Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/ZtxbjtvwvQ_TPEm-EQeNEeMVlEc.roa
File: ZtxbjtvwvQ_TPEm-EQeNEeMVlEc.roa (raw, json)
Hash identifier: oGki59WXcnQBPVPG05OM8FBji4Inc4ZzZE0W7nZHHCo=
Subject key identifier: 66:DC:5B:8E:DB:F0:BD:0F:D3:3C:49:BE:11:07:8D:11:E3:15:94:47
Certificate issuer: /CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Certificate serial: 14C33329
Authority key identifier: E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/ZtxbjtvwvQ_TPEm-EQeNEeMVlEc.roa
Signing time: Sat 01 Jan 2022 05:05:59 +0000
ROA not before: Sat 01 Jan 2022 05:05:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35328
IP address blocks: 195.68.234.0/23 maxlen: 23
195.68.234.0/24 maxlen: 24
195.68.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348336937 (0x14c33329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Validity
Not Before: Jan 1 05:05:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66dc5b8edbf0bd0fd33c49be11078d11e3159447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:2a:4f:13:85:c9:f9:7f:aa:46:ad:a9:af:
91:fb:2b:5d:fb:3e:b5:24:cd:c0:5e:a1:0e:04:ce:
ae:3a:1c:00:27:69:04:32:57:45:dc:78:38:ae:65:
e2:64:fb:9a:7c:b7:09:99:69:e7:55:1b:e7:af:93:
ee:46:ef:af:76:73:41:ca:5e:99:c8:98:ee:b4:90:
a8:69:05:04:06:8f:8c:ac:6d:73:4c:12:41:9c:65:
a9:95:2c:22:8d:06:eb:23:1e:7f:63:19:dc:6e:c4:
e2:36:26:21:02:5a:76:70:38:a1:7f:84:d6:65:7b:
da:78:1e:f4:34:f9:34:90:81:e4:3d:b7:19:47:4e:
9a:93:68:f0:11:02:c2:c1:57:de:54:60:07:b4:9c:
a2:0f:e9:d9:25:f4:60:e9:4e:be:1d:e4:b2:7f:72:
4f:39:f6:ff:67:0b:43:ac:5b:2f:01:84:de:76:ce:
b3:47:7e:54:64:b3:31:95:15:22:70:81:e1:d7:07:
cd:cb:23:80:d1:65:53:81:fb:93:83:76:d3:10:6c:
7a:cd:f7:00:5d:e2:f3:7e:40:b7:16:4b:1b:92:1f:
be:82:bb:2d:66:d3:66:82:43:b7:4d:16:29:99:aa:
2c:b7:a6:84:e4:8e:5c:56:aa:20:91:c4:4b:db:e4:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DC:5B:8E:DB:F0:BD:0F:D3:3C:49:BE:11:07:8D:11:E3:15:94:47
X509v3 Authority Key Identifier:
keyid:E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/ZtxbjtvwvQ_TPEm-EQeNEeMVlEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.234.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:c5:ec:49:03:1a:98:b6:5c:c1:5d:23:11:81:0d:26:3b:be:
24:80:e1:1d:c8:2d:0d:01:d1:b7:53:2f:e6:b3:7d:66:6b:9b:
99:7c:f0:e4:a9:38:e4:2e:fe:d1:4a:92:6f:e2:d7:dc:d1:01:
5c:df:41:80:2b:3a:25:b4:22:ae:3c:e3:38:42:11:77:d1:4b:
18:db:07:99:0c:63:41:f5:54:5d:93:46:da:0f:aa:eb:52:ce:
a1:90:6e:36:22:b1:85:29:a6:a4:c8:ce:2f:25:14:93:4a:a0:
66:ec:c4:56:cb:3e:17:e0:20:84:d2:4b:53:92:e2:25:5b:14:
4a:08:0b:53:77:cb:a2:0e:d8:5e:24:b4:ae:fd:4b:cf:d7:f0:
35:99:44:41:e3:79:9b:c5:be:ec:f7:1f:be:2a:cf:49:b4:27:
86:7a:a8:74:56:42:f2:06:74:3d:77:40:cc:84:a3:1e:7e:39:
3f:47:36:2b:6c:95:b5:49:c8:59:22:4d:83:94:51:65:6d:2b:
2d:3b:fe:96:d8:ce:d7:3d:a0:a4:ff:76:3a:37:fb:06:53:08:
95:fb:24:58:c7:c4:e4:66:03:92:78:67:a4:5c:17:e2:f2:2f:
3d:4a:4b:e9:31:18:b3:a7:9d:ef:cf:65:5f:b1:d4:63:6a:ae:
ca:8d:a9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:16 2025 by rpki-client