Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/zniA-ahHxxshAgKAK9Dr56q2Sjk.roa
File: zniA-ahHxxshAgKAK9Dr56q2Sjk.roa (raw, json)
Hash identifier: BvMl1fgz1FUsDGE46/Yyu0NQELSsTFY2INf/RORZrFQ=
Subject key identifier: CE:78:80:F9:A8:47:C7:1B:21:02:02:80:2B:D0:EB:E7:AA:B6:4A:39
Certificate issuer: /CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Certificate serial: 0186C1199E0B48CE59BC1F2CE91A925814A1
Authority key identifier: 32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/zniA-ahHxxshAgKAK9Dr56q2Sjk.roa
Signing time: Wed 08 Mar 2023 12:02:06 +0000
ROA not before: Wed 08 Mar 2023 12:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211448
IP address blocks: 193.30.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:19:9e:0b:48:ce:59:bc:1f:2c:e9:1a:92:58:14:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32697cbd221ccf61ec34fd0627b2bfebe3b41acb
Validity
Not Before: Mar 8 12:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce7880f9a847c71b210202802bd0ebe7aab64a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:c9:86:fc:9e:32:75:70:dd:d2:f6:13:15:
71:9a:01:aa:1f:8a:08:c8:26:e3:95:08:98:c1:e7:
6f:95:49:51:7d:b8:34:72:c5:f6:a6:ac:46:f4:6b:
97:be:cc:89:1f:99:93:92:86:8a:59:35:70:ac:8e:
1c:90:e4:91:c2:65:3a:91:fb:93:59:c8:cf:fe:ee:
7f:03:79:83:c9:4e:cc:11:83:fc:83:a1:93:18:f5:
3b:6a:b0:86:ec:eb:97:0c:19:e3:84:ef:f1:8d:90:
0b:cc:ff:ce:7f:d5:8c:2f:f6:99:fa:19:9e:0f:5e:
88:4f:6a:22:83:63:27:0d:bf:a9:7f:25:78:3b:7d:
ef:a7:5c:92:7e:c3:13:61:25:28:de:91:30:f5:cd:
9f:d9:ba:eb:54:0b:22:1a:b1:2e:9c:0a:81:30:3f:
4e:15:dd:7a:a3:aa:c1:10:0f:25:07:c6:3f:16:a6:
b5:28:cd:9b:df:2c:78:10:af:bf:74:a7:43:a4:8c:
35:02:81:34:bd:33:50:7d:18:6b:09:84:b8:c9:3d:
3f:20:11:7c:ea:6b:c7:e8:22:e2:8f:eb:23:f5:50:
27:c8:39:1b:4a:a0:01:07:2a:c4:d0:28:fa:ac:20:
15:bc:68:12:4e:2e:54:ba:20:02:96:7e:4e:30:d4:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:80:F9:A8:47:C7:1B:21:02:02:80:2B:D0:EB:E7:AA:B6:4A:39
X509v3 Authority Key Identifier:
keyid:32:69:7C:BD:22:1C:CF:61:EC:34:FD:06:27:B2:BF:EB:E3:B4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/zniA-ahHxxshAgKAK9Dr56q2Sjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0dbe12-e5d2-41b1-ab18-31245bbacd2f/1/Mml8vSIcz2HsNP0GJ7K_6-O0Gss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.126.0/24
Signature Algorithm: sha256WithRSAEncryption
82:1d:3b:34:e9:bf:0e:dd:2a:67:bf:bd:21:d9:5a:e6:1f:79:
75:70:fd:5f:be:8f:c5:57:3f:c2:9e:e6:1c:a6:40:1a:8a:e3:
c9:f0:83:17:7f:c2:08:b1:0b:00:50:33:78:5c:52:de:69:6a:
7a:8f:9b:5c:3a:76:85:72:9c:64:85:c1:9f:e8:61:d5:30:10:
0c:43:fc:ce:4c:1d:b9:83:22:50:eb:f1:fb:4b:91:cd:bf:07:
3d:84:da:14:bd:ba:18:e2:96:37:d1:60:a0:15:70:67:1a:c8:
2a:d4:ed:8c:2c:5e:cd:d1:63:04:3f:8b:b5:89:a5:5b:4a:53:
48:50:b1:7c:6f:80:53:19:2b:18:e2:2e:bd:f4:3e:b6:38:90:
2f:44:77:45:d3:80:ec:52:a0:f2:01:d8:e6:86:0e:86:bd:47:
ff:a9:0d:d4:5f:7a:78:8e:f5:59:92:0d:9f:9d:e1:f1:03:be:
fd:27:5d:a7:31:70:3d:ff:66:8d:30:21:2e:b1:bb:3e:98:68:
d5:f2:57:f5:f3:a4:e3:36:9f:b1:af:2b:a3:a7:1b:1e:ef:25:
86:aa:11:e3:03:b0:54:89:53:12:8a:42:81:4a:f4:16:db:9c:
5d:21:05:da:3f:e5:78:18:18:e6:ae:07:4d:ec:ee:a3:e5:af:
96:3e:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:27 2025 by rpki-client