Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/zeLUi6313ehbbBdmSX50NSTsiq4.roa
File: zeLUi6313ehbbBdmSX50NSTsiq4.roa (raw, json)
Hash identifier: 6lz1kh6LWynS+HqRi0C48VRcRK7IrYQi1Ge9BIIidZE=
Subject key identifier: CD:E2:D4:8B:AD:F5:DD:E8:5B:6C:17:66:49:7E:74:35:24:EC:8A:AE
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: A4F0BB
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/zeLUi6313ehbbBdmSX50NSTsiq4.roa
Signing time: Sat 01 Jan 2022 02:55:42 +0000
ROA not before: Sat 01 Jan 2022 02:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8298
IP address blocks: 194.126.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10809531 (0xa4f0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Jan 1 02:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cde2d48badf5dde85b6c1766497e743524ec8aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:d9:50:63:63:b6:db:16:19:24:68:51:9f:
89:cb:8d:d0:7a:18:6c:b2:51:fd:c1:5f:0d:ab:0c:
89:da:a3:87:fd:f1:38:f0:ee:3c:5b:0b:78:a8:b1:
ed:6a:07:28:3c:98:cc:51:d8:c0:05:85:c8:0c:24:
17:a7:08:83:24:08:f0:ae:06:c0:06:e1:43:b3:39:
37:85:c0:21:d6:c6:c6:4e:79:9a:a3:4f:26:ba:79:
cf:5e:04:04:bf:d8:78:6d:16:68:31:11:39:0f:7b:
e1:44:0d:60:c5:10:9f:f3:cd:22:38:04:f2:dd:6f:
3c:28:4e:f2:19:37:57:b1:a8:28:4d:48:42:3b:b3:
13:68:80:93:bc:bc:58:53:3a:07:68:a7:17:fe:76:
50:84:d0:ca:bc:6c:ac:86:82:d5:3d:ba:86:67:2b:
a5:8b:d5:e7:92:cc:b4:20:8a:05:93:73:c2:6d:97:
64:a1:94:4e:f5:8c:38:74:c5:d0:97:62:d6:c4:53:
c9:fa:59:e2:21:e1:93:aa:e3:ca:a8:12:89:13:c8:
60:3a:78:2b:3e:7d:ca:bc:4f:60:05:07:5d:0f:30:
d2:7f:21:3a:5f:1e:76:bd:9c:dd:cd:3f:58:6b:50:
4e:7e:5d:a7:41:0f:cb:1c:8b:e5:ab:81:4c:05:07:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:D4:8B:AD:F5:DD:E8:5B:6C:17:66:49:7E:74:35:24:EC:8A:AE
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/zeLUi6313ehbbBdmSX50NSTsiq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.235.0/24
Signature Algorithm: sha256WithRSAEncryption
51:85:55:e1:2f:d0:67:de:f1:6b:18:b6:9c:7f:2b:2e:1c:00:
48:64:03:f9:e2:12:ca:73:99:6d:6f:e9:8d:b1:5d:da:97:a6:
43:79:e4:10:21:ef:10:a0:c0:57:e2:99:e1:d6:cc:41:71:f8:
8b:ad:88:6e:b2:fd:ec:50:fe:e0:2a:03:6e:b4:18:90:ab:e5:
2b:03:1e:db:f3:28:ef:09:69:15:5a:f0:52:a4:8c:ac:b5:df:
f4:5a:e3:b4:63:02:3d:41:40:ad:90:53:04:da:47:1e:50:55:
f1:9e:b5:a2:ac:fc:00:dd:73:36:26:ea:02:3e:4e:c0:c3:60:
c8:bd:e0:83:eb:c2:90:e2:3e:65:5c:ac:13:d7:0d:9a:0d:c3:
7f:e9:71:6c:2f:ed:00:5b:f5:a2:fb:27:5d:b2:a8:da:ff:6d:
de:65:3a:4a:ea:8a:e8:2d:0d:61:09:1c:c2:70:a2:4e:71:8a:
d3:da:ce:e0:5a:37:0b:2c:6b:6a:d4:99:bf:2d:6f:0a:3e:f9:
65:44:d5:3b:cb:2c:86:c0:f3:f0:4e:df:31:6d:3a:af:ad:46:
58:99:9c:5c:c5:7c:77:1e:3e:de:95:73:a1:36:e8:cf:9c:6b:
97:a6:59:43:40:0b:bb:f5:5a:ef:ad:13:3f:f9:7f:71:8b:bd:
94:79:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:08:43 2025 by rpki-client