Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/0ZL24hym60EZg8fxPzuIlf4wTI4.roa
File: 0ZL24hym60EZg8fxPzuIlf4wTI4.roa (raw, json)
Hash identifier: /mjTeg5sL1MQelGrkWYm0o0/8znhLi0va4w6hDDeoMA=
Subject key identifier: D1:92:F6:E2:1C:A6:EB:41:19:83:C7:F1:3F:3B:88:95:FE:30:4C:8E
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 018C3FF6E7C0EA0FFA457D85FCE4276729B3
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/0ZL24hym60EZg8fxPzuIlf4wTI4.roa
Signing time: Wed 06 Dec 2023 16:29:54 +0000
ROA not before: Wed 06 Dec 2023 16:29:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50889
IP address blocks: 85.29.14.0/24 maxlen: 24
85.29.18.0/24 maxlen: 24
85.29.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:f6:e7:c0:ea:0f:fa:45:7d:85:fc:e4:27:67:29:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Dec 6 16:29:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d192f6e21ca6eb411983c7f13f3b8895fe304c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:32:25:cd:91:07:0e:0b:df:57:56:73:11:
48:99:61:2e:b8:78:39:bc:c4:7c:4f:69:16:3a:a8:
07:af:4b:cc:1a:b4:94:c1:87:10:e1:a2:33:03:ef:
bb:cf:81:a7:dd:45:e2:6d:b8:67:6e:24:5d:f1:15:
98:3a:ca:44:8e:fc:eb:d2:88:02:27:e8:29:11:a8:
19:82:12:a3:e0:bc:62:ce:d6:7c:9a:4c:f6:8b:92:
07:02:5d:e0:cb:67:33:d9:2b:50:a8:ad:3b:24:3e:
f0:2a:f8:62:37:87:2b:ac:84:7f:e9:9c:92:84:f5:
66:ee:ca:66:19:52:05:ea:12:89:a9:6d:94:32:b9:
e9:3c:15:17:77:f4:65:df:e4:72:59:e3:6f:e3:17:
d7:3f:95:6e:3a:f5:24:e6:74:38:25:89:e6:61:8e:
4a:2e:26:25:d8:46:10:f5:63:a1:22:05:81:db:65:
23:68:6c:02:79:89:ef:2d:1f:6a:20:f0:66:11:58:
13:70:01:e1:5e:6f:30:12:d1:34:d4:5b:eb:24:5e:
55:7c:9b:42:a4:50:aa:e7:56:05:5f:f8:1d:e5:98:
fd:28:23:c6:61:13:cc:f4:b8:a0:18:d6:19:0b:42:
cf:9e:52:66:7d:1b:25:ad:f6:5e:59:4c:2b:3e:13:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:F6:E2:1C:A6:EB:41:19:83:C7:F1:3F:3B:88:95:FE:30:4C:8E
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/0ZL24hym60EZg8fxPzuIlf4wTI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.29.14.0/24
85.29.18.0/24
85.29.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:1f:66:c3:1b:d2:5e:ff:e9:51:72:f4:cd:21:49:58:66:e7:
03:7d:82:a1:11:65:fe:64:b1:fe:4b:60:3d:cd:a3:09:d5:b7:
9f:08:12:fd:f9:23:eb:7c:a3:09:98:14:ff:0b:f1:27:21:ca:
2a:ad:26:f0:fe:84:37:98:4d:14:68:cc:c7:92:d8:4c:78:1a:
be:0c:2e:60:34:ad:35:b3:5f:26:33:4f:36:b6:b3:7d:79:4d:
6f:a0:ae:ae:05:b2:cc:79:73:5c:df:77:4d:1b:2e:de:98:ec:
7c:3a:54:1b:b8:5f:04:c5:fe:8b:d9:58:9f:eb:6c:ed:25:df:
b7:6b:92:f7:57:b9:71:11:b8:de:16:bb:df:de:27:6d:ed:f9:
6c:bd:cb:3c:cf:ad:1e:f1:89:09:31:c9:6f:3e:f2:5d:5e:2a:
8c:9b:1b:54:07:2f:28:cc:a8:d4:4b:da:fc:2f:2b:c9:5c:ec:
a8:4a:38:e0:97:ac:7a:6a:58:ad:85:46:61:5b:b0:24:7c:9f:
5e:46:bb:6b:7a:ff:4f:9e:12:c0:ae:1b:6a:3e:e9:92:23:c8:
72:5d:73:07:72:17:e3:59:64:ea:0a:b8:0a:48:96:c2:6a:08:
b4:64:7c:c5:59:81:c8:b3:cc:bd:3a:b9:09:79:d9:f3:da:8e:
64:29:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:54:24 2025 by rpki-client