Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/ZpaMio78bVhNo-CnEBm0VRa4U1A.roa
File: ZpaMio78bVhNo-CnEBm0VRa4U1A.roa (raw, json)
Hash identifier: 0lKGo88SAhRVN+DqcYcFAXyDcDGrsPVOaz9XhrjfX9Q=
Subject key identifier: 66:96:8C:8A:8E:FC:6D:58:4D:A3:E0:A7:10:19:B4:55:16:B8:53:50
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 018571C3081266431F07F3FC3B030E4DA81F
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/ZpaMio78bVhNo-CnEBm0VRa4U1A.roa
Signing time: Mon 02 Jan 2023 09:14:45 +0000
ROA not before: Mon 02 Jan 2023 09:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.40.233.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:08:12:66:43:1f:07:f3:fc:3b:03:0e:4d:a8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Jan 2 09:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66968c8a8efc6d584da3e0a71019b45516b85350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:67:72:4b:46:3b:8a:19:23:bb:f8:46:12:
1b:cc:bb:b6:b2:ac:3e:57:c1:55:13:07:d6:c2:72:
4f:d6:33:5c:58:c9:d9:21:2d:01:8b:ad:80:33:5b:
d9:2f:29:58:41:d3:a0:af:a1:02:b7:31:21:87:06:
92:0e:59:88:4d:c1:cd:72:85:55:8f:61:2f:4d:32:
92:71:52:bb:ba:97:a7:08:e2:73:0a:b0:70:c6:99:
3c:6d:5f:2e:a7:cc:d8:24:15:81:fa:c4:09:e8:17:
dc:86:bf:ca:54:2b:e6:42:1e:a9:cd:d4:04:13:1a:
24:6e:2f:d1:f4:26:49:cb:7a:a8:be:49:31:f1:4b:
f1:ce:dc:c5:e6:52:ad:d2:4e:50:90:66:a6:9c:19:
7b:58:c4:4b:4d:7b:2e:39:dc:e6:43:d0:84:08:53:
db:6d:6d:13:db:7c:77:16:a4:1d:bc:51:2e:1f:30:
fb:67:d7:90:bd:94:30:28:91:2a:f2:6a:04:2f:e1:
7c:0e:1b:e7:98:e4:02:89:6e:17:9d:0c:b9:79:bb:
66:99:15:8f:1c:1d:49:74:72:3c:75:eb:91:e6:18:
3b:8b:e0:c3:39:e8:0b:f0:c1:ec:ed:67:6c:5e:71:
f8:8c:28:61:65:f5:22:d7:67:90:8a:27:62:fb:d1:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:8C:8A:8E:FC:6D:58:4D:A3:E0:A7:10:19:B4:55:16:B8:53:50
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/ZpaMio78bVhNo-CnEBm0VRa4U1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.40.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:53:85:eb:5b:bf:91:08:ae:43:70:9d:ac:fc:a7:ba:e0:24:
06:35:8b:98:d8:24:0f:0f:5d:8a:cc:ea:54:50:f5:e6:cb:0a:
de:74:69:e0:bf:a3:f5:08:bd:57:7a:41:98:1d:fe:bd:e2:fb:
a8:e0:80:36:53:e0:2d:41:c7:3e:9a:78:fb:b9:25:9b:f5:67:
99:57:8c:f0:00:48:1a:26:fc:3a:af:29:46:0e:a7:fb:60:dd:
8e:c9:60:20:8e:75:4a:94:f8:82:fd:7e:f7:2e:ed:f7:28:9c:
b3:0c:ab:8a:09:2b:c4:65:16:40:07:28:b5:8d:ac:13:3b:ca:
d2:ab:e0:44:05:ef:ef:4d:78:50:9f:bc:53:32:8b:5f:da:a4:
9a:d5:5b:34:9b:8e:f2:29:81:5a:8d:8d:2d:be:37:d0:87:b0:
28:7b:ac:39:85:63:90:a5:14:ef:6e:92:7c:6a:d7:4b:62:77:
d8:16:f9:ad:21:32:1a:59:bd:e8:ee:32:8f:38:c3:47:84:f3:
b1:f0:8b:ac:02:97:db:3a:9e:aa:39:44:f2:17:92:04:ab:cc:
e9:fb:fb:70:44:92:95:36:31:cc:4c:10:07:5b:39:44:f2:43:
fb:e5:a3:ab:b1:60:6f:14:d1:2c:41:27:6b:c7:b9:37:74:ed:
c6:9c:13:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxwwgSZkMfB/P8OwMOTagfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh
OGI0ZjYwHhcNMjMwMTAyMDkxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Njk2OGM4YThlZmM2ZDU4NGRhM2UwYTcxMDE5YjQ1NTE2Yjg1MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxRncktGO4oZI7v4RhIbzLu2sqw+
V8FVEwfWwnJP1jNcWMnZIS0Bi62AM1vZLylYQdOgr6ECtzEhhwaSDlmITcHNcoVV
j2EvTTKScVK7upenCOJzCrBwxpk8bV8up8zYJBWB+sQJ6Bfchr/KVCvmQh6pzdQE
Exokbi/R9CZJy3qovkkx8UvxztzF5lKt0k5QkGamnBl7WMRLTXsuOdzmQ9CECFPb
bW0T23x3FqQdvFEuHzD7Z9eQvZQwKJEq8moEL+F8DhvnmOQCiW4XnQy5ebtmmRWP
HB1JdHI8deuR5hg7i+DDOegL8MHs7WdsXnH4jChhZfUi12eQiidi+9EHpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaWjIqO/G1YTaPgpxAZtFUWuFNQMB8GA1UdIwQY
MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt
ZTFmMzY3ZTc5NjIwLzEvWnBhTWlvNzhiVmhOby1DbkVCbTBWUmE0VTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw
LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwijpMA0G
CSqGSIb3DQEBCwUAA4IBAQAOU4XrW7+RCK5DcJ2s/Ke64CQGNYuY2CQPD12KzOpU
UPXmywredGngv6P1CL1XekGYHf694vuo4IA2U+AtQcc+mnj7uSWb9WeZV4zwAEga
Jvw6rylGDqf7YN2OyWAgjnVKlPiC/X73Lu33KJyzDKuKCSvEZRZAByi1jawTO8rS
q+BEBe/vTXhQn7xTMotf2qSa1Vs0m47yKYFajY0tvjfQh7Aoe6w5hWOQpRTvbpJ8
atdLYnfYFvmtITIaWb3o7jKPOMNHhPOx8IusApfbOp6qOUTyF5IEq8zp+/twRJKV
NjHMTBAHWzlE8kP75aOrsWBvFNEsQSdrx7k3dO3GnBNM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:44 2025 by rpki-client