Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/Z_RXP02CCN0fU1YIqqcdicfFlYc.roa
File: Z_RXP02CCN0fU1YIqqcdicfFlYc.roa (raw, json)
Hash identifier: cCQUvUcsfimRgYMaMggxBRdZZhR7hxxBudDPr3ubwos=
Subject key identifier: 67:F4:57:3F:4D:82:08:DD:1F:53:56:08:AA:A7:1D:89:C7:C5:95:87
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 018571BA27DF75B6EB87673F19319638889C
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/Z_RXP02CCN0fU1YIqqcdicfFlYc.roa
Signing time: Mon 02 Jan 2023 09:05:03 +0000
ROA not before: Mon 02 Jan 2023 09:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48417
IP address blocks: 195.210.14.0/24 maxlen: 24
195.210.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:27:df:75:b6:eb:87:67:3f:19:31:96:38:88:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Jan 2 09:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67f4573f4d8208dd1f535608aaa71d89c7c59587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:bc:a6:80:a8:e9:c2:15:a7:2c:4a:f2:b9:
ac:27:39:20:ba:a1:4f:15:1d:8a:b2:30:af:ff:63:
a1:cc:4e:9a:f2:13:12:e2:52:cc:e5:7c:cc:7e:c9:
2b:42:eb:98:4e:82:b9:6b:9d:38:35:d6:5e:aa:8e:
f8:97:54:65:09:00:64:7b:67:03:10:0a:06:be:61:
90:b6:27:87:6c:49:c4:4e:9b:b6:38:a8:ec:e1:62:
ef:be:59:b5:d6:9b:30:fb:48:ec:d3:c7:b0:8f:e0:
a1:9d:50:67:15:0e:f5:f0:4b:7e:93:9d:f6:8f:f7:
ae:16:0e:ec:79:4b:62:70:17:86:44:ae:46:1b:ab:
19:be:61:de:43:92:0f:a7:ce:6f:96:70:c0:0d:4a:
98:5b:0b:d8:9f:12:5e:77:7a:9c:61:4b:f8:c1:be:
7f:0c:13:bd:7e:89:d8:1a:7e:d7:38:7e:b9:f9:02:
03:6a:f0:0f:80:18:34:48:60:52:8f:e9:f7:3a:f7:
13:f5:b5:28:4e:b4:ba:50:54:f9:30:59:07:58:30:
31:8c:ed:17:9e:94:53:73:f6:d8:06:5b:49:04:9a:
4d:4c:66:51:70:06:ae:e1:04:bd:dc:55:a8:26:32:
df:d4:6d:76:fa:d1:a0:8d:ae:c1:ca:6b:b8:45:f6:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:57:3F:4D:82:08:DD:1F:53:56:08:AA:A7:1D:89:C7:C5:95:87
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/Z_RXP02CCN0fU1YIqqcdicfFlYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.14.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:5b:c2:9d:72:9a:ca:6b:0d:d6:fd:eb:70:d7:13:a0:fb:0e:
b7:50:35:57:0f:2f:02:9f:cc:63:4d:25:04:bb:14:e0:e0:34:
21:29:98:29:5f:19:c1:36:67:8f:91:b3:b1:10:ff:67:f5:06:
28:3d:84:aa:a1:99:c6:13:90:e1:3f:9a:67:93:bc:9f:13:a8:
7a:3a:be:c7:2e:45:7e:e7:46:82:16:e5:f6:ab:95:67:46:f7:
4e:86:2f:07:48:4f:9f:7b:f7:e3:eb:f0:08:04:cb:1b:c0:4c:
43:04:4a:7b:cc:ab:be:7e:65:63:5f:73:df:ce:50:64:55:c2:
8c:09:2f:5b:ed:54:3b:06:89:54:35:fb:25:fd:df:b9:f7:23:
ad:fd:ff:15:0a:22:dd:86:43:62:0e:25:c7:b7:be:ab:47:aa:
d9:7e:43:21:9d:f1:cc:ff:4e:4c:1a:92:29:69:07:07:2f:09:
ae:c6:8e:38:27:ce:9b:b9:1d:87:4b:bd:47:fe:14:8a:ba:4e:
97:df:ff:8a:4b:b0:d3:c1:8b:9f:fd:a1:e4:4b:91:74:66:34:
71:c8:fa:10:8a:12:97:62:fc:20:a2:50:41:e0:b1:c7:6f:a3:
6a:1e:f0:b8:4a:06:f6:e9:0a:7b:3a:c8:af:7e:0a:77:2c:45:
16:b0:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:35 2025 by rpki-client