Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/zDzPieSZNQhwQcXn5E58C4ItoMI.roa
File: zDzPieSZNQhwQcXn5E58C4ItoMI.roa (raw, json)
Hash identifier: CTF0KN0aGs5jvlbJRIC/WMKIwQuw+MVh9tJTKTyY5GI=
Subject key identifier: CC:3C:CF:89:E4:99:35:08:70:41:C5:E7:E4:4E:7C:0B:82:2D:A0:C2
Certificate issuer: /CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Certificate serial: 0146F77F
Authority key identifier: 5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/zDzPieSZNQhwQcXn5E58C4ItoMI.roa
Signing time: Sat 01 Jan 2022 15:00:56 +0000
ROA not before: Sat 01 Jan 2022 15:00:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42816
IP address blocks: 46.16.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21428095 (0x146f77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dff73a8b2183582bb4efd7de857d481f6d4b460
Validity
Not Before: Jan 1 15:00:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3ccf89e49935087041c5e7e44e7c0b822da0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:a4:4b:55:35:f2:50:05:08:d0:c7:10:39:
0d:04:c4:df:da:d5:2b:64:a1:d3:10:61:19:8c:b6:
37:46:3a:5c:cc:aa:74:71:d6:dc:42:76:bc:0c:93:
11:bb:1d:fc:fd:33:eb:40:8f:a9:0a:3a:51:64:ae:
69:2d:9c:4e:5c:62:82:8f:fb:a5:e8:56:f9:cf:4e:
da:a4:94:d3:98:89:34:d4:31:4d:3a:2d:4f:9c:f9:
69:9b:3c:93:69:b8:f6:cb:7f:1e:9e:01:96:24:3e:
e8:8c:02:da:63:06:71:30:6a:0e:ba:62:86:75:b4:
f8:3c:73:58:21:c6:b1:5c:ac:c1:50:c4:5a:22:c0:
4d:ff:eb:eb:e3:4a:ff:86:26:c5:4c:e4:3f:6a:35:
f6:52:ee:89:1a:d8:7f:59:35:12:da:7d:60:79:c0:
4c:d1:24:8b:42:72:d2:fe:c5:53:29:e3:f1:f4:4b:
46:eb:ec:78:d6:75:31:1e:d3:17:e5:a1:07:a1:fa:
2f:7e:1e:bb:5f:0b:23:51:c8:ec:57:43:a9:b8:fa:
54:30:7c:5b:23:29:03:65:19:b5:3e:32:a0:ae:d6:
77:d0:c9:1e:0c:1c:a5:24:02:f6:29:74:08:98:a5:
4b:10:30:89:6e:1c:58:1f:ee:54:98:e6:b2:81:99:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:CF:89:E4:99:35:08:70:41:C5:E7:E4:4E:7C:0B:82:2D:A0:C2
X509v3 Authority Key Identifier:
keyid:5D:FF:73:A8:B2:18:35:82:BB:4E:FD:7D:E8:57:D4:81:F6:D4:B4:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xf9zqLIYNYK7Tv196FfUgfbUtGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/zDzPieSZNQhwQcXn5E58C4ItoMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/274553-0b93-4b47-a154-3a78a09fe6fc/1/Xf9zqLIYNYK7Tv196FfUgfbUtGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.39.0/24
Signature Algorithm: sha256WithRSAEncryption
61:67:56:6d:57:20:e4:82:61:18:ac:23:37:d8:04:ae:48:b2:
8b:2d:57:07:7c:63:50:15:e7:b7:16:a0:8b:f5:f3:06:66:5e:
27:ea:24:dc:88:03:2e:35:b2:43:b1:66:a1:82:d9:e3:8f:20:
6e:d2:ad:04:9b:82:5b:30:eb:a7:71:c7:32:6b:98:c8:e1:96:
fe:34:f3:e3:0d:52:3f:05:71:cc:c9:38:47:5c:cb:fb:97:d5:
0c:0a:1a:35:91:9c:4d:e9:46:fd:3b:cc:cb:68:9b:83:de:b4:
56:b7:7d:40:e3:06:0a:cb:6e:a3:1e:fd:bc:ce:fb:47:69:f3:
8f:44:3b:67:cd:65:80:ba:eb:af:03:12:24:77:f2:a5:a6:68:
37:09:4b:36:11:be:a9:ad:2e:1b:f5:45:b2:fa:16:ba:56:f4:
92:30:db:ec:1e:29:94:ee:7a:33:85:69:56:e0:71:3e:05:34:
cf:29:27:96:61:4c:17:0b:e5:61:d4:64:01:07:9f:1c:63:7c:
fb:c3:dd:2c:69:f9:22:8c:6a:bf:65:e6:c7:0d:1e:52:6d:b8:
e1:9a:8c:dd:0e:4d:bc:28:e3:4a:11:30:53:96:89:f0:19:36:
0a:eb:ec:d8:a3:82:1b:f7:bc:81:24:3d:03:0c:b0:8b:43:84:
da:4f:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:34 2025 by rpki-client