Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/zw6cWDtTQnmSfo9IqLctmk80eC8.roa
File: zw6cWDtTQnmSfo9IqLctmk80eC8.roa (raw, json)
Hash identifier: wSjFleo3Htnh5/YAsTZr5lCLDTbCpEcZGxsWO9AdWNk=
Subject key identifier: CF:0E:9C:58:3B:53:42:79:92:7E:8F:48:A8:B7:2D:9A:4F:34:78:2F
Certificate issuer: /CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Certificate serial: 018B6FAC5235DE69E41646AF32813CBC613C
Authority key identifier: 22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/zw6cWDtTQnmSfo9IqLctmk80eC8.roa
Signing time: Fri 27 Oct 2023 05:47:26 +0000
ROA not before: Fri 27 Oct 2023 05:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216092
IP address blocks: 195.95.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:ac:52:35:de:69:e4:16:46:af:32:81:3c:bc:61:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c94cfd31a1a809cbf6c02a74a57bddc7ff1f78
Validity
Not Before: Oct 27 05:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf0e9c583b534279927e8f48a8b72d9a4f34782f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:07:ee:25:b5:2f:b6:27:4e:1d:77:83:4c:
10:d6:ef:dd:5b:23:1c:78:b6:5f:f3:c0:65:2b:62:
5e:6d:4e:95:f8:58:87:50:e3:ea:54:0d:fb:39:e0:
9b:1d:57:ef:dd:5c:37:e3:4f:f5:7a:17:24:73:b7:
e3:59:66:83:db:01:0d:f0:0f:ed:4f:38:f4:5f:2e:
b0:68:51:c1:f1:06:51:55:f5:80:c1:1c:be:e4:b5:
7a:8e:bc:af:c0:d4:2a:1a:4c:78:f5:d5:53:62:59:
1c:0f:0f:1d:f9:70:17:a4:77:11:24:ca:7c:76:1e:
7f:e4:c3:69:88:74:5b:fd:3c:7e:ed:a2:66:87:56:
e6:56:6a:c9:71:28:92:1b:11:1b:d5:98:36:37:36:
7c:c5:e5:7a:b3:c5:94:39:22:b3:5a:2d:4f:e8:ea:
1f:3f:b6:62:00:48:3b:a3:42:ef:7f:67:84:ea:4e:
76:9b:e8:fa:26:e9:ba:67:2d:47:bf:af:86:01:ae:
4e:b1:bf:5f:a9:dc:fd:ce:4e:83:c3:97:bf:1d:61:
16:94:86:18:e4:a1:b2:cf:26:af:da:9f:f4:45:43:
67:66:20:4e:e9:4c:f5:fe:2e:99:31:c1:2f:34:e3:
61:5b:8d:2a:ef:91:4c:3b:81:16:3c:9b:93:c1:00:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:9C:58:3B:53:42:79:92:7E:8F:48:A8:B7:2D:9A:4F:34:78:2F
X509v3 Authority Key Identifier:
keyid:22:C9:4C:FD:31:A1:A8:09:CB:F6:C0:2A:74:A5:7B:DD:C7:FF:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IslM_TGhqAnL9sAqdKV73cf_H3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/zw6cWDtTQnmSfo9IqLctmk80eC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/007dd8-b1e2-4a88-9018-ffd0df6bba22/1/IslM_TGhqAnL9sAqdKV73cf_H3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.150.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a0:ef:35:66:48:90:6a:5c:47:11:47:7b:da:94:90:ae:15:
8f:76:49:cd:9f:90:ee:90:38:19:6e:f5:a8:e6:67:ef:1f:e6:
5a:05:09:3a:22:16:51:cf:f7:f5:28:6f:9d:6f:60:6b:4f:da:
93:ae:56:80:65:98:1a:60:2b:26:af:d4:8c:17:eb:53:14:56:
1e:18:fe:cf:6b:01:b8:e3:67:88:2c:07:ca:87:73:c0:6a:13:
8a:a9:e8:b4:30:49:43:a4:85:9d:f0:46:e1:b8:84:69:68:95:
1b:c7:83:2e:c5:f7:e9:26:95:0c:f4:97:d8:71:20:07:2c:dc:
84:dc:45:54:86:1b:69:18:1a:c1:41:b5:70:3c:bb:ac:ed:c4:
b0:0d:11:a7:5a:f9:84:59:86:1c:1a:63:f0:24:0e:36:ae:78:
2a:89:95:25:ca:68:19:16:34:cc:c7:db:48:96:2d:4b:85:ff:
38:2c:aa:2f:1c:12:01:ad:1d:64:91:77:98:88:26:65:ce:ef:
95:97:67:0d:6d:52:41:63:77:02:61:34:67:37:95:f7:43:df:
87:b4:1e:7f:89:8a:80:4d:68:7d:c4:81:6c:c2:b4:1c:81:24:
7f:e9:8b:38:3c:cd:51:e3:94:cc:51:4c:0b:73:1c:16:82:33:
81:37:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:45 2025 by rpki-client