Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zRHmrtRLaEfikbrdDNn-pNXHIS0.roa
File: zRHmrtRLaEfikbrdDNn-pNXHIS0.roa (raw, json)
Hash identifier: xohi6PMJ02zUeLIjggAVZxgvp0b6g/TIXLBoptjHg34=
Subject key identifier: CD:11:E6:AE:D4:4B:68:47:E2:91:BA:DD:0C:D9:FE:A4:D5:C7:21:2D
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D6644C655C768D99789722FFC9ACB29
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zRHmrtRLaEfikbrdDNn-pNXHIS0.roa
Signing time: Sun 01 Jan 2023 12:54:56 +0000
ROA not before: Sun 01 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47518
IP address blocks: 83.133.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:44:c6:55:c7:68:d9:97:89:72:2f:fc:9a:cb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd11e6aed44b6847e291badd0cd9fea4d5c7212d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:13:3b:fd:3e:85:e1:d5:38:fa:71:95:a3:32:
36:b8:ca:8b:2b:55:c0:d0:bf:33:a2:c9:e1:34:89:
aa:0a:4d:58:81:c9:e6:ab:46:d5:d0:31:ce:34:2e:
c6:5f:fa:7e:b7:82:fe:c6:96:39:80:4e:f3:6a:3d:
a4:3d:86:f2:9e:0b:8d:6c:0f:eb:47:be:ca:f3:c6:
35:f5:0f:47:82:37:20:f8:b6:10:14:f2:14:3c:08:
ae:ba:43:1c:52:19:03:24:bd:6e:5c:93:86:d5:51:
67:62:b8:79:c3:40:49:1f:00:3f:6f:05:a6:76:45:
1e:d3:76:d1:8c:17:ff:3f:d9:0d:c1:4c:c8:15:2c:
a3:7e:d3:3c:b2:6f:6b:8a:b9:bd:8a:5c:75:bd:cf:
03:30:b8:34:bc:1b:7d:58:42:d3:aa:fd:f7:98:27:
14:b8:fa:63:71:f3:f9:d8:00:81:8a:0e:28:f9:4c:
ab:1b:56:c3:75:47:0b:a6:1a:b9:95:b0:2a:f7:e3:
37:6b:f1:72:15:a5:55:b0:49:39:d0:fc:21:5b:6e:
dc:f1:71:7d:57:2f:68:23:cf:94:2f:bd:a2:5f:64:
97:b0:67:b7:40:c4:7a:59:23:de:a3:fa:c7:bd:d5:
59:c6:a7:bf:8f:fd:35:1c:2f:9e:2e:ce:a7:fb:e5:
47:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:11:E6:AE:D4:4B:68:47:E2:91:BA:DD:0C:D9:FE:A4:D5:C7:21:2D
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/zRHmrtRLaEfikbrdDNn-pNXHIS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.133.69.0/24
Signature Algorithm: sha256WithRSAEncryption
40:b7:21:4c:04:95:6b:46:97:19:c3:ae:20:d6:54:02:7d:c8:
38:b6:fb:50:e3:f1:a8:dd:2d:10:00:4d:a3:a6:5d:46:9a:51:
c4:4f:10:00:ef:a3:84:ac:07:42:c8:c5:59:1b:5e:98:a7:b9:
cd:7c:7a:95:80:90:f0:ab:41:0a:c9:1c:46:b6:5d:3c:2c:70:
be:53:69:63:3b:dd:c0:81:2f:41:b5:19:cd:ee:7f:66:3f:1c:
40:3b:ba:4a:45:e3:b0:13:d2:8e:4f:68:3b:81:fb:ae:d0:2f:
dd:4d:25:90:f1:b0:e1:db:35:a2:40:53:c9:df:bb:ee:16:e8:
57:29:bb:14:6f:87:86:b6:e0:14:aa:cb:f5:0b:90:3b:75:5f:
bf:cc:e2:18:9f:46:1a:13:45:81:4d:4e:f2:5a:b1:8d:c6:e2:
43:da:dd:f6:63:a8:6b:d6:5a:6a:25:ea:f1:79:13:7c:86:8e:
2d:9e:42:a4:90:19:24:bd:38:a5:ee:8e:64:d7:6a:aa:43:61:
6b:c7:93:eb:96:75:c4:9e:31:b0:a3:e6:32:7c:d7:bf:e0:82:
0b:04:c8:91:fc:12:45:d2:09:8e:90:b5:c2:42:51:f8:ea:d8:
41:c5:43:98:00:60:3e:4d:74:06:b3:22:89:92:09:a7:b0:60:
81:af:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:41:26 2025 by rpki-client