Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/ZooXfpRL5J6O8g5LPZylPB7rLX4.roa
File: ZooXfpRL5J6O8g5LPZylPB7rLX4.roa (raw, json)
Hash identifier: cMKgWJ5Wmi+vwpV37raEiDNETID/tRtqUiQ0GMmpnPE=
Subject key identifier: 66:8A:17:7E:94:4B:E4:9E:8E:F2:0E:4B:3D:9C:A5:3C:1E:EB:2D:7E
Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Certificate serial: 0CEE4422
Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/ZooXfpRL5J6O8g5LPZylPB7rLX4.roa
Signing time: Sat 01 Jan 2022 15:59:10 +0000
ROA not before: Sat 01 Jan 2022 15:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197216
IP address blocks: 185.236.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216941602 (0xcee4422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7
Validity
Not Before: Jan 1 15:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=668a177e944be49e8ef20e4b3d9ca53c1eeb2d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:f9:3b:2a:a9:ac:be:c6:7a:c8:53:58:09:
f7:09:75:a2:bb:85:14:3a:4d:3f:71:32:10:9f:ef:
c3:c5:ac:b3:18:e1:20:47:8e:3f:fa:d3:c2:ac:9f:
81:6e:11:b3:ec:93:f1:7d:71:2a:39:15:e8:85:ee:
c0:2f:44:ce:4b:8e:07:82:a0:f0:79:5b:61:e6:92:
b8:a5:ab:72:4d:8a:8e:33:59:cd:9d:23:96:3b:e3:
c6:fa:37:87:82:7d:04:3f:76:ff:bd:ef:32:34:cb:
57:0d:c5:60:98:f9:d2:64:18:37:3c:a0:90:62:57:
23:29:a3:13:44:43:28:78:45:60:19:d9:21:ca:49:
38:f2:21:0a:bc:7d:5c:b6:e8:47:af:b1:f9:2f:d4:
39:d0:db:b0:18:8f:3b:f3:25:c4:be:02:1f:4b:19:
36:24:32:6f:56:36:df:47:4a:09:11:8b:97:44:df:
79:71:1a:04:4d:96:9a:99:04:d5:97:5f:de:7a:c7:
72:2f:c1:41:f8:07:7c:c8:4a:22:1c:a6:a4:aa:22:
ed:8a:b1:7d:6f:ee:1b:3c:19:21:d6:5a:66:39:31:
d6:f0:26:86:b8:a9:59:80:0d:f6:b8:86:36:a0:bd:
5c:da:f0:c9:9b:02:30:4f:f0:fa:8c:95:2a:07:dd:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:17:7E:94:4B:E4:9E:8E:F2:0E:4B:3D:9C:A5:3C:1E:EB:2D:7E
X509v3 Authority Key Identifier:
keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/ZooXfpRL5J6O8g5LPZylPB7rLX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.180.0/24
Signature Algorithm: sha256WithRSAEncryption
09:bc:67:3b:9e:c4:45:83:2a:d0:7f:22:d4:2a:a7:9c:d3:41:
13:7c:01:e9:a4:b1:19:47:c2:8b:6a:ff:91:89:b8:70:e2:16:
a7:52:15:ff:3c:da:2e:c9:88:06:2e:d9:ea:0c:a4:fa:c9:21:
c6:1d:77:6e:53:c4:50:d4:55:3c:27:52:c0:ea:2b:3f:90:c0:
74:a6:bf:02:9a:93:70:0d:98:6b:d9:97:b8:c2:11:1a:70:7b:
1e:74:33:72:7e:6f:d2:4b:ef:f3:8d:01:69:5c:c5:89:2b:de:
38:34:e8:58:28:80:02:4f:9e:82:a4:12:69:24:6e:e9:ee:e4:
87:d7:b8:9a:36:82:a3:52:82:bf:07:ba:5a:30:2d:34:51:3b:
9c:8c:f5:1e:79:d6:03:23:01:d3:38:7d:de:2f:96:2b:4f:2a:
ef:98:ca:0f:62:15:cd:44:dc:4d:ba:f3:26:27:3e:e6:e1:c4:
1d:6c:f6:3d:f6:2a:d1:b4:6a:00:bb:19:69:12:e8:26:33:a7:
0c:70:4f:ce:84:33:fe:d9:7a:a5:fe:2d:d2:51:60:aa:93:66:
a3:e5:44:22:f9:45:40:4e:88:96:5a:d7:0c:c4:62:c6:85:ce:
26:77:f2:71:76:ae:a9:c1:c9:3f:66:66:73:a1:8d:1b:bb:db:
48:f3:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:55 2025 by rpki-client