Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/zAmA9cmH5EW8-fNMqWFMg4-JyBI.roa
File: zAmA9cmH5EW8-fNMqWFMg4-JyBI.roa (raw, json)
Hash identifier: IYIVnTJQ4bijIkNVetGPxPdg2j0hPvpwRUtL5hhCiRo=
Subject key identifier: CC:09:80:F5:C9:87:E4:45:BC:F9:F3:4C:A9:61:4C:83:8F:89:C8:12
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01872DCAA9FDBBDE903B379C8225E9B7DD93
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/zAmA9cmH5EW8-fNMqWFMg4-JyBI.roa
Signing time: Wed 29 Mar 2023 14:34:29 +0000
ROA not before: Wed 29 Mar 2023 14:34:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 185.169.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:ca:a9:fd:bb:de:90:3b:37:9c:82:25:e9:b7:dd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 29 14:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0980f5c987e445bcf9f34ca9614c838f89c812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9a:6f:99:71:53:c7:a7:b9:67:bb:64:56:90:
47:84:e5:99:64:17:01:7e:20:71:c7:69:cb:d1:c4:
e3:57:5e:77:04:2c:3a:62:95:98:ba:f4:f5:55:f6:
98:de:b5:0d:fd:a4:fa:6c:af:9f:be:0d:65:2b:3d:
f9:fa:06:39:b1:fc:55:8a:e2:68:19:00:2f:1f:b8:
06:89:21:52:e6:1e:eb:48:f1:20:a2:fc:b5:0f:73:
aa:ed:62:78:89:5e:33:83:ca:9a:ca:5c:80:fe:e4:
11:d6:62:8f:80:da:fd:e4:b1:1e:e8:d2:a2:93:d3:
1d:f9:f7:30:6b:21:c5:da:4a:7c:01:52:dc:a9:70:
ef:68:f6:b6:f4:e2:42:00:29:df:d0:3a:dd:86:f6:
dd:e0:90:ea:4d:e8:de:45:18:3f:63:ac:59:cf:b5:
d9:96:a0:7e:87:3a:cb:03:5e:c9:e6:91:55:34:4e:
d0:13:0c:30:fa:f4:64:ce:b7:d7:9d:e7:a6:cd:e0:
d0:36:85:49:46:47:b9:ad:02:14:1b:18:37:0c:45:
ef:1c:99:8e:a3:be:87:d5:01:9d:54:1a:29:71:75:
92:35:9a:bf:2e:45:0f:b3:bb:7f:e9:94:53:46:2b:
2a:1d:5b:6e:26:cd:1c:bb:64:6b:c6:c5:9e:ba:bf:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:09:80:F5:C9:87:E4:45:BC:F9:F3:4C:A9:61:4C:83:8F:89:C8:12
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/zAmA9cmH5EW8-fNMqWFMg4-JyBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.220.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3e:61:f1:24:e9:57:ef:5f:a4:42:9e:2e:da:70:b5:1b:5d:
db:55:56:79:ca:23:5d:49:bb:19:b6:0b:af:cd:2f:56:87:dd:
a0:17:92:e6:30:dc:e0:4d:ec:60:f2:46:d1:8c:44:34:f0:16:
2d:a5:87:5b:a6:9b:e8:ae:ce:8f:ad:aa:e8:07:be:9d:91:b5:
41:2d:1a:f9:e5:43:c7:a8:3b:8e:e7:72:a5:db:2d:1c:10:00:
89:75:2c:7f:10:03:2d:05:6e:0c:4f:73:0e:81:b9:a5:85:4b:
a0:94:e8:78:bb:e1:b4:68:22:6a:57:7b:45:3d:39:9c:af:3b:
3d:da:11:aa:ca:21:13:2e:fc:57:c1:f5:47:3b:34:fe:0a:10:
0c:c4:38:d1:f0:bb:07:c9:45:8d:57:ad:62:33:17:a5:66:30:
9e:02:12:91:9d:32:49:fa:c0:71:42:5c:ec:21:66:e2:74:27:
0c:ae:d6:54:7d:76:de:78:89:cd:ca:c3:14:a4:f3:1f:36:57:
08:fa:19:72:43:e7:34:71:a7:9a:05:b2:e4:6c:35:ed:73:d6:
16:98:ee:74:7c:f9:67:5a:df:c4:23:7e:16:73:d4:ea:2d:65:
3b:7b:1f:89:e5:c4:dd:e7:c4:36:7a:c7:ef:b4:9a:9c:59:82:
87:5e:9c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:58 2025 by rpki-client