Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/zxGPQpkLv2cjVyczzASkYT6S9gU.roa
File: zxGPQpkLv2cjVyczzASkYT6S9gU.roa (raw, json)
Hash identifier: jYoEmdGpf3kya5H8bufAfc0vRsfzA/MdoeN5HxUefoI=
Subject key identifier: CF:11:8F:42:99:0B:BF:67:23:57:27:33:CC:04:A4:61:3E:92:F6:05
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018C69F707A9562176516B503F1F9F58A12E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/zxGPQpkLv2cjVyczzASkYT6S9gU.roa
Signing time: Thu 14 Dec 2023 20:14:06 +0000
ROA not before: Thu 14 Dec 2023 20:14:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53856
IP address blocks: 94.131.64.0/22 maxlen: 24
94.131.72.0/21 maxlen: 24
94.131.126.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:69:f7:07:a9:56:21:76:51:6b:50:3f:1f:9f:58:a1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 14 20:14:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf118f42990bbf6723572733cc04a4613e92f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:d5:2f:e4:7f:ed:4b:ed:b8:17:d4:42:dc:
23:b6:31:4a:aa:97:87:c9:28:01:0a:cb:99:81:99:
c8:d1:36:41:ba:92:88:83:a9:91:55:85:1c:03:2a:
29:91:cb:c8:1e:9c:85:93:32:29:4e:6a:d3:0c:92:
43:b3:c0:6e:3f:70:88:bb:58:45:50:7c:26:be:7d:
ae:4e:1b:66:7d:59:94:82:44:b3:30:ff:ec:60:cc:
cd:e2:4e:0c:28:06:34:d6:36:5b:ff:b2:e2:ea:9d:
79:20:93:60:0f:d4:4d:a7:5c:35:4b:0b:bb:bf:9d:
11:2d:10:7a:cf:3b:1e:10:da:96:84:10:80:a4:47:
c2:43:c1:a4:b7:1d:6e:c6:ef:3e:6c:da:ca:cf:a9:
67:fa:2a:bf:dc:b0:89:64:5c:36:31:4d:8e:ad:4b:
d7:5d:95:17:aa:46:3c:2d:30:19:9c:2e:8c:5c:02:
68:ad:b6:7b:79:31:4c:28:ee:77:72:16:b6:dc:68:
0f:55:9c:e7:0a:60:53:a0:1d:73:d0:67:16:7c:5a:
4f:a2:af:07:3f:b7:54:b8:b8:a9:06:dc:d9:96:f8:
78:ed:82:ba:1c:68:7b:6d:2c:91:84:f2:c3:ab:7d:
14:12:b5:58:93:c3:40:f9:c7:fa:a9:ad:2d:f1:3d:
8a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:8F:42:99:0B:BF:67:23:57:27:33:CC:04:A4:61:3E:92:F6:05
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/zxGPQpkLv2cjVyczzASkYT6S9gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.64.0/22
94.131.72.0/21
94.131.126.0/23
Signature Algorithm: sha256WithRSAEncryption
50:50:89:3c:9d:bf:86:96:ae:1c:c5:d5:2b:59:05:39:26:01:
4f:5c:17:ea:ae:3c:a6:dc:07:7f:b6:9e:ea:e1:06:8f:d1:d9:
46:80:8d:fd:38:95:8a:23:7f:39:7c:11:da:74:79:90:f5:45:
05:f5:ce:cb:d0:7f:f9:70:0d:61:df:00:ee:af:12:5c:47:06:
68:2e:d0:25:d8:26:f5:81:65:b2:7b:22:37:49:08:0d:0b:f3:
0a:80:0e:7c:22:67:d9:bb:24:5f:a1:3a:33:c6:2c:f1:0e:7d:
76:e8:0a:07:f7:d7:24:8e:73:25:77:7e:50:1e:0c:ba:5e:f6:
f6:87:4d:ac:36:e8:70:90:93:50:fc:1d:1d:fb:80:15:68:6b:
38:3b:7e:26:c0:68:97:27:7a:1e:80:8b:1b:d6:c1:d5:82:94:
8a:4d:56:06:c7:14:ab:f3:7f:ac:5c:ad:e8:8a:af:5f:74:85:
66:37:98:38:87:a2:0d:1f:67:60:9b:bc:f2:d2:74:7c:b8:cb:
96:fe:ab:78:c3:0c:38:29:76:75:dd:7b:55:2b:91:fe:26:46:
f3:87:e1:19:21:d4:68:85:d3:a3:d3:a7:6a:74:56:ff:99:5c:
39:c5:f2:f2:ac:02:cf:a7:9c:4a:86:5b:43:0f:bf:21:b5:20:
28:64:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:05 2025 by rpki-client