Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/Z1ISN1x22woBkpy6W8QtntHPyzE.roa
File: Z1ISN1x22woBkpy6W8QtntHPyzE.roa (raw, json)
Hash identifier: DFVJ2V5o3zMSqL5bbKztXJMG4bNiqBuMY+FF0uG0Ld8=
Subject key identifier: 67:52:12:37:5C:76:DB:0A:01:92:9C:BA:5B:C4:2D:9E:D1:CF:CB:31
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018480933F5DE0905AB79C8383C151396E67
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/Z1ISN1x22woBkpy6W8QtntHPyzE.roa
Signing time: Wed 16 Nov 2022 13:14:04 +0000
ROA not before: Wed 16 Nov 2022 13:14:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47860
IP address blocks: 89.188.160.0/24 maxlen: 24
89.188.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:80:93:3f:5d:e0:90:5a:b7:9c:83:83:c1:51:39:6e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Nov 16 13:14:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=675212375c76db0a01929cba5bc42d9ed1cfcb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:41:a3:34:53:83:be:60:c2:d0:00:67:bf:
75:3e:38:0b:2e:9e:7e:0e:c4:b3:73:de:05:67:03:
7e:f0:02:a5:6f:64:0c:68:2e:02:d6:ea:b4:9e:01:
3e:64:b0:bb:31:03:a3:52:ad:38:98:d6:c2:74:9d:
23:eb:69:58:ec:84:72:a7:bb:28:db:13:ea:4c:7b:
29:9c:d9:08:7e:7a:ea:f4:39:1e:61:e6:a5:6c:13:
f3:17:6b:54:a5:7f:fa:ef:82:77:ab:74:95:c7:90:
29:ef:8b:fc:8e:ef:3c:23:90:fb:3a:ba:f6:9f:94:
0d:9c:d2:be:fe:6f:3d:d3:23:77:ff:88:7e:84:a0:
0e:ad:b4:ab:5f:2b:7b:4c:91:37:7f:98:34:77:55:
66:98:b1:29:9f:7a:e6:38:da:ea:1e:34:41:ae:ec:
ca:3f:54:38:46:3d:66:36:b2:dd:5f:1a:da:24:28:
c6:66:6a:24:b2:fe:29:0f:30:f7:5b:28:99:9c:57:
d1:1c:ed:09:ef:69:b1:ad:4c:44:d3:db:c7:fd:48:
db:ab:f3:ca:94:8f:7a:60:51:42:bb:52:80:3f:70:
16:2d:45:56:c6:77:d6:47:e1:37:25:11:11:ce:2b:
96:4e:f6:84:47:21:09:39:b9:45:02:67:7f:28:55:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:52:12:37:5C:76:DB:0A:01:92:9C:BA:5B:C4:2D:9E:D1:CF:CB:31
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/Z1ISN1x22woBkpy6W8QtntHPyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.160.0/24
89.188.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3a:33:e9:2f:f6:2e:c9:a4:cc:22:b3:0c:41:fb:7b:0a:c9:
71:af:09:6e:3c:65:28:89:7c:0d:c6:69:5b:75:95:bf:c0:4f:
8e:6e:6d:6e:33:f9:ff:d6:4a:af:eb:c4:c4:26:a4:35:37:fe:
8a:0c:22:fb:46:49:a3:cd:8a:1f:13:ad:f6:44:47:9e:e4:e1:
8b:28:e7:33:d3:8f:f4:19:6b:95:33:cc:64:62:84:55:6b:71:
fa:7b:bb:21:bb:ce:35:00:1d:46:60:75:57:aa:65:c4:2c:0f:
91:1b:8d:a8:21:e7:88:e7:74:e1:0b:fd:17:dc:89:85:9a:cb:
20:67:40:71:99:02:2e:05:b8:55:9c:e5:d1:ce:86:4c:94:ef:
9c:bd:47:1f:26:e5:eb:94:29:d5:8e:5b:7a:b5:84:46:91:fd:
4c:90:11:c1:b7:91:dc:43:6b:b4:7b:93:58:07:c7:c2:9b:ac:
4b:ca:98:34:5a:26:c8:d4:23:f1:ed:da:8f:e4:7e:d7:a9:d3:
46:c3:ae:88:39:94:db:35:96:cc:8f:6d:78:5c:33:f8:92:09:
9f:bf:d0:6e:a2:4d:dd:30:34:bc:ca:2d:dd:f2:9b:4b:2c:b3:
3b:4e:db:d2:59:ae:96:9a:9a:2d:58:ce:79:b3:14:4e:b3:f0:
34:86:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:04 2025 by rpki-client