Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/Z_9Q_XH9rma3oOi7SUFRGwd8Lmc.roa
File: Z_9Q_XH9rma3oOi7SUFRGwd8Lmc.roa (raw, json)
Hash identifier: roPiJArD9PV+mfBF9N5H3K7U74FNhopzq22Ef+spAuk=
Subject key identifier: 67:FF:50:FD:71:FD:AE:66:B7:A0:E8:BB:49:41:51:1B:07:7C:2E:67
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 045C33E8
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/Z_9Q_XH9rma3oOi7SUFRGwd8Lmc.roa
Signing time: Sat 01 Jan 2022 01:51:39 +0000
ROA not before: Sat 01 Jan 2022 01:51:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 194.76.4.0/22 maxlen: 22
194.76.2.0/23 maxlen: 23
2001:67c:424::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73151464 (0x45c33e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jan 1 01:51:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67ff50fd71fdae66b7a0e8bb4941511b077c2e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0e:5b:d3:15:0e:2a:41:83:79:19:4e:73:39:
1c:17:97:86:0e:5d:66:f4:3a:74:70:36:51:16:fe:
03:dd:7c:5d:5f:e8:81:43:46:db:f8:c7:00:80:08:
9d:64:ff:0f:95:db:60:ce:89:5a:47:28:5d:1c:51:
52:db:48:e1:ad:a7:ee:88:5e:21:c2:1b:e0:dd:c9:
0b:69:6b:ed:da:4e:85:b8:ca:5a:bd:6d:43:21:7e:
4f:aa:77:70:1f:c8:80:b3:69:48:39:45:0f:1d:bd:
01:09:ac:75:07:80:06:c1:00:a0:68:69:cb:65:f5:
6b:00:3a:93:38:bb:7c:76:ec:ca:bd:10:04:c8:31:
ef:01:26:95:dc:ce:d0:e0:dc:ac:34:b8:37:01:60:
a5:7f:67:76:9c:f2:1d:0e:12:4e:d7:47:ef:ea:88:
18:ee:66:d0:eb:e1:bd:2e:ab:68:0d:64:28:bf:b9:
ee:21:72:61:d9:38:74:e5:40:40:de:38:c4:00:53:
41:61:dc:1b:6b:95:d3:10:4f:2d:3a:67:9b:36:92:
c1:5c:8f:22:03:7a:a4:12:3e:07:72:51:2d:03:4d:
5d:90:6a:66:c3:20:ff:fc:1c:8f:be:79:a4:be:22:
08:ed:e8:47:86:38:b1:a3:5a:90:d1:6c:dd:c1:1e:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:50:FD:71:FD:AE:66:B7:A0:E8:BB:49:41:51:1B:07:7C:2E:67
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/Z_9Q_XH9rma3oOi7SUFRGwd8Lmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.2.0-194.76.7.255
IPv6:
2001:67c:424::/48
Signature Algorithm: sha256WithRSAEncryption
46:58:eb:bb:11:82:99:7b:8e:b6:a4:3a:ca:0f:f9:58:50:ec:
11:ce:39:cf:db:14:de:09:a8:87:2f:0f:af:a0:09:86:ea:57:
76:2d:48:be:b0:b8:70:72:40:4f:6d:57:49:cb:34:78:70:a8:
ae:c3:e4:6e:42:aa:07:55:c4:18:5c:75:04:e8:2f:25:5d:6f:
60:1c:08:89:3a:16:1c:41:9b:37:be:85:0a:be:dd:e7:4f:ab:
ec:d8:65:e6:58:3b:96:85:57:30:a2:1f:09:54:f6:2d:b7:8e:
3d:36:e3:68:f5:e9:e0:eb:b3:7d:5c:ba:d9:37:40:82:42:f6:
a5:a0:51:7b:b4:9b:81:52:cb:da:14:47:6c:73:ee:7d:66:b7:
79:9f:22:2c:1c:28:0b:c9:44:99:97:8f:35:3d:52:9a:49:b6:
4c:8b:b9:8b:77:68:f3:6f:c6:16:da:9b:9f:47:ef:f0:06:b1:
5d:b5:e8:ee:41:81:f9:44:e7:4f:d8:25:1a:21:83:51:37:90:
d5:4c:fc:de:b3:70:4a:57:54:63:16:d0:29:8e:41:8a:22:2a:
83:0d:47:1e:97:60:57:45:b8:54:f5:ae:be:40:38:de:33:02:
39:80:83:ec:ed:d1:d8:04:af:17:7b:73:8e:6e:86:16:7f:aa:
a5:b0:e2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:05:00 2025 by rpki-client