Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ZAilMJa0U834tO2S6yJnoExtP8g.roa
File: ZAilMJa0U834tO2S6yJnoExtP8g.roa (raw, json)
Hash identifier: D5yJ5w5JAYYwgPd6fajE1kxvOYZ9k0KW+Y+cAlWeE+s=
Subject key identifier: 64:08:A5:30:96:B4:53:CD:F8:B4:ED:92:EB:22:67:A0:4C:6D:3F:C8
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018876B7224435F2B993439B97BB9403922F
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ZAilMJa0U834tO2S6yJnoExtP8g.roa
Signing time: Thu 01 Jun 2023 11:28:13 +0000
ROA not before: Thu 01 Jun 2023 11:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 141.226.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:b7:22:44:35:f2:b9:93:43:9b:97:bb:94:03:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jun 1 11:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6408a53096b453cdf8b4ed92eb2267a04c6d3fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:79:12:21:4b:57:4d:61:a9:c3:83:f8:16:7e:
49:6a:d5:7d:e9:76:41:51:93:80:cd:70:27:34:65:
2f:a5:c2:31:dd:44:4f:bf:65:65:0f:b1:eb:e7:be:
4e:19:8c:85:12:6a:a1:71:fd:2d:1e:68:5d:2d:31:
0e:fb:9a:fc:ba:3d:30:98:4f:e6:8d:ee:5d:79:33:
7e:2f:fc:81:4d:7a:6a:a2:58:c9:c7:94:31:18:d0:
ad:4c:48:a9:19:d6:07:28:c9:99:73:b2:e1:13:83:
5c:65:a8:37:51:86:a5:0f:84:6e:8d:0e:16:6d:f3:
57:94:b4:a5:92:48:b8:a6:4d:a4:a7:a1:0c:52:d7:
02:de:c8:62:44:12:52:a3:c9:b1:79:1a:d2:8a:5c:
f3:45:b6:1e:56:8f:92:0d:59:f8:50:3d:e2:5f:b6:
45:92:3a:1e:c8:57:ea:9d:7a:35:a6:4b:b4:56:2d:
b0:79:ee:ac:64:65:85:84:22:52:6d:ee:a2:58:f2:
9d:5c:b4:f4:d2:fa:26:50:59:67:19:78:d8:c4:ab:
c1:a5:66:81:87:fe:38:a1:cc:7a:91:49:cd:c5:3a:
5c:49:8a:86:91:50:fe:66:59:c5:8c:0e:db:a0:2b:
18:c2:9e:e8:ac:32:50:66:8c:69:f3:67:2c:c3:97:
ba:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:08:A5:30:96:B4:53:CD:F8:B4:ED:92:EB:22:67:A0:4C:6D:3F:C8
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/ZAilMJa0U834tO2S6yJnoExtP8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:00:11:74:ec:c7:c0:93:64:86:0f:86:65:67:ef:fc:57:ee:
3a:83:bc:f4:a0:91:48:b5:8f:c4:19:e3:cc:a0:24:67:05:b0:
9a:c8:63:1d:eb:3f:16:ac:29:96:2b:5a:e4:04:cd:e6:d1:67:
59:dd:bf:f0:c8:5d:ba:2a:49:8e:cb:74:24:b1:51:0e:ae:64:
2d:f4:31:ae:fe:ae:55:e9:dd:b4:75:4b:e0:5a:84:5b:f9:82:
91:3f:4a:65:c2:33:e5:87:36:55:32:8f:6d:d1:d5:f2:cc:5a:
d2:c0:b2:dc:95:26:44:8a:9b:dd:1a:ab:70:67:36:82:a6:02:
cf:5c:98:85:ec:02:e9:3b:34:c2:f8:e7:ae:30:3e:76:0c:e1:
cb:e6:be:0a:78:11:22:04:3e:4c:e3:9f:05:62:6c:5d:77:e3:
83:5d:67:93:0a:ce:c8:ac:85:52:e0:4e:65:76:6f:e9:42:46:
b5:cb:c7:56:24:22:a8:0a:ff:38:9d:9e:32:4c:f9:06:6b:0b:
55:eb:df:c2:10:09:9f:91:21:64:dc:6f:6d:8f:30:bb:01:62:
ed:c7:6a:50:dd:ec:8e:d9:c9:57:b0:46:64:09:0f:68:86:7f:
90:ed:ec:d6:95:6d:79:2c:b9:b8:ec:13:9d:1c:7d:b3:02:5e:
f2:c4:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:33 2025 by rpki-client