Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/ZyeFfT2k4uui3SfxB-0trHiCadc.roa
File: ZyeFfT2k4uui3SfxB-0trHiCadc.roa (raw, json)
Hash identifier: 04sW/ImeNOWY3Zo9VkSjCyAyJNBW0WEO6D+0KC7+9cU=
Subject key identifier: 67:27:85:7D:3D:A4:E2:EB:A2:DD:27:F1:07:ED:2D:AC:78:82:69:D7
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 0188716210EA6DC4975CE8F2D4034B29A1D9
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/ZyeFfT2k4uui3SfxB-0trHiCadc.roa
Signing time: Wed 31 May 2023 10:37:12 +0000
ROA not before: Wed 31 May 2023 10:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64445
IP address blocks: 91.193.55.0/24 maxlen: 24
2a12:e6c0::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:62:10:ea:6d:c4:97:5c:e8:f2:d4:03:4b:29:a1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: May 31 10:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6727857d3da4e2eba2dd27f107ed2dac788269d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c5:dc:a5:8a:20:00:94:70:83:c7:2d:ef:b6:
d9:47:6b:9a:0b:0a:a6:f6:3c:24:3c:71:c7:98:84:
ef:a4:7b:06:3b:4b:75:a9:ec:63:35:a4:b4:85:eb:
9c:14:83:0d:8d:3d:54:d2:5f:19:2b:3e:b8:b1:00:
a7:b1:c1:39:91:39:57:93:15:19:08:eb:af:b6:8f:
68:74:43:f5:d3:bb:33:e6:92:2f:06:40:df:e8:73:
e5:46:38:37:c4:ea:12:f6:f7:a5:8b:dd:c1:e9:9a:
8e:dc:84:3e:10:e4:1b:36:80:51:5a:c7:53:12:5b:
59:15:ab:0d:d8:5c:78:24:fc:7c:c5:e2:64:d7:0f:
f6:c5:6e:9c:32:96:83:6f:f5:f4:e8:da:2d:41:60:
1b:bb:5a:e8:20:20:1a:70:1c:9a:4a:31:76:c7:06:
3c:8c:9f:7e:9d:4d:84:cb:0d:52:71:56:a8:8a:eb:
63:bd:18:39:53:b0:04:51:40:a4:5c:93:02:be:f5:
be:a4:fe:0a:e4:17:fc:f2:f4:bf:79:c6:e1:f0:d8:
2b:24:9d:1f:35:d0:ca:b8:5c:bb:5c:b6:62:2f:cb:
ed:5c:c8:be:1a:6a:22:ec:cf:98:2a:df:2a:19:80:
0f:52:1a:7f:92:ff:d2:00:ba:a1:de:ee:d4:81:fc:
cc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:85:7D:3D:A4:E2:EB:A2:DD:27:F1:07:ED:2D:AC:78:82:69:D7
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/ZyeFfT2k4uui3SfxB-0trHiCadc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.55.0/24
IPv6:
2a12:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ad:4d:18:2b:d0:29:82:33:d7:8d:51:1a:94:47:9b:1a:d1:
fa:45:40:de:35:0a:46:cd:90:b4:0d:28:a4:5f:91:32:9a:c1:
1e:c9:f1:60:42:a4:38:e9:08:7a:69:fa:75:63:a5:f4:60:36:
d3:ef:d8:b9:81:67:da:cb:e4:7e:4f:62:84:b9:4d:ba:ec:73:
7d:b5:bd:3a:f5:0e:f6:b2:60:91:40:ea:20:14:7a:55:b9:65:
46:2c:7a:2e:75:c2:80:02:7f:6f:14:92:b7:5c:b7:62:28:73:
49:40:b0:33:13:9b:2f:f6:d3:ed:e5:52:ab:e7:b3:9c:6e:3d:
98:da:c7:5d:a3:3b:70:31:60:4b:1a:ed:38:a1:d6:3c:6e:5e:
2e:bb:4f:52:be:2d:06:1d:13:4a:a5:c7:2f:c2:4c:da:7c:46:
6f:79:50:20:de:d8:c3:30:4b:7d:f4:d1:09:59:da:6d:3c:ce:
97:d6:8e:b6:32:d4:b7:8a:30:67:90:e2:ef:30:b5:ee:d3:39:
f1:1e:40:11:9a:1a:be:ee:ca:1e:84:a6:89:96:bf:e9:bb:9d:
f8:b7:a5:73:d1:f6:28:86:19:77:11:36:3d:52:4a:32:fa:83:
3d:8b:13:2a:10:1d:5b:4e:40:e9:04:55:90:8c:7b:b2:46:e1:
58:a2:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:07:56 2025 by rpki-client