Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZWarH-b-Nj_jIvNOAEtUWHWfqk8.roa
File: ZWarH-b-Nj_jIvNOAEtUWHWfqk8.roa (raw, json)
Hash identifier: Bfy7kF9uaYqi8b45ZDob6B347u/itFcTFuV2R1E79Qw=
Subject key identifier: 65:66:AB:1F:E6:FE:36:3F:E3:22:F3:4E:00:4B:54:58:75:9F:AA:4F
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51699C6DA1D07C75DB05995FE9BAF
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZWarH-b-Nj_jIvNOAEtUWHWfqk8.roa
Signing time: Mon 02 Jan 2023 00:15:13 +0000
ROA not before: Mon 02 Jan 2023 00:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33925
IP address blocks: 188.240.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:16:99:c6:da:1d:07:c7:5d:b0:59:95:fe:9b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6566ab1fe6fe363fe322f34e004b5458759faa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:95:2f:44:ee:85:a9:a2:4a:3c:63:f0:1a:
e7:17:02:cd:be:55:9f:cf:7f:55:a3:e5:83:c1:a9:
ef:df:8e:3c:e1:d0:37:9a:b8:62:7f:62:8c:73:33:
9f:29:b5:39:df:ae:49:8e:c2:f4:af:41:7a:f4:c9:
76:53:7b:6c:06:60:f5:65:9d:2d:8c:32:6e:5f:49:
3a:0d:b7:e4:30:f1:62:cc:27:01:01:9c:fa:f1:e5:
29:ab:f3:1b:37:5d:ee:9e:2f:62:cf:92:79:20:52:
0c:63:04:ee:9f:23:18:e8:19:3a:3d:4c:3d:04:2f:
26:30:06:8f:c5:08:e0:f0:7c:1f:e5:9e:09:bf:96:
0c:8d:0d:db:5c:43:f7:84:4a:1b:62:6a:59:3b:5e:
a3:e1:9b:84:aa:41:6b:72:e5:f5:a5:22:8f:ec:9a:
a1:3f:ba:71:bb:1b:58:25:c4:a5:e0:00:51:02:7e:
51:ab:63:5f:80:3a:85:ba:31:eb:5e:de:16:9c:e9:
a9:f7:5e:3a:c4:51:08:ca:ee:f9:f5:bc:e5:66:17:
7b:69:d0:dd:5f:2d:34:60:ca:cc:bd:d1:90:13:38:
f1:37:c6:81:50:47:e1:98:30:69:ef:85:af:13:83:
2b:15:41:60:3a:8a:fb:60:c0:3a:29:28:f4:fd:f6:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:AB:1F:E6:FE:36:3F:E3:22:F3:4E:00:4B:54:58:75:9F:AA:4F
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ZWarH-b-Nj_jIvNOAEtUWHWfqk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.89.0/24
Signature Algorithm: sha256WithRSAEncryption
73:17:43:c7:e2:c0:34:f9:90:d5:81:04:d6:f8:37:83:ee:eb:
f5:09:08:a5:1b:6e:fe:24:14:71:14:ea:88:c7:de:30:0d:f3:
ed:c5:63:56:2c:24:69:a9:59:85:5f:f6:9c:37:08:15:60:cd:
bd:ff:59:e6:f9:09:6b:79:10:23:62:ac:aa:aa:e4:cd:b8:94:
3d:23:8a:2f:10:bd:d8:be:8c:a5:26:1e:82:20:98:85:1a:9d:
b6:a6:09:cb:41:42:93:2e:17:02:a6:c5:d7:47:6d:36:be:ce:
a4:64:e4:e6:d0:1a:2b:ce:4c:43:fc:a8:5a:cd:c5:1a:f9:fa:
f5:39:b0:de:aa:3f:f9:9b:aa:fb:94:18:3c:be:04:26:aa:76:
c4:fc:85:bb:3e:35:8f:9d:8d:2f:4f:be:ac:f8:a1:ca:2a:f1:
dc:56:76:42:f4:6c:14:de:6d:83:bc:70:df:21:7a:81:4a:40:
47:f9:0b:b9:52:4b:28:b7:69:ad:97:c5:38:13:34:46:de:22:
37:20:0a:7c:1b:f0:52:0d:1a:35:22:25:b0:49:48:4e:57:c7:
40:16:59:6a:1b:4e:4e:16:7c:78:53:90:b2:5e:94:26:4a:96:
34:da:90:95:31:f0:a4:3b:22:d6:01:a8:83:23:d3:62:36:d2:
74:83:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:02:11 2025 by rpki-client