Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/Z8BFLG75NH-QclBBEOv7hw_WizE.roa
File: Z8BFLG75NH-QclBBEOv7hw_WizE.roa (raw, json)
Hash identifier: pP1CovYN/6OyIZw57hbiEcQxcMDQbAnDXAXStDeI+MU=
Subject key identifier: 67:C0:45:2C:6E:F9:34:7F:90:72:50:41:10:EB:FB:87:0F:D6:8B:31
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: E64675
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/Z8BFLG75NH-QclBBEOv7hw_WizE.roa
Signing time: Sat 01 Jan 2022 13:54:49 +0000
ROA not before: Sat 01 Jan 2022 13:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210897
IP address blocks: 103.56.172.0/24 maxlen: 24
194.8.135.0/24 maxlen: 24
2a11:2b80::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15091317 (0xe64675)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: Jan 1 13:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67c0452c6ef9347f9072504110ebfb870fd68b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:b8:68:84:21:75:92:b4:83:22:50:0e:ee:
f6:6b:23:e0:23:b6:eb:f3:fc:95:e7:a0:cf:9f:b2:
cf:ff:d0:95:88:99:7b:4c:88:80:6f:d4:ee:7b:74:
4f:53:8c:c7:f0:ed:65:6a:2e:fe:bd:f4:3c:1c:7a:
f8:80:f9:2c:1f:4c:cd:3c:4c:01:f0:49:b5:98:a4:
86:1e:88:6e:a1:0f:b4:c0:28:27:ab:96:89:f5:78:
a2:5e:39:9a:3e:db:bd:91:42:dc:ee:6d:2f:7e:82:
b8:d5:25:e8:5b:2d:d2:27:e5:f7:9b:7f:4c:19:0e:
b3:d1:d4:04:83:75:e7:05:a4:78:36:03:03:8f:7e:
11:b1:ff:27:ce:4d:92:e6:3f:0f:85:82:1f:cd:b0:
6d:9b:6c:9b:0b:76:c1:77:d6:e9:fc:05:5f:4d:1a:
7b:33:3f:7b:24:4e:62:32:97:1a:c9:1b:1d:c8:8c:
8d:f9:73:69:89:93:61:ab:53:f2:d3:17:7f:08:71:
c7:6a:2e:24:d8:b7:fd:7c:03:4b:5f:a0:6e:7b:47:
c5:db:ae:00:1c:bf:59:df:a7:78:a0:ae:ae:41:2a:
09:42:cd:01:c9:7d:05:6f:fc:6a:f2:aa:92:6c:b0:
60:81:99:50:a2:c5:68:3e:9e:bd:11:29:8f:5e:2d:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:45:2C:6E:F9:34:7F:90:72:50:41:10:EB:FB:87:0F:D6:8B:31
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/Z8BFLG75NH-QclBBEOv7hw_WizE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.56.172.0/24
194.8.135.0/24
IPv6:
2a11:2b80::/32
Signature Algorithm: sha256WithRSAEncryption
72:65:ce:0b:a3:45:5c:24:1d:80:a5:da:40:a3:c5:35:f6:fb:
07:30:34:6a:5a:ae:46:9e:de:2f:e7:7e:31:e4:44:f5:3d:f1:
08:ca:b5:2f:bb:f1:91:35:f7:ab:c5:c4:09:09:a0:9d:de:f0:
24:0f:48:07:27:ef:6f:f9:a5:cb:35:f1:f7:24:c8:9b:95:a2:
50:95:09:08:d2:5b:ba:00:1f:71:5a:1d:09:79:bb:9e:74:83:
51:f6:65:45:63:d6:29:17:34:30:98:72:eb:40:d6:4e:09:be:
ce:82:e6:cd:be:42:94:fe:58:4a:e6:d2:66:dc:77:64:2e:ce:
b9:d6:b4:65:7c:fb:2f:09:c2:e8:c3:d0:0e:2d:45:da:f5:36:
3d:b0:2d:ce:98:0d:3c:ab:ff:8f:d3:49:cc:19:ca:42:2e:75:
31:55:c1:ed:c1:c1:82:76:02:3f:32:2d:e5:df:d7:69:8a:b7:
dd:f6:ff:61:c8:ad:76:76:a7:ab:a5:85:fb:44:b5:96:a4:6c:
11:a7:c7:d5:d1:69:e5:1d:cf:cf:ad:cb:31:e8:d8:e7:b6:d5:
11:15:c5:f1:ad:8c:5a:49:7d:7a:d2:a7:e4:d6:30:ba:f7:40:
af:76:d5:bb:78:0e:c3:8c:1a:21:15:61:42:d5:f9:3c:01:85:
da:e3:6b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:13:49 2025 by rpki-client