Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ZGkBFOz9c_11vtTGj5goZg_-rZQ.roa
File: ZGkBFOz9c_11vtTGj5goZg_-rZQ.roa (raw, json)
Hash identifier: reuAG4ZNpRnzOmYku8I4rL9FQ7PP4Rc0tC47jSY2U+w=
Subject key identifier: 64:69:01:14:EC:FD:73:FD:75:BE:D4:C6:8F:98:28:66:0F:FE:AD:94
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018570DE4E3F011BDA03A4312BF9C9AAEA73
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ZGkBFOz9c_11vtTGj5goZg_-rZQ.roa
Signing time: Mon 02 Jan 2023 05:04:55 +0000
ROA not before: Mon 02 Jan 2023 05:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 193.30.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:4e:3f:01:1b:da:03:a4:31:2b:f9:c9:aa:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 2 05:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64690114ecfd73fd75bed4c68f9828660ffead94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:e1:0f:b9:f7:44:47:a6:ec:94:3a:9d:e0:
39:99:33:74:81:29:26:82:2a:ab:5f:d3:02:b6:3f:
73:0d:3b:4c:aa:39:0b:cd:90:5f:fd:29:57:d8:ed:
5f:b8:6c:d0:0e:18:be:e4:48:6b:d6:ad:31:05:bb:
bd:e4:8e:8d:bb:5e:3e:ca:95:b2:85:0c:11:3e:45:
3a:72:82:4e:d7:ab:5d:65:79:23:48:06:7b:03:bc:
1d:cc:ef:b4:4d:77:30:18:2e:ba:b9:2e:3e:ba:7d:
06:18:3e:0f:96:16:af:00:c4:73:50:2a:0e:0c:33:
a4:54:86:26:79:4f:67:e8:f0:f2:0b:da:b3:12:e5:
c3:18:d7:40:0f:fe:7b:61:b8:5d:dd:51:30:9e:ba:
4c:71:79:6d:a4:a3:ef:2f:ee:37:df:55:48:09:54:
56:9f:37:5b:59:c9:18:88:71:fa:cd:b1:0c:83:94:
67:ed:70:66:cd:56:9b:0d:79:5b:15:b3:a0:83:4a:
c2:91:b7:e7:66:fd:a7:ad:30:5b:64:79:23:d7:63:
f2:8d:45:2a:eb:bd:95:48:6e:74:81:f1:d2:d8:e8:
6d:4f:2a:e3:bd:fe:1b:55:d4:e1:0b:3c:4a:e4:a4:
bd:dc:42:1f:bd:d9:03:c0:f0:f9:9f:d0:f2:2e:50:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:01:14:EC:FD:73:FD:75:BE:D4:C6:8F:98:28:66:0F:FE:AD:94
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/ZGkBFOz9c_11vtTGj5goZg_-rZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:54:4c:1c:65:06:c7:30:58:69:78:35:1c:1b:6b:1f:f5:a3:
93:47:9a:45:0c:75:bb:ca:7e:7a:32:48:47:26:85:e1:12:91:
a7:24:8f:ee:b7:d3:ac:89:ab:eb:5a:0e:07:68:0e:c1:22:1d:
7b:ed:50:63:f3:0a:fd:bf:fb:e5:a1:cc:90:8b:d6:3c:d1:55:
6f:db:de:07:98:8a:9a:18:dd:39:d3:8e:dd:d0:59:9f:93:c9:
c9:79:14:bb:e6:3a:ca:24:01:a0:3a:19:80:a2:c5:ed:fe:2d:
d0:35:54:56:2f:f0:16:f9:c0:8e:84:be:a6:21:89:aa:63:d4:
27:66:4b:9e:0e:b6:12:37:93:f4:59:45:dd:26:4a:84:e2:c5:
62:8a:51:2a:db:ef:b3:c9:d6:56:59:bd:a4:00:2a:18:ee:94:
f7:c7:22:dd:66:46:36:94:cd:c8:2e:ee:20:43:78:c0:e8:e8:
be:1b:09:eb:bb:2b:18:eb:7f:d0:bb:a8:6b:0b:c0:ee:40:ef:
5e:c8:75:96:b8:94:f3:10:16:11:f9:8d:c6:31:88:60:31:10:
96:e6:30:64:d5:60:4b:4c:8d:34:c8:60:6e:00:f6:92:6b:86:
8c:24:9a:78:db:a8:c1:87:a9:35:52:e4:fa:58:c0:85:23:c7:
2d:b1:30:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:54 2025 by rpki-client