Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/zxVCq_wjjCjKemvGZUHz9xx2inE.roa
File: zxVCq_wjjCjKemvGZUHz9xx2inE.roa (raw, json)
Hash identifier: iYiOWMSxYcAzD2Rin3Cgz8Uz28Iq1B8v3GSnea3JZbo=
Subject key identifier: CF:15:42:AB:FC:23:8C:28:CA:7A:6B:C6:65:41:F3:F7:1C:76:8A:71
Certificate issuer: /CN=83124d0411a20fd2bb546970ea80116ef276dbab
Certificate serial: 33309645
Authority key identifier: 83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/zxVCq_wjjCjKemvGZUHz9xx2inE.roa
Signing time: Sat 01 Jan 2022 10:00:52 +0000
ROA not before: Sat 01 Jan 2022 10:00:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8839
IP address blocks: 213.225.160.0/19 maxlen: 19
212.95.64.0/19 maxlen: 19
2001:810::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 858822213 (0x33309645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83124d0411a20fd2bb546970ea80116ef276dbab
Validity
Not Before: Jan 1 10:00:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf1542abfc238c28ca7a6bc66541f3f71c768a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:0d:02:36:56:dd:7d:f6:2f:be:32:98:d3:
2f:65:e7:3a:1d:fc:ea:c9:e8:18:87:97:2f:46:96:
39:20:96:b3:a1:40:5e:9d:06:6f:c3:1a:72:3f:08:
1f:de:eb:62:9d:2f:33:a4:27:4f:9b:03:22:20:63:
80:74:cc:98:af:27:6d:74:7c:f3:82:69:a3:03:d8:
74:2c:f9:7f:5d:b8:0f:cd:e9:1a:b9:8f:4e:a1:9a:
ef:6e:fe:ca:5d:c9:19:af:98:12:90:bd:17:6a:0a:
a7:16:b0:ed:08:6f:13:c4:ee:e1:47:f2:53:af:82:
d6:9a:ee:6d:81:da:71:a3:05:1b:13:09:d7:f7:a4:
32:0e:21:9a:a8:7e:f4:23:0a:2a:e9:3b:80:f0:39:
f4:c6:0a:91:2f:b6:48:43:7d:46:6f:09:63:f7:ab:
b9:01:40:5c:11:fb:24:08:35:f2:bb:f6:f2:99:3a:
3e:5b:ac:9f:54:e3:78:e0:2c:d7:26:ed:f6:7e:bc:
53:80:f7:31:b9:ef:f5:fe:df:28:7a:90:d6:58:8e:
11:32:a9:25:1e:0f:e2:a5:75:64:60:05:9f:d2:03:
b6:59:d2:83:18:d2:09:1c:42:4b:d0:76:cc:7f:67:
83:9a:16:c6:73:02:c4:c7:1a:90:c0:08:13:c7:86:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:42:AB:FC:23:8C:28:CA:7A:6B:C6:65:41:F3:F7:1C:76:8A:71
X509v3 Authority Key Identifier:
keyid:83:12:4D:04:11:A2:0F:D2:BB:54:69:70:EA:80:11:6E:F2:76:DB:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gxJNBBGiD9K7VGlw6oARbvJ226s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/zxVCq_wjjCjKemvGZUHz9xx2inE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2c7b2e-242a-4336-b0fb-fcf0f1594d2f/1/gxJNBBGiD9K7VGlw6oARbvJ226s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.95.64.0/19
213.225.160.0/19
IPv6:
2001:810::/32
Signature Algorithm: sha256WithRSAEncryption
64:be:a6:33:2a:40:ee:13:01:c0:39:fc:81:30:e7:d5:89:e4:
14:e4:32:f4:c0:cf:15:68:e9:4b:39:79:fa:fb:1f:5d:bb:4a:
87:27:fe:2a:94:1a:3a:d2:31:c4:cf:a6:91:e6:98:ae:cb:f9:
98:03:2e:1a:0b:d3:d0:69:f0:79:9a:e0:b3:81:d0:0b:73:7a:
46:9c:3c:3c:89:cf:87:88:83:4f:c0:3c:9d:52:9f:57:eb:46:
b3:22:4f:61:ed:ae:5b:c1:48:47:25:4e:cb:66:5e:1a:17:36:
45:6e:6a:e6:b4:af:4a:59:49:24:00:06:eb:f2:e5:6f:56:2e:
12:f4:90:11:29:97:7a:3f:62:b3:c1:01:9a:ba:0b:cf:df:3a:
23:38:6f:2c:68:e0:80:76:ea:78:94:b2:23:5f:c1:38:bf:e3:
23:76:70:41:cc:cf:4d:cf:67:88:1d:04:11:82:ac:c6:f9:d5:
71:66:f7:27:cb:59:0a:e0:09:ec:1b:62:c5:01:5a:63:fc:d4:
f3:63:dd:32:42:97:0c:66:5d:e5:0c:5d:ad:43:75:e6:2e:0f:
b8:53:f7:db:4c:9d:ae:6b:80:f0:f5:7b:59:4a:9c:72:47:39:
b7:15:f0:21:a7:9f:3c:b0:cd:e3:d6:24:01:6e:cc:dd:e0:06:
e6:db:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:35 2025 by rpki-client