Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/zeGnPBkhqV6ILQBK1RZPRj7XBbQ.roa
File: zeGnPBkhqV6ILQBK1RZPRj7XBbQ.roa (raw, json)
Hash identifier: PAZwXTESUU4w+QqtKYx0D/EK8vyYZ4uNJ+EIfRD1lK4=
Subject key identifier: CD:E1:A7:3C:19:21:A9:5E:88:2D:00:4A:D5:16:4F:46:3E:D7:05:B4
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01856D4AB6530B9536AAD58635988920C387
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/zeGnPBkhqV6ILQBK1RZPRj7XBbQ.roa
Signing time: Sun 01 Jan 2023 12:24:50 +0000
ROA not before: Sun 01 Jan 2023 12:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 194.76.4.0/22 maxlen: 22
194.76.2.0/23 maxlen: 23
2001:67c:424::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b6:53:0b:95:36:aa:d5:86:35:98:89:20:c3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jan 1 12:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde1a73c1921a95e882d004ad5164f463ed705b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:52:18:ee:91:af:6a:78:4c:89:38:4f:fc:
62:e1:bc:4c:52:b1:cf:d8:99:7c:69:b2:0d:1a:0d:
99:9e:e7:a6:2e:75:6f:ad:93:22:f6:c6:74:ef:a4:
b3:91:16:e7:58:23:e6:c8:8c:ac:48:b3:a2:2a:be:
dd:f1:99:03:82:53:43:97:6d:71:7f:ba:29:00:57:
57:fe:f1:d8:91:2f:76:6b:83:81:2f:90:26:5d:df:
e5:d6:6b:31:9a:32:cd:73:f3:ce:b5:79:11:68:4f:
c8:a6:fa:79:cf:f6:8d:67:c4:1f:68:2d:e4:78:23:
1a:71:a7:83:1b:34:da:fe:4e:36:30:f2:41:66:44:
7b:0b:68:3c:72:03:4f:60:15:c1:f2:65:f8:ed:1d:
aa:ba:d8:25:58:30:5a:5b:e5:97:23:a6:8c:f5:87:
de:b3:79:63:43:66:b5:f1:74:de:6d:eb:48:04:9e:
11:9d:31:92:b2:f2:93:94:40:d2:95:7e:d4:82:eb:
02:07:f8:df:df:b2:0b:7c:cc:13:1b:99:f6:fd:98:
e0:95:ba:d8:32:45:c5:47:f7:bd:5a:cc:4a:68:54:
d0:1e:9d:7f:e0:e9:95:a2:86:dc:b9:b2:77:6d:df:
ec:ae:64:ef:3c:45:12:00:fa:2d:b1:06:e8:f2:7c:
b7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:A7:3C:19:21:A9:5E:88:2D:00:4A:D5:16:4F:46:3E:D7:05:B4
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/zeGnPBkhqV6ILQBK1RZPRj7XBbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.2.0-194.76.7.255
IPv6:
2001:67c:424::/48
Signature Algorithm: sha256WithRSAEncryption
8b:3b:34:30:09:08:fb:1a:0b:21:58:40:02:8a:21:7c:e9:fd:
24:29:e9:e8:49:00:77:d9:78:e8:44:3c:9f:4c:95:3d:34:20:
a8:e0:88:01:4b:95:97:fd:27:93:e5:56:b0:bc:ed:d1:4b:0c:
89:9c:64:19:2b:43:0a:ed:2a:2d:c4:cc:e4:d3:4c:eb:41:c1:
ff:28:dc:91:32:73:6f:87:8c:3e:a4:ad:54:34:b0:d7:25:1c:
6e:c1:e2:7a:89:e1:82:67:32:97:29:2e:43:c9:b7:16:af:73:
2c:95:2e:db:0c:22:f7:20:d2:ed:0c:4f:46:f4:d2:de:fc:a3:
a4:ef:98:32:d6:ca:fd:ef:c9:96:96:c0:50:17:55:3f:f0:62:
3c:d9:1e:a5:8a:0e:4e:91:2f:46:2d:74:6e:c2:83:39:28:a0:
9f:9d:6f:dc:72:12:29:d3:d4:6c:a4:bb:00:ab:74:b6:16:a5:
75:2c:4f:c6:55:d8:56:ca:b4:bb:e4:5a:b9:95:ca:c2:1f:e8:
65:0c:13:8a:db:fb:55:96:ca:98:d8:d6:97:06:d3:95:08:06:
7f:81:62:b2:12:2d:55:6d:b8:55:d9:08:69:24:03:b5:58:f2:
82:65:d3:4a:90:40:04:85:f7:8d:4b:54:a4:f4:09:75:c2:00:
2d:be:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:44:24 2025 by rpki-client