Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/ZG09dP8QmjZ8CGXTEuNvzc4f7LI.roa
File: ZG09dP8QmjZ8CGXTEuNvzc4f7LI.roa (raw, json)
Hash identifier: q3/z53+pUIZv2yWbFaGTHgsAt6O+u08gHjSgBuxwZa0=
Subject key identifier: 64:6D:3D:74:FF:10:9A:36:7C:08:65:D3:12:E3:6F:CD:CE:1F:EC:B2
Certificate issuer: /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial: 0439B3D5
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/ZG09dP8QmjZ8CGXTEuNvzc4f7LI.roa
Signing time: Sat 01 Jan 2022 10:00:33 +0000
ROA not before: Sat 01 Jan 2022 10:00:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208905
IP address blocks: 193.163.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70890453 (0x439b3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Validity
Not Before: Jan 1 10:00:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=646d3d74ff109a367c0865d312e36fcdce1fecb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:70:c5:60:ac:bd:23:b6:b4:39:90:c9:bc:
15:72:0a:24:4f:1b:af:2f:95:20:39:c1:95:23:5c:
b2:d0:1b:ab:23:1c:eb:6a:0a:5b:b8:03:72:60:a4:
b9:0f:65:a5:65:91:77:ce:62:ae:c5:ce:27:ed:68:
8e:47:23:77:f7:6b:6d:09:82:3a:ed:dd:c0:01:2a:
22:ae:39:c7:c8:e1:56:17:e1:c7:6f:fb:fe:06:1d:
56:86:d0:8a:4f:7c:4b:38:cf:ef:c2:ec:26:42:3b:
73:eb:33:dc:d0:3b:4d:65:e3:ee:6e:d9:08:8a:87:
39:c1:70:dd:26:8d:92:e4:05:fc:31:b4:f4:f4:18:
e2:ee:ec:1c:76:8f:e8:71:85:d3:68:19:b4:b9:66:
b6:a9:68:c9:b2:2a:03:dc:ad:94:46:69:83:a4:20:
00:37:46:6b:ea:63:8d:bf:9d:da:6c:98:f9:5c:ef:
9c:32:4b:66:7e:d1:e2:54:a1:95:15:4a:be:76:fb:
ab:fb:ed:35:83:76:12:29:97:41:bf:df:e3:e3:17:
be:0b:3e:4d:3c:b4:93:2f:1f:a6:14:2c:51:2d:8f:
43:0b:78:2d:89:98:64:23:62:63:59:9c:c9:7e:57:
cd:85:5b:19:e1:6e:e6:7e:6f:50:51:be:2e:25:e8:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:3D:74:FF:10:9A:36:7C:08:65:D3:12:E3:6F:CD:CE:1F:EC:B2
X509v3 Authority Key Identifier:
keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/ZG09dP8QmjZ8CGXTEuNvzc4f7LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.128.0/24
Signature Algorithm: sha256WithRSAEncryption
95:30:00:3a:4d:4c:7b:a9:4d:8f:6c:18:0a:96:c6:74:42:e9:
31:da:f6:01:e6:5f:e8:0d:3d:22:4f:49:3e:53:90:4a:2a:f5:
09:19:d4:18:e6:cf:00:b5:9a:2e:51:ba:24:a6:c5:af:a4:df:
22:72:24:ff:fc:29:a8:e5:44:fd:d7:19:bc:1b:9f:2d:2b:82:
f7:f9:6f:c2:16:b7:30:ab:dd:cf:d7:58:8a:46:f6:fd:b1:cc:
e2:7d:67:a1:b6:78:35:c9:05:09:1e:c2:d9:cb:f8:09:f0:4d:
8b:7c:d4:6c:ff:3b:be:c9:e3:53:45:0f:96:c5:7c:e7:c6:f1:
ee:eb:c9:9e:0e:b1:fb:a5:e3:a9:1a:01:01:2d:0b:59:8c:ef:
db:b6:8d:6b:70:ff:86:8f:82:fe:f6:42:f6:c7:db:13:46:20:
0c:c3:5f:91:f6:c9:fb:bd:2f:da:68:54:6d:03:52:74:28:58:
4a:32:57:3a:13:4f:6f:cb:01:4b:99:07:40:d4:da:b7:fe:57:
a0:9e:2c:9b:e1:0d:bb:9f:5c:03:9d:e5:b3:c8:39:94:bd:e2:
8d:38:45:bb:e3:78:46:96:1e:2d:24:52:de:c7:8c:08:8b:3d:
a4:91:b7:57:33:a5:76:8e:93:ec:47:25:3e:93:66:72:c7:5d:
49:8b:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:53 2025 by rpki-client