Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/z4Lh50B7JBwk7azJ-Xso_zFGCuE.roa
File: z4Lh50B7JBwk7azJ-Xso_zFGCuE.roa (raw, json)
Hash identifier: DGMr43eOu/v0sXAJCoLUhKQnBUKpXde7pf9i/mS+KBg=
Subject key identifier: CF:82:E1:E7:40:7B:24:1C:24:ED:AC:C9:F9:7B:28:FF:31:46:0A:E1
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 018C49D1E16AFFA6F9FAC72F00E44509E798
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/z4Lh50B7JBwk7azJ-Xso_zFGCuE.roa
Signing time: Fri 08 Dec 2023 14:25:40 +0000
ROA not before: Fri 08 Dec 2023 14:25:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4785
IP address blocks: 2a14:1f80::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:49:d1:e1:6a:ff:a6:f9:fa:c7:2f:00:e4:45:09:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Dec 8 14:25:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf82e1e7407b241c24edacc9f97b28ff31460ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fd:9a:43:60:da:84:04:24:97:c1:cd:59:73:
09:5d:6b:38:d7:be:60:14:49:a0:57:79:69:33:a2:
a0:32:b6:d4:10:c0:37:15:5c:bd:f0:c5:da:fc:90:
37:48:eb:f4:d7:f8:7a:55:56:4c:26:7d:d6:97:3e:
7d:9f:cd:bd:ff:06:bd:d1:d5:72:cf:96:e8:7f:1e:
4b:00:1c:40:14:b9:09:7c:2e:e7:1b:f7:4b:ef:26:
6b:1c:16:2f:10:67:2f:33:9a:3d:81:43:a1:12:c1:
b0:b9:4b:fc:ed:dd:70:1b:64:80:b5:99:38:ff:4e:
f5:11:31:43:3e:94:95:a9:00:df:d0:1b:20:a6:49:
3e:3b:bd:88:f4:f0:29:34:07:8b:a2:45:da:2d:0d:
86:4a:63:1c:79:16:ba:83:2c:d8:63:47:a6:72:a4:
8f:d5:07:dd:30:b3:68:ef:d4:30:fd:73:3a:28:1d:
48:da:bb:13:39:f7:40:1e:cf:87:b7:79:f4:7b:37:
f8:70:69:c2:39:0f:a0:79:b8:38:80:22:c3:0d:48:
66:a8:e9:79:e1:1e:04:04:ae:aa:50:9e:68:5b:54:
a6:10:d6:c2:59:e5:da:4d:2f:c0:58:12:59:87:da:
17:fe:5a:83:0e:bc:f3:9e:9c:8f:6d:6a:7c:be:64:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:E1:E7:40:7B:24:1C:24:ED:AC:C9:F9:7B:28:FF:31:46:0A:E1
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/z4Lh50B7JBwk7azJ-Xso_zFGCuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
25:df:62:1b:1d:8e:d0:f4:94:ec:79:42:01:d6:c0:00:c5:95:
73:60:58:2c:dd:28:2e:6f:a3:68:51:f1:93:6b:a4:c0:aa:fe:
d1:9b:80:33:5d:11:17:ac:65:05:17:21:18:49:68:76:b4:0b:
32:98:34:1c:ec:d4:54:98:9d:7e:07:0f:ad:70:1a:00:5c:77:
9d:0b:14:f3:9d:29:9c:18:26:33:c3:d2:ae:62:ad:cf:25:82:
4a:cc:a5:b2:2c:36:7a:77:7b:c9:cb:b9:05:f9:d8:1a:40:b3:
7c:ce:5c:32:1e:a9:8a:dc:28:be:12:17:23:13:63:37:3c:15:
90:da:48:0f:4e:fe:ad:4d:13:a5:63:51:2a:9c:27:fd:c1:a9:
32:08:be:f6:8d:6f:d6:9f:72:f6:38:7c:90:0d:9c:6d:49:36:
92:73:5e:17:49:9d:51:af:5b:a7:c7:d5:04:dc:a7:d4:f9:a3:
c4:76:63:b4:93:e5:fc:31:10:9d:87:5d:bf:93:cc:ee:16:12:
82:2a:91:65:cd:63:a2:64:f1:bf:7e:50:e6:15:cb:35:7d:f4:
ed:45:b2:be:3e:de:d2:f4:27:fe:e2:ae:2c:bd:24:13:3e:e8:
70:d8:08:d7:96:bc:c1:3e:bd:ec:c0:0f:0c:01:7e:cf:c0:a0:
6d:81:de:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:31 2025 by rpki-client