Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/zxneh-S5BcucQ-NXwV5Jq1Nby4M.roa
File: zxneh-S5BcucQ-NXwV5Jq1Nby4M.roa (raw, json)
Hash identifier: WWqqtk0B9H174M1P4mxF8z2SUXVUYFc/KrCm6oQKwdU=
Subject key identifier: CF:19:DE:87:E4:B9:05:CB:9C:43:E3:57:C1:5E:49:AB:53:5B:CB:83
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 018B13EF796919B4C139F2C00EDDB738E88B
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/zxneh-S5BcucQ-NXwV5Jq1Nby4M.roa
Signing time: Mon 09 Oct 2023 10:15:43 +0000
ROA not before: Mon 09 Oct 2023 10:15:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20546
IP address blocks: 195.170.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:13:ef:79:69:19:b4:c1:39:f2:c0:0e:dd:b7:38:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Oct 9 10:15:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf19de87e4b905cb9c43e357c15e49ab535bcb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:79:eb:30:ef:fe:e8:6d:53:3c:6b:87:c9:
8f:58:45:75:07:6d:cf:c0:37:bc:f5:fb:d1:30:1d:
bf:8b:b9:dc:48:6a:35:44:eb:63:60:1c:3c:99:54:
35:85:0e:3b:a5:6b:7e:aa:43:85:05:24:4f:6c:61:
c0:32:c8:f4:0f:86:6e:01:2d:be:63:80:8b:fa:48:
30:d0:58:5f:1d:c4:c2:cd:28:be:b1:8d:3f:8a:18:
78:d8:fd:d2:80:5f:cd:27:55:88:15:34:1d:be:c7:
42:9a:aa:23:fc:59:60:76:47:09:14:a0:02:1a:65:
f7:f6:3a:ed:31:17:5d:7d:15:17:b8:1d:79:87:45:
f5:31:6a:af:ec:2f:3b:ea:17:bb:e4:ab:51:a6:5d:
4e:01:50:c9:1e:21:a6:95:84:6d:ed:0b:27:7e:7f:
eb:00:3a:2f:7a:1e:cd:90:ce:ce:81:4e:5f:32:13:
65:90:a6:fa:06:06:0f:71:7d:75:46:7b:6f:e2:04:
96:e0:fc:f9:9f:23:f8:71:2a:15:11:fe:0c:54:12:
3e:f5:6a:6f:86:59:77:fb:06:60:51:f3:50:4a:a8:
6d:ab:e6:75:aa:e4:94:b1:f7:a3:00:26:ba:e8:92:
15:15:42:d1:da:0c:da:43:48:95:56:ef:e4:5b:0e:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:DE:87:E4:B9:05:CB:9C:43:E3:57:C1:5E:49:AB:53:5B:CB:83
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/zxneh-S5BcucQ-NXwV5Jq1Nby4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.170.185.0/24
Signature Algorithm: sha256WithRSAEncryption
33:d8:ae:bf:7e:2f:47:82:ab:dc:1a:3a:5b:be:b1:e8:aa:7b:
e0:b5:38:33:9e:23:68:e4:37:f2:06:65:ba:04:21:49:18:7e:
8d:87:8e:dd:c6:d3:60:0a:cf:82:93:f4:3b:d7:55:c8:c7:ce:
21:50:10:70:7a:de:7f:8a:b4:f9:66:81:43:7e:cf:bc:6c:29:
16:21:dc:1d:96:07:37:84:2c:79:24:98:eb:c4:94:a4:ae:29:
de:73:4a:04:8b:ad:be:e1:2d:80:5c:ed:56:3e:e1:a8:84:58:
0d:26:2d:91:25:c9:2b:e8:93:28:f5:cd:34:b7:f9:0f:f3:67:
5a:35:88:cb:dd:d4:d1:13:d3:a5:e6:78:f7:aa:52:b2:8f:18:
5b:27:87:8f:54:ed:39:17:fd:83:fb:4d:4e:2c:7d:35:e1:52:
ba:05:56:02:39:82:95:b5:f6:cb:90:0e:5b:53:95:52:d4:37:
42:e9:ef:30:fe:6d:b0:45:4d:51:dc:6f:15:92:b3:57:43:6b:
8b:2f:72:2d:c2:56:21:76:02:dc:ad:58:d4:a9:d6:73:18:5d:
d9:7d:0e:60:20:78:c4:2c:79:13:d3:d4:37:7a:ad:5b:c0:82:
e1:7e:5b:16:d4:96:3c:af:95:12:8f:77:cf:bd:56:dd:2e:22:
41:8e:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:19:32 2025 by rpki-client