Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/ZEzvIcXPkrjHUdbCmTtc0HMudCM.roa
File: ZEzvIcXPkrjHUdbCmTtc0HMudCM.roa (raw, json)
Hash identifier: qM8XL6U8bNcb8nc+uv5cjDdiAAnoGDGPjkBtgto0seE=
Subject key identifier: 64:4C:EF:21:C5:CF:92:B8:C7:51:D6:C2:99:3B:5C:D0:73:2E:74:23
Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial: 1A07FCAB
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/ZEzvIcXPkrjHUdbCmTtc0HMudCM.roa
Signing time: Sat 01 Jan 2022 06:06:44 +0000
ROA not before: Sat 01 Jan 2022 06:06:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59451
IP address blocks: 37.75.146.0/24 maxlen: 24
185.173.56.0/24 maxlen: 24
37.75.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436731051 (0x1a07fcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Validity
Not Before: Jan 1 06:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644cef21c5cf92b8c751d6c2993b5cd0732e7423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:e7:91:94:fe:dd:c7:63:26:73:9d:53:16:
fa:96:27:c5:3e:13:2a:f6:d9:31:7e:93:0a:e7:d7:
49:1d:fb:93:fc:33:39:c2:35:11:36:ec:c3:1c:1e:
fa:0b:0d:f7:27:bf:2a:c7:98:9f:a4:58:19:f6:81:
00:0b:bc:15:7d:36:a2:87:32:72:68:b3:99:aa:1a:
14:b4:d9:9f:f5:81:6d:e1:a8:d5:68:c7:d5:fb:55:
5a:d1:b9:5a:05:f3:7f:f6:3b:d1:cc:12:18:bd:e0:
c3:de:b6:0b:2e:ff:c8:8b:a7:92:36:c3:5c:7f:b2:
1c:75:c5:3f:15:45:86:dc:57:81:18:cb:13:e4:55:
a2:d0:0e:e6:a3:ac:93:9e:7d:3e:ec:11:b7:8e:10:
db:23:77:77:3a:f6:bd:30:9c:ce:f4:7b:d8:f0:45:
85:93:19:38:72:2d:62:8e:30:d1:f2:8a:cd:d5:ca:
d2:79:a2:bb:70:3f:8f:6a:62:95:d9:03:28:0f:6c:
a4:71:1c:31:cc:73:84:dd:3a:39:52:29:78:d6:1f:
05:a7:9e:09:f6:e2:a7:d4:22:09:92:66:4b:96:f8:
20:31:a7:a5:f5:77:3d:58:7d:86:28:60:e8:99:51:
7f:84:81:5b:47:2d:c5:d8:0d:33:61:42:6b:fe:c4:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:EF:21:C5:CF:92:B8:C7:51:D6:C2:99:3B:5C:D0:73:2E:74:23
X509v3 Authority Key Identifier:
keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/ZEzvIcXPkrjHUdbCmTtc0HMudCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.144.0/24
37.75.146.0/24
185.173.56.0/24
Signature Algorithm: sha256WithRSAEncryption
96:17:60:71:61:c0:c7:f3:83:d5:da:f2:5e:88:75:2a:b3:df:
b7:3b:c9:da:21:03:2a:b3:2c:f6:37:98:02:c5:7e:ae:80:19:
ed:10:1c:a5:3f:4b:f4:5d:ad:4c:1a:a6:9c:67:01:99:ca:fe:
65:4b:c5:93:ee:79:20:81:bd:de:f4:f2:69:71:5b:98:31:8c:
22:23:61:9f:52:47:04:0a:11:df:6d:c3:53:9d:07:db:90:d3:
37:8e:a9:bf:59:eb:da:d4:3f:15:99:ba:0d:f6:c8:07:9f:93:
a1:38:61:12:ec:0c:37:29:51:62:cb:4e:e3:5c:b2:a1:a6:76:
ea:65:aa:aa:7b:a9:f4:6f:c4:04:7a:ce:33:ea:ba:3b:45:4a:
9d:80:47:19:72:22:c8:08:3c:6b:a0:d9:68:a8:3c:3d:b6:63:
3c:90:21:65:bb:4a:f2:5b:b8:86:d5:9a:f1:43:10:70:a3:52:
8b:8b:7f:5e:51:56:c9:26:d7:38:8a:2a:ae:58:82:59:ee:64:
cd:bd:06:19:a6:72:93:20:70:41:04:05:5e:42:38:d0:c6:e1:
87:24:18:d9:4c:b3:cc:26:c5:db:a6:3c:2b:c6:3e:52:49:d0:
79:f8:88:c4:fe:e2:11:30:96:95:de:da:81:fc:ae:f0:a2:b9:
2a:6c:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:58 2025 by rpki-client