Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/ZrgRTuT6rm_hq_J_SGy_5sFR-k8.roa
File: ZrgRTuT6rm_hq_J_SGy_5sFR-k8.roa (raw, json)
Hash identifier: wHg4aYgxLK1iHgfSUpdhnrULka2Ob9jCn4VUe4aqFtw=
Subject key identifier: 66:B8:11:4E:E4:FA:AE:6F:E1:AB:F2:7F:48:6C:BF:E6:C1:51:FA:4F
Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Certificate serial: 01850482D2745B5D353B929B5319943002D4
Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/ZrgRTuT6rm_hq_J_SGy_5sFR-k8.roa
Signing time: Mon 12 Dec 2022 04:06:00 +0000
ROA not before: Mon 12 Dec 2022 04:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43197
IP address blocks: 185.105.229.0/24 maxlen: 24
185.105.228.0/22 maxlen: 22
185.105.228.0/24 maxlen: 24
185.105.231.0/24 maxlen: 24
185.105.230.0/24 maxlen: 24
109.68.232.0/21 maxlen: 21
109.68.233.0/24 maxlen: 24
109.68.232.0/24 maxlen: 24
109.68.237.0/24 maxlen: 24
109.68.236.0/24 maxlen: 24
109.68.235.0/24 maxlen: 24
109.68.234.0/24 maxlen: 24
109.68.239.0/24 maxlen: 24
109.68.238.0/24 maxlen: 24
2a0b:6bc0::/48 maxlen: 48
2a0b:6bc0:1::/64 maxlen: 64
2a0b:6bc0:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:04:82:d2:74:5b:5d:35:3b:92:9b:53:19:94:30:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee
Validity
Not Before: Dec 12 04:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66b8114ee4faae6fe1abf27f486cbfe6c151fa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:f9:16:54:f0:29:72:4b:45:22:c3:34:47:
be:77:95:79:cd:09:1e:c4:2c:1c:d1:fc:80:bc:d7:
29:22:b7:aa:9c:04:28:d0:2c:2e:bb:f7:a7:e9:44:
a3:10:55:98:12:19:27:ea:3d:61:37:73:65:67:72:
75:fa:bb:f4:3b:24:22:ba:37:98:36:02:a2:64:9a:
4d:a8:00:a7:08:f0:df:10:8d:cb:5c:85:78:50:13:
c6:41:ef:ed:c9:7c:35:dd:cc:53:28:9d:2f:4d:bc:
ea:10:21:c1:ae:ec:51:19:f2:b3:3f:90:55:96:d4:
a8:f2:fb:68:f0:91:0a:5d:dc:ea:4c:2a:6c:8d:c1:
f2:a1:7f:88:b8:71:29:f7:fa:53:c7:ce:23:8e:21:
2c:95:2e:2f:97:a2:e4:aa:5c:62:06:78:6b:fb:0e:
d8:27:b2:18:85:7e:ca:0a:71:fa:51:a5:c7:0f:61:
e2:ac:2d:96:53:cd:6a:4d:f3:37:73:59:43:8f:00:
89:ec:56:79:77:db:02:03:0c:df:82:5d:12:2a:49:
79:9d:c7:bb:ec:5e:ef:c9:f4:57:08:85:26:df:65:
54:63:ff:e6:0d:35:79:1c:54:da:28:4d:c3:4e:dc:
04:96:64:ef:7c:19:94:0c:62:cc:ab:ed:72:fc:01:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B8:11:4E:E4:FA:AE:6F:E1:AB:F2:7F:48:6C:BF:E6:C1:51:FA:4F
X509v3 Authority Key Identifier:
keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/ZrgRTuT6rm_hq_J_SGy_5sFR-k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.232.0/21
185.105.228.0/22
IPv6:
2a0b:6bc0::/47
Signature Algorithm: sha256WithRSAEncryption
55:46:df:0d:79:c0:60:8c:a3:9e:7a:e0:21:c6:c6:05:d2:1f:
fc:6b:db:0e:67:ce:a1:c2:fe:94:42:c2:d2:ab:f0:04:a4:fd:
35:ca:2b:74:58:58:0e:3c:40:46:e1:ce:fa:ff:6f:e3:c8:db:
21:3b:87:da:79:19:ad:74:7a:d4:04:95:10:2d:6f:ab:7a:f4:
68:a8:45:56:2e:3d:8e:07:6f:d0:ff:3b:0b:05:27:ec:53:5e:
10:38:79:30:4e:f3:4b:dd:69:ca:7a:18:92:21:4b:e9:5a:2a:
e9:b6:0d:68:a7:1b:9e:fd:9c:59:cc:72:eb:c2:9e:f2:c7:40:
8d:c9:23:66:49:b8:07:42:e4:41:2b:39:27:a8:c2:45:e4:9e:
cd:12:1a:8d:6a:68:88:b0:4d:a0:96:df:c5:cd:6d:50:ee:3b:
7e:45:4a:e9:69:4e:1a:8f:c2:52:fe:fc:05:89:a8:ce:57:de:
53:be:23:8b:2d:1a:6b:7e:6e:2f:ac:5a:bf:4e:04:a7:71:2a:
c2:ad:8a:6a:78:a9:39:25:89:db:84:7b:99:78:f4:a8:00:09:
54:b0:8e:a6:66:ec:dd:93:77:3f:16:fd:fa:ff:d3:c1:d2:76:
5e:17:a7:7d:3f:cb:46:b7:46:01:b7:ec:f2:53:50:79:ac:75:
fa:4c:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:39 2025 by rpki-client