Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/zJm21P8kVvrcBQzKXmp96DzBIRc.roa
File: zJm21P8kVvrcBQzKXmp96DzBIRc.roa (raw, json)
Hash identifier: 3D0++NOshDG+JDcVyTl0OZ3PUxkfz/FHfbJYrpQ9FSE=
Subject key identifier: CC:99:B6:D4:FF:24:56:FA:DC:05:0C:CA:5E:6A:7D:E8:3C:C1:21:17
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 0A109739
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/zJm21P8kVvrcBQzKXmp96DzBIRc.roa
Signing time: Sat 01 Jan 2022 15:57:35 +0000
ROA not before: Sat 01 Jan 2022 15:57:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50494
IP address blocks: 193.105.70.0/24 maxlen: 24
83.150.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168859449 (0xa109739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Jan 1 15:57:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc99b6d4ff2456fadc050cca5e6a7de83cc12117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:8c:02:57:2a:eb:9e:7b:23:a3:32:dc:b3:
e0:2f:3d:38:06:65:b7:e9:2a:b0:e7:a9:76:38:3d:
6b:54:24:1d:b4:f3:62:73:14:fa:2e:f9:93:fe:a0:
7c:35:94:6a:50:03:ed:f3:81:d6:b0:e4:07:8c:e0:
91:c6:c6:75:00:5c:5e:3a:c8:d4:e6:ef:5a:b1:4a:
45:c5:80:54:76:36:9b:4c:51:35:91:89:f5:d6:97:
87:ef:79:4f:d7:bb:4d:e8:db:36:12:be:09:78:52:
e9:bc:e8:ee:22:f3:59:1b:83:21:c9:9a:1a:df:bf:
77:24:90:22:40:f7:bb:af:9e:ff:6b:2b:b7:55:77:
f5:f8:7e:66:e2:b3:16:03:16:7d:1c:c9:7f:17:e2:
79:64:00:f5:00:59:30:db:39:1e:be:2e:3e:ab:fd:
3c:4b:0b:8d:32:d7:4d:8a:ec:15:fd:eb:59:e9:7e:
3c:8d:99:b9:a7:94:ee:52:b0:92:34:bf:be:da:9b:
83:01:49:5b:cb:ce:e9:6e:6b:e6:e0:7a:cc:75:54:
a4:3b:45:9f:24:79:06:00:71:ce:ca:f4:53:49:d2:
3e:ab:bf:e5:92:3f:5f:e0:33:ce:50:88:b4:ca:8b:
e7:55:f7:12:a9:93:74:1c:56:6e:94:52:1a:bb:42:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:B6:D4:FF:24:56:FA:DC:05:0C:CA:5E:6A:7D:E8:3C:C1:21:17
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/zJm21P8kVvrcBQzKXmp96DzBIRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.204.0/24
193.105.70.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3a:1d:b0:9f:2a:84:1b:73:ed:c9:f0:7d:0f:f5:39:35:d5:
fb:c1:5b:82:e9:c7:7e:90:90:dc:72:ab:80:aa:6b:34:df:8f:
44:2a:2b:13:09:8f:28:c1:1b:18:46:ea:66:e4:66:1e:9c:2c:
d7:52:5e:b1:4f:98:dc:cf:3f:80:a8:b8:ee:d7:44:f5:ae:6d:
6d:85:58:b4:60:b9:68:e1:08:de:8e:87:76:3e:36:5b:a6:2a:
88:1a:e9:c8:34:fc:bc:92:60:17:28:59:7d:60:b5:fb:7f:3c:
8c:15:17:6b:40:5a:14:81:a1:36:8d:4d:ae:c1:2e:0b:78:3b:
ec:8c:c8:97:ab:cb:59:15:96:0c:44:4f:8a:86:b2:05:c4:59:
0e:2b:1e:a2:42:69:80:ad:30:a9:98:1a:d9:79:28:5d:1f:9a:
11:7b:53:32:f2:34:27:b6:d3:14:5b:bf:34:d6:a5:75:32:de:
ec:ca:6a:13:58:43:0d:ec:27:fd:a1:1f:52:46:eb:13:e2:e2:
02:aa:ec:96:a5:49:c7:b9:a7:ea:39:e6:2b:83:e6:1c:12:bf:
17:d4:eb:72:1c:af:11:c6:54:9b:a4:4a:ca:48:a8:42:5d:de:
a5:ae:b9:f3:8e:99:a9:b9:43:e3:9a:73:52:bb:82:74:1c:46:
64:dd:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:11 2025 by rpki-client