Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Zjgd0Ma9pF_4Ukpy857rN242DhM.roa
File: Zjgd0Ma9pF_4Ukpy857rN242DhM.roa (raw, json)
Hash identifier: YBpnEbK3cklfWAfxCWTUw6YhhXGI5HuAdrrR1HY5w14=
Subject key identifier: 66:38:1D:D0:C6:BD:A4:5F:F8:52:4A:72:F3:9E:EB:37:6E:36:0E:13
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 0185EDC8A68A439D20B9411635EC81D2372A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Zjgd0Ma9pF_4Ukpy857rN242DhM.roa
Signing time: Thu 26 Jan 2023 11:13:48 +0000
ROA not before: Thu 26 Jan 2023 11:13:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39437
IP address blocks: 195.136.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:c8:a6:8a:43:9d:20:b9:41:16:35:ec:81:d2:37:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 26 11:13:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66381dd0c6bda45ff8524a72f39eeb376e360e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:d9:89:00:9e:c6:f2:cf:f3:d5:63:08:4e:
3f:d7:97:7e:70:98:7c:df:0e:70:9d:88:0e:98:93:
19:1c:ca:7b:89:3d:27:c1:8d:b9:7a:d4:68:11:a6:
e5:08:9e:2d:33:cb:86:ba:0f:7c:4e:32:ce:15:bd:
95:5f:d9:95:b5:64:85:02:e3:1d:c3:e0:cf:49:78:
a8:2f:ef:1d:3b:63:c4:86:4d:8f:30:22:d5:24:5c:
0f:16:92:6b:3e:da:47:bd:e0:48:52:76:12:b9:e9:
c2:e9:1c:85:c3:b4:61:ac:6c:bb:68:09:af:06:23:
71:29:ea:2a:bc:d9:bb:4d:7a:8c:7b:5e:93:5f:2c:
44:18:ee:dc:9a:88:58:e8:89:2f:e2:8a:cf:ab:73:
11:99:4f:35:31:89:5a:55:96:72:d2:d6:8b:79:6a:
d1:1a:09:b5:a9:8d:8e:8d:6a:91:1c:8b:e4:69:00:
6b:7a:be:5a:8d:ae:08:8f:96:b0:19:e3:ce:e7:5a:
eb:3c:36:b6:f8:6f:5f:d1:0d:32:1b:97:14:b1:3b:
63:ee:7f:6d:1b:0a:60:f6:63:e0:79:db:cc:e1:92:
25:3d:a7:73:a4:89:a5:b6:3c:59:9d:0c:91:d3:e4:
ce:e0:82:64:45:65:31:73:d8:f6:71:ab:98:d8:1b:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:38:1D:D0:C6:BD:A4:5F:F8:52:4A:72:F3:9E:EB:37:6E:36:0E:13
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/Zjgd0Ma9pF_4Ukpy857rN242DhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.79.0/24
Signature Algorithm: sha256WithRSAEncryption
00:23:8b:e1:c8:13:76:c6:b9:b8:88:8b:70:e1:bb:90:b4:8b:
fd:dc:8c:ed:1d:3d:29:87:79:28:9f:1d:79:a7:fd:89:14:c6:
96:b1:86:e4:eb:e7:29:1c:5a:b9:5e:ff:cf:3b:e5:a4:86:ae:
51:9e:e4:75:e0:e8:24:8e:53:b0:e6:64:c3:dc:2d:23:b6:e4:
39:49:42:5f:77:4a:e8:89:52:33:06:ff:a9:35:66:5e:57:d7:
cc:af:c9:a3:ef:70:73:df:70:6a:07:95:44:3c:5e:21:6e:8a:
27:8c:4b:a5:eb:09:46:74:d4:77:01:0b:a4:6c:71:28:99:4d:
4e:b6:94:a4:33:8c:6b:47:4f:f7:ca:f5:c4:79:cf:91:62:8e:
72:8c:2d:79:a8:df:be:dd:71:56:d1:e9:13:48:b2:5d:65:ca:
77:dd:84:7f:a8:9f:65:37:f7:c0:25:3b:1c:46:cc:cc:e9:73:
67:74:c9:a1:d9:cd:81:8f:d7:ed:1e:40:55:19:eb:e1:92:28:
65:5c:81:d1:fe:7f:27:99:40:5b:7d:6e:09:f0:30:e5:77:85:
4b:c1:2c:db:8f:4a:69:6a:ee:3c:f0:7f:41:da:04:82:b2:f6:
6b:6e:fd:f1:1c:1f:c9:fa:2e:df:10:a9:d7:1a:da:72:d0:d4:
48:86:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:40 2025 by rpki-client