:35:e2:d4:d6:45:6b:f6:74:82:5b:1d:13:8b:
68:7a:5d:83:04:fa:de:15:c7:fa:34:f7:a4:b5:af:a6:ce:df:
09:57:a0:06:fa:7d:a5:01:80:4a:2f:7f:d3:08:78:8b:66:47:
7c:3a:ec:46:f3:98:16:67:cf:db:07:7f:f7:5e:b9:17:e9:7c:
2f:14:d1:88:1e:9f:d5:5c:30:c4:a9:f9:32:3c:b3:5e:50:30:
7c:24:3b:ab:ae:85:6e:2f:12:43:71:95:df:84:4f:f0:9a:01:
fb:7b:f6:9d:cf:cc:02:88:42:68:8f:9e:6f:f9:dd:b0:40:1c:
8d:98:02:cc:5f:ab:79:fc:d9:a6:d4:30:1e:ae:be:0a:5a:c0:
3f:4a:7b:ff:d2:e4:a8:b7:0d:cd:86:58:d0:43:86:38:07:b9:
22:76:e6:69:e6:ee:05:af:d3:ea:11:88:08:b9:65:4d:22:05:
3a:d9:8a:61:69:b6:e9:40:c6:81:5c:1f:a5:1c:8d:d3:e0:00:
73:4c:09:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:10 2025 by rpki-client