Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZMJD6GPcws9v0uartpekndK9c6M.roa
File: ZMJD6GPcws9v0uartpekndK9c6M.roa (raw, json)
Hash identifier: yrJsAb8WNze4IR0H+VbT9xFBLAE/jeojH28Pi1sBGiE=
Subject key identifier: 64:C2:43:E8:63:DC:C2:CF:6F:D2:E6:AB:B6:97:A4:9D:D2:BD:73:A3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187FFF7017FF79C62F11188F5399DA0E1F6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZMJD6GPcws9v0uartpekndK9c6M.roa
Signing time: Tue 09 May 2023 10:03:10 +0000
ROA not before: Tue 09 May 2023 10:03:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44673
IP address blocks: 146.120.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:f7:01:7f:f7:9c:62:f1:11:88:f5:39:9d:a0:e1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 9 10:03:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64c243e863dcc2cf6fd2e6abb697a49dd2bd73a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:8d:f3:e3:86:15:58:a3:68:b1:64:13:60:
7a:7c:f2:a7:06:4a:7a:f0:15:a6:16:5f:ac:55:db:
3b:4c:da:a0:9d:50:82:b8:45:dc:bb:6f:a0:58:38:
c5:f1:7d:b9:80:56:4f:a7:ba:fa:65:e0:3a:29:5c:
12:4a:f2:e9:b1:60:27:3f:b1:77:bb:f5:48:b3:e1:
11:23:35:f3:02:3d:e6:bf:33:cd:71:e1:b0:a7:98:
b0:fc:50:a5:06:58:f5:68:eb:70:ab:d3:4c:dc:18:
ad:ec:58:f5:e1:b2:5f:88:2f:12:02:0e:0c:53:f0:
08:39:17:56:85:2a:c5:ce:34:d2:b5:7e:19:86:72:
c2:c1:a8:3d:4a:55:ca:54:05:a3:10:71:f4:c6:da:
9c:53:95:d6:2f:7a:44:68:96:ee:b6:26:f4:4e:a0:
cd:bc:84:0c:66:06:8d:af:6e:b3:63:2f:e1:8a:f3:
11:bd:a9:c6:a8:9c:34:65:27:2d:84:d1:95:15:56:
e6:b5:56:4a:ea:e6:e5:fc:d7:6e:c1:9e:6b:74:29:
b4:7a:1c:63:fa:c1:77:fb:44:82:6f:62:28:17:9b:
96:33:9c:ec:64:a5:7a:52:4e:5f:0e:5d:49:fc:b3:
6c:49:32:5a:48:55:9e:d7:b4:30:a7:e6:38:a2:48:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C2:43:E8:63:DC:C2:CF:6F:D2:E6:AB:B6:97:A4:9D:D2:BD:73:A3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZMJD6GPcws9v0uartpekndK9c6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.234.0/23
Signature Algorithm: sha256WithRSAEncryption
50:e6:18:c8:45:f0:19:70:8d:7b:4b:03:f6:22:b7:f8:66:3f:
98:bf:10:c7:45:9b:6e:f3:d9:38:6a:52:08:05:c0:37:7d:db:
d1:49:23:06:dc:3c:9d:ea:83:5f:ea:b2:74:f1:6b:c2:2e:17:
d5:4d:0e:b9:b6:7a:6c:de:c3:f8:4f:e8:c7:55:8d:bb:c5:cf:
12:f4:90:39:6c:8a:41:c6:4c:45:cf:89:41:d0:69:b3:3f:6a:
8f:a7:5b:f5:33:92:eb:61:71:6b:0b:fb:e4:f3:18:ee:b5:02:
59:97:b8:67:a0:b1:d8:15:54:33:c4:b1:6d:45:94:13:b3:31:
4a:80:51:61:72:9d:dc:94:0c:58:b4:94:af:f4:80:b0:7d:81:
c5:0f:c3:ed:4e:06:b3:8b:65:86:05:7e:0e:37:66:fd:e9:19:
61:2c:8a:99:23:4f:89:f7:6b:f2:03:55:a6:2a:08:3e:c1:0c:
ce:af:b2:87:75:e2:24:96:d0:cd:df:ec:4e:cf:4f:3f:48:af:
81:32:39:14:5a:56:79:5a:8a:c3:e5:71:a0:f6:2b:74:5d:18:
7f:26:bf:2d:8f:8d:5b:4c:7d:e5:dd:b2:1f:b3:a1:90:72:90:
14:96:9e:5a:e4:29:68:11:b5:33:19:73:eb:56:44:77:24:03:
9b:06:24:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYf/9wF/95xi8RGI9TmdoOH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwNTA5MTAwMzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGMyNDNlODYzZGNjMmNmNmZkMmU2YWJiNjk3YTQ5ZGQyYmQ3M2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc+N8+OGFVijaLFkE2B6fPKnBkp6
8BWmFl+sVds7TNqgnVCCuEXcu2+gWDjF8X25gFZPp7r6ZeA6KVwSSvLpsWAnP7F3
u/VIs+ERIzXzAj3mvzPNceGwp5iw/FClBlj1aOtwq9NM3Bit7Fj14bJfiC8SAg4M
U/AIORdWhSrFzjTStX4ZhnLCwag9SlXKVAWjEHH0xtqcU5XWL3pEaJbutib0TqDN
vIQMZgaNr26zYy/hivMRvanGqJw0ZScthNGVFVbmtVZK6ubl/NduwZ5rdCm0ehxj
+sF3+0SCb2IoF5uWM5zsZKV6Uk5fDl1J/LNsSTJaSFWe17Qwp+Y4okjL0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGTCQ+hj3MLPb9Lmq7aXpJ3SvXOjMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWk1KRDZHUGN3czl2MHVhcnRwZWtuZEs5YzZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBknjqMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ5hjIRfAZcI17SwP2Irf4Zj+YvxDHRZtu89k4alII
BcA3fdvRSSMG3Dyd6oNf6rJ08WvCLhfVTQ65tnps3sP4T+jHVY27xc8S9JA5bIpB
xkxFz4lB0GmzP2qPp1v1M5LrYXFrC/vk8xjutQJZl7hnoLHYFVQzxLFtRZQTszFK
gFFhcp3clAxYtJSv9ICwfYHFD8PtTgazi2WGBX4ON2b96RlhLIqZI0+J92vyA1Wm
Kgg+wQzOr7KHdeIkltDN3+xOz08/SK+BMjkUWlZ5WorD5XGg9it0XRh/Jr8tj41b
TH3l3bIfs6GQcpAUlp5a5CloEbUzGXPrVkR3JAObBiQZ
-----END CERTIFICATE-----
Generated at Sat Apr 12 04:44:34 2025 by rpki-client