Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Zwdd8T14KDRj7VzilmCvBexaSjE.roa
File: Zwdd8T14KDRj7VzilmCvBexaSjE.roa (raw, json)
Hash identifier: AzapWcusYrECnYGgiAbNhvczZG6UEZfMw5iWokjWimg=
Subject key identifier: 67:07:5D:F1:3D:78:28:34:63:ED:5C:E2:96:60:AF:05:EC:5A:4A:31
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0187286AA4C8342CF932020268CB70187DF0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Zwdd8T14KDRj7VzilmCvBexaSjE.roa
Signing time: Tue 28 Mar 2023 13:31:30 +0000
ROA not before: Tue 28 Mar 2023 13:31:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56534
IP address blocks: 31.148.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:28:6a:a4:c8:34:2c:f9:32:02:02:68:cb:70:18:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 28 13:31:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67075df13d78283463ed5ce29660af05ec5a4a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:b7:4a:76:00:64:64:f4:13:4f:4f:96:12:
1a:2a:e9:b4:df:76:e4:fb:3f:59:9d:21:75:d9:18:
b8:e3:05:f3:77:48:02:fc:cd:47:54:c5:c8:b0:56:
26:24:ed:6c:91:03:77:74:f9:1b:e5:57:4c:9c:de:
fe:93:65:ee:05:41:38:6a:b0:c1:42:f2:91:54:7d:
ce:00:d3:8d:8d:32:e3:ce:a7:20:96:a0:23:ab:96:
b2:c6:f7:32:d2:c7:65:07:38:8e:39:e5:b7:1d:61:
9d:1a:48:02:b4:dd:e5:f0:12:33:04:a9:74:da:52:
5d:55:f3:d9:7a:67:0e:f3:ab:57:4b:a7:90:ae:13:
01:c6:e4:09:76:af:61:aa:49:de:68:1a:ad:60:9d:
54:fc:d0:03:3d:28:fb:e7:2c:3d:5c:ac:43:9f:c3:
30:ec:bc:a9:8c:8a:dc:b1:30:88:42:cc:2e:04:b5:
42:3b:50:9d:06:ff:a3:6a:14:e8:c2:f9:22:ee:87:
e2:a8:68:8a:48:3f:b5:b7:73:3a:76:39:89:2e:f7:
b4:d2:eb:02:53:32:9e:78:b4:15:ac:2b:4b:c5:e4:
f3:31:f8:15:15:dd:5e:89:55:41:7d:f3:b8:f7:2c:
2b:89:1b:a9:78:d4:70:fc:c5:22:32:5f:4b:8a:52:
8c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:07:5D:F1:3D:78:28:34:63:ED:5C:E2:96:60:AF:05:EC:5A:4A:31
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Zwdd8T14KDRj7VzilmCvBexaSjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e9:46:eb:2f:8c:a7:9e:cd:62:97:c4:ad:bc:a9:48:65:8e:
38:5d:dc:71:71:5d:4b:d9:a5:b8:84:90:3b:13:03:3b:9a:a4:
f4:f0:07:c9:c8:1f:a3:4d:0b:0f:ea:d8:c2:34:db:3c:36:ad:
61:b9:8f:48:ea:06:b0:5e:dc:b0:cb:c5:6e:7d:c6:6d:c7:49:
22:23:db:34:cf:c4:85:64:a4:7c:5d:ef:99:28:30:52:3d:03:
d9:78:aa:ac:ce:68:4f:5b:35:e5:14:43:ac:ad:31:67:0e:bf:
b0:e6:f9:8e:22:d5:73:e6:ee:66:c6:c9:7a:13:3c:6f:9a:58:
b5:3b:77:ba:7f:40:d8:2d:ed:68:06:4f:08:7f:77:90:7a:6d:
53:e9:1a:d2:9a:6c:51:bb:0e:ee:e0:0e:61:40:a0:bd:4e:a4:
9b:c6:ce:7f:58:8c:b4:6e:d8:16:d7:04:4f:19:e6:35:c3:28:
95:52:be:fc:9b:40:10:af:8d:37:53:22:47:eb:01:03:d4:93:
90:f5:64:73:2f:71:0b:a3:c8:57:75:a7:0e:e4:13:15:91:6c:
7d:f4:a3:4f:b9:06:81:79:a3:61:55:32:a1:ae:a6:43:21:0a:
e9:25:b8:9a:12:15:65:45:4c:c5:f2:c4:16:98:45:2c:61:86:
5a:05:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:39:59 2025 by rpki-client