Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/zvMOroGDGaVnLT8TsQvAxdRyqbQ.roa
File: zvMOroGDGaVnLT8TsQvAxdRyqbQ.roa (raw, json)
Hash identifier: p2X40jdvu0LO1VBwGEkOtE41RN46zPsAMQSDUsqafug=
Subject key identifier: CE:F3:0E:AE:81:83:19:A5:67:2D:3F:13:B1:0B:C0:C5:D4:72:A9:B4
Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial: 0188B2E83961C4233F1FB530E6DB6A97F619
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/zvMOroGDGaVnLT8TsQvAxdRyqbQ.roa
Signing time: Tue 13 Jun 2023 03:59:03 +0000
ROA not before: Tue 13 Jun 2023 03:59:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 193.135.117.0/24 maxlen: 24
193.135.116.0/24 maxlen: 24
193.135.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:e8:39:61:c4:23:3f:1f:b5:30:e6:db:6a:97:f6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Validity
Not Before: Jun 13 03:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cef30eae818319a5672d3f13b10bc0c5d472a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:c3:3d:e5:56:6e:32:12:40:a1:66:4e:4a:
11:af:52:2e:4a:ee:56:0c:57:f5:83:fe:c0:0b:d8:
3b:1c:06:9b:76:14:4b:75:6f:a1:3c:b8:78:b1:be:
d5:c9:17:f3:bd:d7:62:f5:5b:1d:47:5f:74:d3:c8:
64:45:4e:f1:24:bb:c8:ee:cf:06:e9:b3:f2:6f:4c:
93:37:1c:1c:0d:cf:c0:fd:81:8b:f2:37:88:e5:1d:
c9:31:72:ac:01:6e:50:59:44:bb:16:87:dd:b2:09:
58:9e:49:5a:42:88:0f:f4:d5:2b:de:e1:dd:75:f2:
c3:3e:d2:57:4b:2b:4f:47:7a:ef:a8:73:d7:43:a7:
43:8b:cc:67:94:0b:28:6b:dd:2f:c4:88:38:02:45:
1c:61:8b:fa:d6:50:86:80:2b:10:7c:17:7a:28:55:
7f:c4:2e:65:d4:bb:cf:0b:32:94:f3:88:64:8e:eb:
65:ce:60:38:02:e7:bd:09:59:d1:4e:08:8e:53:00:
5b:6e:5a:8e:7f:83:f6:f5:bc:a6:a7:63:9a:56:5c:
45:28:79:43:70:d6:cf:57:de:fa:5c:5e:29:7e:81:
56:0f:9d:56:6d:87:17:ec:1d:e5:4b:a4:cc:f0:c3:
89:24:1e:a4:d1:9e:7b:b4:df:20:f2:e9:a9:4e:bd:
cf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:0E:AE:81:83:19:A5:67:2D:3F:13:B1:0B:C0:C5:D4:72:A9:B4
X509v3 Authority Key Identifier:
keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/zvMOroGDGaVnLT8TsQvAxdRyqbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.116.0-193.135.118.255
Signature Algorithm: sha256WithRSAEncryption
aa:16:3d:9a:a4:99:64:ab:98:16:dd:18:3b:bb:ec:18:7a:a0:
d7:1c:72:6a:a8:a2:cb:64:7f:59:d0:70:d6:53:2d:ea:c5:44:
8d:88:92:7a:4a:7f:96:b9:62:81:65:6a:7c:3f:ba:ff:46:5d:
16:40:9e:b3:9c:7d:06:1b:67:6b:7a:3f:d4:28:2c:bf:ea:6b:
f7:86:02:77:04:12:66:2a:12:17:13:6b:55:53:a7:77:2d:a0:
5d:57:76:27:c6:56:09:4f:6b:21:46:e7:44:3c:00:b7:b3:3c:
e0:53:c4:77:9d:0c:59:3e:15:89:7b:12:a5:b1:71:e6:d3:5b:
44:2f:74:28:a2:03:5a:10:3a:4e:51:a6:65:75:2e:c5:0e:ef:
47:6a:6c:e5:5a:91:1f:7c:03:79:cb:2a:b6:93:53:d1:8b:9a:
3c:50:29:9e:5f:d7:6c:c5:f3:9e:86:87:75:ea:9b:f1:c4:2d:
0e:59:73:5f:58:c4:ca:46:39:ba:87:9d:7f:9b:d1:04:6b:9e:
ce:52:ad:1d:ee:32:b8:43:88:51:df:dd:b8:04:54:53:1b:e8:
63:0c:83:f4:32:4b:ea:38:e3:c3:05:e2:8f:f7:78:fb:6b:f2:
51:cd:64:27:eb:2f:90:12:7e:54:fb:3a:f2:be:8d:15:6d:c2:
19:76:4b:c2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYiy6DlhxCM/H7Uw5ttql/YZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDQ4NDhiZmVmNzI0ZTI2YWJlZDNjNjVlNGU4Zjk1MDhm
YjE3OTYwHhcNMjMwNjEzMDM1OTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWYzMGVhZTgxODMxOWE1NjcyZDNmMTNiMTBiYzBjNWQ0NzJhOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuPDPeVWbjISQKFmTkoRr1IuSu5W
DFf1g/7AC9g7HAabdhRLdW+hPLh4sb7VyRfzvddi9VsdR19008hkRU7xJLvI7s8G
6bPyb0yTNxwcDc/A/YGL8jeI5R3JMXKsAW5QWUS7FofdsglYnklaQogP9NUr3uHd
dfLDPtJXSytPR3rvqHPXQ6dDi8xnlAsoa90vxIg4AkUcYYv61lCGgCsQfBd6KFV/
xC5l1LvPCzKU84hkjutlzmA4Aue9CVnRTgiOUwBbblqOf4P29bymp2OaVlxFKHlD
cNbPV976XF4pfoFWD51WbYcX7B3lS6TM8MOJJB6k0Z57tN8g8umpTr3PawIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFM7zDq6BgxmlZy0/E7ELwMXUcqm0MB8GA1UdIwQY
MBaAFBwEhIv+9yTiar7Txl5Oj5UI+xeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQt
ZWUzODBiODJjZmNhLzEvenZNT3JvR0RHYVZuTFQ4VHNRdkF4ZFJ5cWJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQtZWUzODBiODJjZmNh
LzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALBh3QD
BADBh3YwDQYJKoZIhvcNAQELBQADggEBAKoWPZqkmWSrmBbdGDu77Bh6oNcccmqo
ostkf1nQcNZTLerFRI2IknpKf5a5YoFlanw/uv9GXRZAnrOcfQYbZ2t6P9QoLL/q
a/eGAncEEmYqEhcTa1VTp3ctoF1XdifGVglPayFG50Q8ALezPOBTxHedDFk+FYl7
EqWxcebTW0QvdCiiA1oQOk5RpmV1LsUO70dqbOVakR98A3nLKraTU9GLmjxQKZ5f
12zF856Gh3Xqm/HELQ5Zc19YxMpGObqHnX+b0QRrns5SrR3uMrhDiFHf3bgEVFMb
6GMMg/QyS+o448MF4o/3ePtr8lHNZCfrL5ASflT7OvK+jRVtwhl2S8I=
-----END CERTIFICATE-----
Generated at Thu Apr 10 02:19:49 2025 by rpki-client