Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rzvSdSdGLy8TebgxYHCGn0odTWs.roa
File: rzvSdSdGLy8TebgxYHCGn0odTWs.roa (raw, json)
Hash identifier: N2SxSGzNHt16Qalmq2MeyDujioqsCzMS5obyt6ScUSA=
Subject key identifier: AF:3B:D2:75:27:46:2F:2F:13:79:B8:31:60:70:86:9F:4A:1D:4D:6B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570953E4E3E6D6BE56BE7FF004FD493BD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rzvSdSdGLy8TebgxYHCGn0odTWs.roa
Signing time: Mon 02 Jan 2023 03:45:07 +0000
ROA not before: Mon 02 Jan 2023 03:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49319
IP address blocks: 146.120.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:3e:4e:3e:6d:6b:e5:6b:e7:ff:00:4f:d4:93:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af3bd27527462f2f1379b8316070869f4a1d4d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:69:02:57:08:a6:9c:ec:96:fe:9d:c4:e8:
2a:6e:ba:de:f6:be:c9:fe:5c:a9:c9:ac:1e:e8:78:
1f:17:02:49:49:f6:af:45:19:27:cc:49:f9:f1:80:
8b:73:81:5f:c0:a4:45:04:d8:43:3e:be:74:0e:f2:
50:ad:69:51:27:b4:6f:56:7f:23:c8:ec:7e:63:68:
f1:ef:b6:15:8e:91:9b:03:e3:c6:a3:aa:65:9f:31:
18:0c:0e:56:b7:11:2d:35:62:d0:52:32:6f:a0:bf:
8d:5c:fc:32:7f:1d:99:93:8f:e1:46:2c:89:29:21:
32:ce:87:a0:85:dd:c3:a8:6f:48:64:5a:a6:7f:bd:
ef:d6:5c:61:75:b1:2a:f8:df:77:a1:01:6a:d7:09:
3e:35:da:ff:87:02:c1:5b:28:54:a5:f2:ba:66:28:
8d:b2:df:d2:ad:d5:50:f6:34:32:c2:34:ef:04:73:
81:30:2a:21:1d:f7:99:a7:1d:90:07:0a:d5:70:e0:
ac:72:fe:e1:ce:a6:3c:ec:58:db:8c:c5:8b:74:97:
b6:99:a7:10:91:ca:93:0c:75:31:e2:52:04:8e:3f:
18:4c:4e:b1:4b:27:c4:43:54:8d:fc:f7:cc:19:ec:
74:b3:43:df:a5:4a:2d:a0:4b:df:9d:c9:96:30:bd:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:D2:75:27:46:2F:2F:13:79:B8:31:60:70:86:9F:4A:1D:4D:6B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rzvSdSdGLy8TebgxYHCGn0odTWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:9d:f5:6b:94:5a:5c:3e:78:e1:ac:2b:59:88:98:21:63:fd:
b2:e1:62:fd:db:cf:b9:cd:2a:f7:4d:2c:fa:58:2e:65:4b:27:
73:df:4c:ca:92:2c:21:f7:ca:b9:93:f1:75:f9:b9:9c:3c:6b:
2b:cf:63:83:ce:94:d5:a0:fe:5a:f9:48:40:c7:77:c2:45:ae:
ec:98:e3:fd:7e:df:12:56:b4:2c:8b:51:2b:e9:d4:71:8f:4f:
9a:0d:1b:b8:da:3b:df:d4:85:eb:27:50:6a:de:55:ad:2b:a2:
a7:50:39:6f:8d:46:fd:13:ef:ec:24:0a:97:d1:d5:07:31:fa:
e8:fc:60:c0:3f:32:16:5e:3a:4e:fb:32:27:39:aa:ba:51:56:
84:d2:65:41:e0:7b:bc:e4:95:66:e4:35:2a:5c:0a:7d:ca:2c:
35:62:f6:24:70:e8:8d:36:09:9a:02:a3:bf:f4:76:ae:a0:04:
30:bc:96:f2:a2:da:97:4e:d6:75:f3:c4:3a:7c:dc:85:86:84:
99:b7:88:66:bb:53:7d:13:5d:cb:fb:d7:6c:3d:57:b0:60:ec:
93:b8:cd:8d:0a:d9:e8:74:41:c0:d8:b0:ff:67:b9:a1:d6:e6:
b6:49:95:05:97:39:55:97:97:8f:e2:f1:c8:75:54:32:71:39:
b0:39:28:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:54 2025 by rpki-client