Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/zwL1UTb4RsPlG9-3vzIxrvNGWak.roa
File: zwL1UTb4RsPlG9-3vzIxrvNGWak.roa (raw, json)
Hash identifier: MreEOh0OYMg5Nm3a8GveKHV1pYBNk+t8ugLso4u0MWE=
Subject key identifier: CF:02:F5:51:36:F8:46:C3:E5:1B:DF:B7:BF:32:31:AE:F3:46:59:A9
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 057C7FE5
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/zwL1UTb4RsPlG9-3vzIxrvNGWak.roa
Signing time: Thu 12 May 2022 08:03:03 +0000
ROA not before: Thu 12 May 2022 08:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212879
IP address blocks: 185.155.136.0/24 maxlen: 24
185.155.139.0/24 maxlen: 24
185.155.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92045285 (0x57c7fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: May 12 08:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf02f55136f846c3e51bdfb7bf3231aef34659a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:32:1e:5b:ab:44:07:63:c4:ac:a3:b1:57:
6e:89:19:88:0d:49:35:4f:96:0f:17:91:92:78:25:
7e:2e:9e:57:70:22:d1:16:2d:51:dc:84:51:9f:94:
8c:0e:07:06:43:86:51:58:58:51:05:e5:c4:34:64:
26:d8:4b:fc:7b:c7:ee:e2:21:cf:57:62:82:d6:bd:
47:12:d9:2d:71:06:68:ed:63:5b:7e:0d:5e:82:9d:
f2:90:6b:36:14:80:15:4a:d2:2c:88:53:cc:72:ba:
db:ce:98:89:83:4a:4d:ff:80:11:76:24:ed:42:02:
1a:35:0e:14:3e:ed:d7:aa:01:2c:d4:5d:be:d4:21:
cb:93:4b:8b:02:5e:ff:e3:af:4a:0e:48:a6:6a:19:
26:a5:be:da:1a:57:92:a9:02:2d:21:ee:a2:c5:d7:
f5:14:41:45:5a:91:61:63:7a:55:53:c3:14:2e:a3:
99:7a:d5:66:12:b5:0b:28:d1:eb:30:4c:f3:b4:9a:
e5:45:7e:52:c4:65:8c:c8:34:61:99:64:9c:ee:5d:
7d:cd:58:73:6a:9f:0f:25:00:d6:58:e3:f8:0e:d9:
3b:cb:4a:68:53:b7:60:d4:f3:60:3b:a1:83:ca:0d:
b8:ac:17:10:d1:75:f3:55:4e:9f:87:f3:0f:00:bf:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:02:F5:51:36:F8:46:C3:E5:1B:DF:B7:BF:32:31:AE:F3:46:59:A9
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/zwL1UTb4RsPlG9-3vzIxrvNGWak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/24
185.155.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:3a:81:5f:e5:eb:1b:8a:ae:f0:79:69:87:0e:94:58:82:44:
22:61:4e:4c:31:95:52:dc:56:7e:b0:60:73:30:2f:0c:76:ef:
53:41:33:2b:fa:be:36:85:f4:c8:a6:8b:79:76:9b:ac:75:cd:
dc:8c:1d:12:0d:06:2c:27:11:55:8a:c0:19:db:74:f9:77:41:
ea:30:a2:3b:06:91:ec:9e:37:c7:25:f1:69:9e:ee:c2:a5:6f:
9e:fd:0e:03:83:7a:ba:ea:56:fa:7f:8e:92:15:7a:81:6b:dc:
39:a7:eb:c0:c8:4c:4e:9b:0f:3d:b0:45:b5:a9:bf:e0:b6:12:
dc:f4:dd:a0:94:47:66:9f:97:c6:21:df:00:4f:ef:22:27:d7:
39:5f:cc:04:99:ab:f0:4c:8c:34:63:27:89:d3:fb:5d:07:d5:
6d:1e:97:8e:d4:18:17:14:ae:81:c4:70:f9:b3:6c:b0:fc:1e:
dc:df:5d:6b:da:e1:79:1e:9d:0f:f6:9f:ac:9b:a1:8d:38:9c:
e0:c9:c5:e8:61:c7:2d:23:c0:a2:83:4e:5b:a9:ef:c6:ca:47:
de:44:09:2d:01:fd:a8:eb:17:d8:e8:d3:94:e1:37:29:80:0a:
ac:98:cd:2f:e2:e2:d5:dd:2a:70:7b:d0:bf:49:0f:eb:43:1a:
3c:38:76:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:51 2023 by rpki-client on console.sobornost.net