Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zqgpct096BSpDwAQHQsfeTbWSSI.roa
File: Zqgpct096BSpDwAQHQsfeTbWSSI.roa (raw, json)
Hash identifier: 10F3BMeHa4ctms5VTNd5ddu6ygJWxFYtsqx3r6z6ISc=
Subject key identifier: 66:A8:29:72:DD:3D:E8:14:A9:0F:00:10:1D:0B:1F:79:36:D6:49:22
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8AFCA813386F69310C57F4BB21C54E
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zqgpct096BSpDwAQHQsfeTbWSSI.roa
Signing time: Sun 01 Jan 2023 13:35:03 +0000
ROA not before: Sun 01 Jan 2023 13:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 212.243.163.0/24 maxlen: 24
194.209.56.0/24 maxlen: 24
195.65.217.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:fc:a8:13:38:6f:69:31:0c:57:f4:bb:21:c5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66a82972dd3de814a90f00101d0b1f7936d64922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:5f:65:11:76:bd:7a:54:c8:eb:6a:c4:51:
87:34:30:fa:03:ec:4e:f4:d3:5a:3a:a0:28:fc:ad:
20:67:6b:76:f6:91:b9:ac:aa:e4:b1:0a:21:e5:eb:
24:bc:55:da:d4:6f:f5:d4:2d:3d:de:c3:9a:07:8b:
6d:c2:0b:7f:33:68:0f:e2:3e:c9:c8:fd:55:e9:4a:
c6:46:a5:7b:86:98:9d:11:e6:44:1d:74:e6:cf:59:
76:e2:72:3d:08:d5:9f:9e:ec:63:c9:66:46:a4:71:
8a:7a:e0:14:04:3b:9a:4a:3b:33:5c:4f:9a:c0:38:
a8:e4:a0:b7:65:ab:7a:01:0c:b2:eb:67:ec:b4:40:
7b:f6:a7:25:71:f7:51:c8:6d:20:9e:7c:d9:ea:6f:
26:a0:21:79:be:e6:f4:c3:c0:d3:ff:19:4d:3f:ea:
61:03:59:de:04:70:19:78:0c:ce:d9:77:ae:04:97:
7d:73:e9:b3:1c:bd:93:51:08:d9:03:f0:bc:9b:5e:
8a:13:99:64:3b:01:13:e8:ec:70:b4:65:74:88:21:
98:bb:fc:fa:d3:66:a6:26:a9:ab:b2:39:c5:21:26:
20:c4:89:57:44:46:b1:93:3a:0d:dd:95:5c:16:ef:
80:1a:09:69:c0:94:5e:bf:df:6c:ea:04:15:28:01:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:29:72:DD:3D:E8:14:A9:0F:00:10:1D:0B:1F:79:36:D6:49:22
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Zqgpct096BSpDwAQHQsfeTbWSSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.56.0/24
195.65.217.0/24
212.243.163.0/24
Signature Algorithm: sha256WithRSAEncryption
57:84:c3:98:b6:29:c9:53:fa:b3:00:54:85:db:70:e6:1f:e6:
7f:aa:ef:b8:a7:9d:c6:e6:96:da:60:ef:29:0a:b8:2a:79:2d:
24:19:0f:98:bc:be:c6:e2:ec:ac:a7:7d:5e:5b:3c:bb:c0:ce:
ab:45:9a:0b:75:89:ae:84:de:bd:d0:b5:68:4d:2f:65:82:ab:
a1:eb:96:ed:be:2d:b8:2f:09:f8:a8:d4:54:75:71:5d:b1:46:
dd:9e:7f:1d:35:95:56:8d:e3:e2:85:2b:1a:94:5f:c4:66:e3:
89:fb:62:ec:59:09:42:1d:57:ce:7b:15:c6:87:c9:3e:3a:ad:
e0:45:38:ed:f5:a6:c3:0c:9e:93:cb:7c:8a:0d:14:a1:f2:88:
38:b3:b9:75:b5:3f:1f:59:19:59:f9:0d:dc:5f:dc:f9:b6:8c:
91:9d:7e:28:54:90:36:2c:83:38:24:ac:ab:4c:28:84:4f:26:
3e:30:d5:c9:20:92:5b:00:28:42:04:88:1b:2c:a6:79:93:c6:
a2:91:9b:57:fa:96:f2:58:b0:47:d8:de:27:20:53:87:11:97:
61:81:13:56:df:2a:5e:34:d6:75:7e:70:07:0e:4d:df:28:38:
2d:5e:9d:50:cc:6f:b9:71:0d:8d:78:f1:e9:1f:e2:93:69:86:
3c:83:11:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:40 2025 by rpki-client