Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/zh6MW4c1YtjPyIsRgV_c8PPtw4c.roa
File: zh6MW4c1YtjPyIsRgV_c8PPtw4c.roa (raw, json)
Hash identifier: PZG98d2VhIFkniFvTbwGOJdfBh1/ylxMrJVGRswXOQA=
Subject key identifier: CE:1E:8C:5B:87:35:62:D8:CF:C8:8B:11:81:5F:DC:F0:F3:ED:C3:87
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 01FAE9
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/zh6MW4c1YtjPyIsRgV_c8PPtw4c.roa
Signing time: Wed 23 Feb 2022 07:36:12 +0000
ROA not before: Wed 23 Feb 2022 07:36:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209719
IP address blocks: 193.107.67.0/24 maxlen: 24
2001:67c:940::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129769 (0x1fae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Feb 23 07:36:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce1e8c5b873562d8cfc88b11815fdcf0f3edc387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:87:49:b1:f8:67:77:f7:9a:58:e4:66:33:
ea:5d:64:d5:93:66:4d:d0:7a:f0:2c:6f:ce:f9:fc:
36:8c:25:fd:39:05:eb:dc:5c:e0:95:a6:ba:0c:f8:
4b:51:0b:bd:aa:fd:27:4f:d2:d9:6a:5e:98:1d:92:
b1:82:a5:18:b0:cf:b2:72:a7:31:92:6e:03:81:96:
44:41:aa:47:7b:28:c4:09:cd:46:b9:12:db:4e:59:
6c:74:38:cd:e7:8e:e3:72:e4:2c:fc:83:39:f7:8f:
b8:4a:2e:ce:a4:73:48:cd:ae:6a:39:72:c7:62:47:
03:61:0c:00:bc:cc:c5:d8:9d:4e:68:60:a0:26:cd:
1f:6e:30:67:77:b5:37:62:bc:d1:67:93:ba:ee:31:
1b:48:c2:14:ef:83:9e:a6:96:ad:5a:5c:a2:29:e3:
35:f5:9b:06:24:c3:0c:96:2e:b2:3f:8e:1c:bb:44:
cc:fd:89:bc:c8:f4:af:c0:70:cd:21:dc:55:a3:d7:
c6:0e:9c:3e:ad:9c:9c:f5:ba:14:1d:31:48:1e:ca:
d4:95:e5:57:0b:a1:9a:7f:23:42:33:01:83:c8:a8:
31:11:e1:95:e7:13:3f:a9:4a:3e:6d:45:13:3f:29:
14:9e:e7:68:55:90:2a:b9:c7:29:01:60:a7:69:63:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1E:8C:5B:87:35:62:D8:CF:C8:8B:11:81:5F:DC:F0:F3:ED:C3:87
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/zh6MW4c1YtjPyIsRgV_c8PPtw4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.67.0/24
IPv6:
2001:67c:940::/48
Signature Algorithm: sha256WithRSAEncryption
d1:6c:69:0e:1d:8c:57:80:f7:66:21:2b:a4:a6:fa:40:ff:d7:
b2:80:bb:f4:17:df:14:d2:dc:d8:88:d2:96:b6:ff:4c:02:07:
b3:0c:cb:3f:ed:bf:93:2f:57:73:0b:1b:6f:16:5a:2d:ff:4f:
11:4e:da:95:8d:11:54:08:75:ce:ef:ad:af:4e:d1:1e:47:f0:
cd:10:c2:d6:ac:99:df:d5:d3:77:31:c4:4a:ef:0b:de:56:25:
71:06:77:ab:10:83:0c:ef:12:35:b0:91:69:59:40:b4:fb:8f:
0a:61:b8:f4:8e:20:84:2a:73:86:89:a0:ee:a1:43:82:ba:f4:
0f:1c:52:83:2c:97:3c:b7:68:26:5c:d4:23:d3:cf:43:4c:87:
ff:fc:47:9b:51:36:da:ac:74:8f:08:76:b5:30:be:26:b4:87:
71:12:16:ea:8c:41:bb:18:77:df:c9:e6:c3:38:10:3d:5e:8f:
fd:b2:c6:69:fc:f0:1c:f6:00:fd:d7:55:89:32:24:49:35:52:
fb:e3:02:b6:82:60:8b:27:e2:90:57:96:b0:36:46:da:7c:7e:
c0:4b:b9:29:23:55:32:71:1b:77:82:d8:f5:e6:aa:4c:a0:22:
11:8f:eb:8e:68:1f:6f:1d:70:36:80:5d:6e:4e:6e:73:f5:9c:
0d:32:b5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:42:18 2025 by rpki-client