Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/ZGR4qT_2LrXOO3YG1JH_opo40_o.roa
File: ZGR4qT_2LrXOO3YG1JH_opo40_o.roa (raw, json)
Hash identifier: DqxEVq3lt/H+3jK7Uh7ekqXrkSKEDxxiEf8MU/zhr+U=
Subject key identifier: 64:64:78:A9:3F:F6:2E:B5:CE:3B:76:06:D4:91:FF:A2:9A:38:D3:FA
Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial: 01856DAF6D797F8BDB92A63815E6CCB225D1
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/ZGR4qT_2LrXOO3YG1JH_opo40_o.roa
Signing time: Sun 01 Jan 2023 14:14:51 +0000
ROA not before: Sun 01 Jan 2023 14:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203021
IP address blocks: 185.147.120.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:6d:79:7f:8b:db:92:a6:38:15:e6:cc:b2:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Validity
Not Before: Jan 1 14:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646478a93ff62eb5ce3b7606d491ffa29a38d3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:5d:6b:0b:87:7f:57:b2:1f:93:e3:6c:b8:
26:e3:07:a3:44:29:7a:00:55:db:22:80:9c:4e:3d:
eb:59:5e:34:9f:9f:77:f0:b8:c7:77:f9:90:7f:20:
a1:5d:e4:b9:e9:4c:ef:e3:97:23:66:0b:fc:ce:0a:
69:9b:87:8f:17:a4:4a:fd:ed:8f:47:41:c0:30:1a:
55:a8:0f:32:33:be:39:2b:63:20:ff:f0:62:3d:c5:
09:b9:1f:88:27:45:f5:79:1a:6c:49:3d:fd:0d:07:
06:aa:ed:e1:d1:85:e3:e4:ab:32:b4:47:16:4d:e2:
22:5b:c7:a5:09:95:67:4c:39:37:c8:81:01:7b:a8:
d3:1f:9c:68:a7:9b:f5:13:86:42:ba:50:13:aa:bb:
f6:e9:49:54:3e:3e:ff:81:c6:24:c6:5e:06:1e:c9:
f6:af:0e:59:7e:c7:a1:de:87:3d:73:97:71:78:8a:
c8:5b:2e:c3:31:27:4f:c7:39:16:34:82:2c:a7:97:
9c:c8:41:ef:2e:de:a4:44:ab:ba:aa:ed:11:a5:3c:
16:3b:8e:db:4f:2f:bf:4e:29:63:9f:b0:b4:40:0d:
85:9a:f3:77:f6:0a:9a:0b:b4:2c:c6:49:21:37:10:
fb:e3:8f:de:72:a9:ce:40:58:2b:13:fc:23:3f:ff:
6d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:78:A9:3F:F6:2E:B5:CE:3B:76:06:D4:91:FF:A2:9A:38:D3:FA
X509v3 Authority Key Identifier:
keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/ZGR4qT_2LrXOO3YG1JH_opo40_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:3d:bf:3e:55:57:fa:d5:9f:e0:cd:ef:ec:85:43:28:8a:67:
7d:2c:e5:0c:cf:b3:27:e9:4b:c7:e6:87:ca:8a:aa:36:33:30:
51:bb:8c:cd:f5:9a:80:7d:f0:c0:c4:a0:f7:3c:70:97:c1:64:
dd:67:96:04:9d:cc:6e:02:8e:cd:a7:5d:0b:97:50:2d:23:36:
17:75:80:7c:aa:67:6c:d7:50:4d:34:4a:fc:e4:a5:d3:4f:ad:
ba:c1:29:b4:17:b0:42:fa:d6:a9:ad:6e:99:ed:7e:89:a5:9f:
67:6b:45:0d:5f:f4:f3:64:6b:7b:b3:9a:35:ec:bb:1e:c8:56:
c8:d5:16:97:cd:97:d9:ed:dc:55:e7:9d:65:3f:ff:ca:3a:cd:
9a:59:09:f1:9a:da:c4:ae:5d:2c:e8:7f:cc:4e:68:3d:bc:18:
ed:28:95:64:fd:af:ef:e3:cd:39:2b:49:18:dc:ec:31:12:3f:
f8:08:38:20:b9:eb:d1:1f:ee:91:88:46:08:3f:93:70:45:a2:
f6:24:29:94:bc:7f:7a:cb:7a:db:6c:95:a4:a5:a5:a6:82:7f:
19:84:b1:d4:10:50:ed:9a:c5:37:b5:83:f9:06:4b:a0:05:29:
e3:22:06:3e:de:35:83:a6:3c:4d:06:57:8f:5b:60:fe:02:07:
a1:6f:e0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:27 2025 by rpki-client