Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/zvDe1T_FVvVw-O9Cc2GtN49nwN0.roa
File: zvDe1T_FVvVw-O9Cc2GtN49nwN0.roa (raw, json)
Hash identifier: YqE58Rfl8Sm/hg3LntWuMzFrgw6z4iyavSkmIY/FbYE=
Subject key identifier: CE:F0:DE:D5:3F:C5:56:F5:70:F8:EF:42:73:61:AD:37:8F:67:C0:DD
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 0185625CB892ECE3300A3A028380BC17C693
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/zvDe1T_FVvVw-O9Cc2GtN49nwN0.roa
Signing time: Fri 30 Dec 2022 09:28:41 +0000
ROA not before: Fri 30 Dec 2022 09:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 194.93.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:5c:b8:92:ec:e3:30:0a:3a:02:83:80:bc:17:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Dec 30 09:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cef0ded53fc556f570f8ef427361ad378f67c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:68:a2:b2:88:6f:91:73:55:f7:42:8f:1c:
4c:63:7e:b0:06:2b:d0:e7:df:e8:4b:37:a2:fa:30:
14:5f:50:0b:62:73:46:70:ef:76:f2:e8:8f:f6:e8:
c7:fd:be:36:96:f6:73:f7:dc:e5:af:36:19:6f:f6:
6b:d6:95:6d:e4:da:69:74:0d:09:f4:46:2f:0a:61:
72:aa:02:75:04:90:78:71:36:31:2c:4b:e1:17:5b:
fd:00:46:ce:2c:20:83:5a:37:98:a6:98:48:2d:69:
9d:09:72:bb:89:35:a7:59:93:36:b0:63:77:03:94:
d8:d6:f5:c1:99:78:88:85:15:f2:e7:6a:c1:a7:a1:
9e:9f:88:cc:ad:b2:21:28:7a:12:cd:86:21:6b:86:
1d:76:2a:8d:f6:99:21:fe:25:09:da:2e:cd:d3:59:
a6:a7:0f:e9:57:ec:28:dd:55:10:ad:0e:95:25:6c:
8a:2a:ad:4c:56:e2:43:4d:16:e9:ba:8f:e5:4d:c8:
b5:c5:1c:f0:04:44:66:fb:41:a6:22:ca:f0:40:00:
ce:be:f7:29:79:a9:f5:8e:99:64:86:5f:fe:58:a8:
92:27:be:fd:fa:ca:de:5f:66:95:c5:f1:cd:56:45:
8f:a8:8e:b5:95:9b:38:2b:9e:b4:42:0e:f1:c4:ba:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F0:DE:D5:3F:C5:56:F5:70:F8:EF:42:73:61:AD:37:8F:67:C0:DD
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/zvDe1T_FVvVw-O9Cc2GtN49nwN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
52:dc:87:b7:24:b7:02:37:be:15:2a:ab:18:5c:42:64:77:d1:
8a:0d:08:dd:b8:fd:16:e2:e6:69:73:c7:a0:d6:e5:ee:86:63:
29:a7:44:f8:e5:6c:ed:8d:9a:c7:f6:6a:59:cf:e0:b3:64:37:
e5:e3:09:c3:8a:86:93:3e:ca:2f:10:cc:4c:85:1c:5d:62:74:
62:78:ba:3b:5f:49:87:f1:c3:3c:d2:6b:7f:27:ac:5e:e6:ba:
80:10:1e:83:68:37:31:60:fa:76:06:96:72:af:4d:4b:70:f7:
31:da:85:4a:19:f9:87:be:28:c8:a6:2e:3d:1a:4f:e6:bb:90:
96:9d:e3:c6:73:a1:64:f9:12:5c:e2:58:23:1a:7c:92:dc:d0:
b6:3c:b2:58:eb:53:37:5d:7b:21:4a:ff:ac:6a:4a:5e:da:3a:
a9:a1:2d:74:1b:54:1e:7e:0b:23:67:3f:12:56:1d:40:0c:23:
2c:d2:e0:36:69:d3:e0:20:9d:77:08:20:18:29:11:a2:02:d2:
62:48:f9:0f:f8:2c:c1:86:68:84:23:38:87:07:c5:08:58:4e:
19:86:a8:e8:4a:d5:6b:c5:a8:7d:97:f5:c4:c1:5f:ad:b6:e3:
24:9b:00:b1:e6:44:c1:55:85:03:bd:fb:7d:f7:f4:cc:f2:1b:
3e:ae:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:06 2025 by rpki-client