Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZLJ8KWCc-93gETomXx-UQ0ua4a8.roa
File: ZLJ8KWCc-93gETomXx-UQ0ua4a8.roa (raw, json)
Hash identifier: tNSaDExiAnj6b5gOiTRs8JsoY2ZtCqlW8kxGnQ5EOp4=
Subject key identifier: 64:B2:7C:29:60:9C:FB:DD:E0:11:3A:26:5F:1F:94:43:4B:9A:E1:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095592597FE5A23A2F319C41E9A537D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZLJ8KWCc-93gETomXx-UQ0ua4a8.roa
Signing time: Mon 02 Jan 2023 03:45:13 +0000
ROA not before: Mon 02 Jan 2023 03:45:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56592
IP address blocks: 31.148.8.0/22 maxlen: 24
95.47.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:59:25:97:fe:5a:23:a2:f3:19:c4:1e:9a:53:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b27c29609cfbdde0113a265f1f94434b9ae1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:4e:e7:1a:b4:09:c8:31:dd:52:8e:7c:a0:
9b:eb:0d:d5:a6:0d:c1:f6:57:f8:00:2e:87:1d:79:
b1:d1:e5:28:a5:7e:e7:d8:67:4a:ab:a8:b0:5c:15:
87:ae:4b:8f:35:60:c5:8b:95:3f:16:5f:8f:7c:11:
4c:de:cb:f1:01:2a:7d:77:02:c6:bf:f7:e9:c0:79:
10:f4:ba:04:b5:36:9f:e3:b8:46:3b:ee:03:0c:95:
88:97:1c:88:63:23:2d:09:44:81:8d:e2:44:50:d3:
91:ec:14:8e:6d:0a:a5:4b:b8:77:0d:10:9f:d6:1a:
4f:ab:f7:00:43:f1:2e:e0:be:ef:a0:21:3d:ef:82:
42:3b:04:55:29:4e:5a:1d:c1:54:4e:d4:e1:d3:bd:
5d:da:1d:5e:2e:38:32:fb:61:77:2b:ba:32:8c:1c:
5f:4a:44:cd:c6:5c:bd:58:9b:ac:4d:0b:7f:64:83:
04:0e:3c:91:83:ac:9f:3b:37:f7:98:55:80:30:1f:
bf:73:76:2c:b5:88:e6:3b:16:70:42:59:4f:96:da:
c0:31:c5:28:85:0c:13:75:bc:36:5d:be:e1:1e:35:
d7:44:12:86:59:0b:76:2d:97:2f:98:93:b6:11:6a:
8d:75:c6:04:27:da:04:7f:37:5d:12:a7:d0:81:ef:
ed:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:7C:29:60:9C:FB:DD:E0:11:3A:26:5F:1F:94:43:4B:9A:E1:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZLJ8KWCc-93gETomXx-UQ0ua4a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.8.0/22
95.47.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:80:72:97:da:07:29:65:1a:5d:15:4d:c0:b9:61:c8:6d:47:
c6:e6:45:bc:3d:ef:a4:88:f9:c7:40:88:0f:d3:15:4d:ed:70:
f0:73:c7:99:9f:a1:24:53:0d:9b:b0:ba:8a:57:5f:4f:62:33:
72:52:1e:dd:fa:bc:4a:c7:08:63:a6:55:a5:23:cb:2e:2e:dc:
f9:37:e8:cc:a2:28:c2:5d:50:e3:2e:39:5e:05:9f:24:9a:64:
a8:36:3a:e3:97:08:a0:f6:12:1d:09:e0:b8:ed:b0:44:fe:93:
a6:00:14:a9:51:57:c3:a0:af:d3:ce:e2:b9:9e:96:7f:99:4b:
06:29:52:b7:3b:a1:6a:c3:3a:b0:fc:7b:6e:19:77:fc:39:d3:
6b:97:19:2e:3e:00:4c:cc:70:06:8c:d5:57:ac:9d:0d:b7:57:
56:c6:d4:b6:0c:03:6b:4d:5d:17:49:d0:59:d1:d6:a4:e2:b9:
69:76:c0:b1:7b:ca:a1:39:8f:97:f3:76:30:47:1a:0f:4a:f7:
f3:c7:76:f9:fb:13:a9:f9:58:e5:9d:f7:a4:41:f4:22:bd:37:
71:30:4f:17:6e:c0:00:c3:c7:62:43:0b:96:ba:84:16:6a:9c:
7b:59:bb:8e:e8:9c:9d:cd:62:26:a4:f6:50:09:73:d6:ab:73:
14:04:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:09 2025 by rpki-client