Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/ZlRzms3gOx-5xKaIO4_MYE5kLXM.roa
File: ZlRzms3gOx-5xKaIO4_MYE5kLXM.roa (raw, json)
Hash identifier: MKtt347vQp3F812AyXz91l/1+J7xGQu0ZsTLBbUhAFI=
Subject key identifier: 66:54:73:9A:CD:E0:3B:1F:B9:C4:A6:88:3B:8F:CC:60:4E:64:2D:73
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 01897CA3A872BA21AE0B560A19B7E8723BB8
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/ZlRzms3gOx-5xKaIO4_MYE5kLXM.roa
Signing time: Sat 22 Jul 2023 08:07:27 +0000
ROA not before: Sat 22 Jul 2023 08:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207780
IP address blocks: 2a12:3fc6::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7c:a3:a8:72:ba:21:ae:0b:56:0a:19:b7:e8:72:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jul 22 08:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6654739acde03b1fb9c4a6883b8fcc604e642d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:62:02:5a:5a:3e:c3:3e:e7:2c:99:02:12:
92:28:6f:39:0a:08:4d:20:c4:ea:46:80:1d:ce:30:
12:3e:8c:15:8a:c0:2a:0c:ec:c7:e7:2d:9c:e8:b0:
0f:94:04:f3:56:9d:32:9e:4b:23:a6:3e:5e:6a:81:
0e:d5:84:6d:d7:78:b2:c8:2c:52:5e:8c:ad:0f:6d:
0a:a4:0f:9c:8b:14:3a:28:0e:05:70:86:30:ce:b1:
a5:dd:22:f2:6b:1b:f5:e9:34:f0:2a:3a:c6:9f:29:
b4:9d:6f:be:d3:21:e4:01:89:67:ad:bf:d0:39:29:
b7:cc:2a:c6:4c:55:5a:31:23:72:c8:51:b4:39:8c:
08:a9:9a:20:26:8d:f0:8c:c4:ba:02:57:65:23:c7:
66:a1:60:56:a5:cb:66:34:c4:bc:d2:8d:11:b0:99:
6b:3d:65:7e:01:8d:9c:fb:79:69:e0:72:6b:2b:4b:
34:72:9c:a2:cd:7b:ec:00:64:8c:db:95:26:aa:cd:
cd:45:31:3c:f1:ce:eb:d3:72:a4:de:3c:5b:7e:aa:
9e:9b:2a:02:09:bd:b4:4b:9f:0b:02:c7:ee:ae:34:
38:aa:3b:ef:81:cd:dc:94:48:a6:cb:08:10:0e:bc:
94:af:8f:78:d2:a0:7a:c4:4d:83:c5:ab:33:73:42:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:54:73:9A:CD:E0:3B:1F:B9:C4:A6:88:3B:8F:CC:60:4E:64:2D:73
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/ZlRzms3gOx-5xKaIO4_MYE5kLXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc6::/44
Signature Algorithm: sha256WithRSAEncryption
7c:0b:a6:5b:42:1b:f7:96:2c:5c:39:b8:7b:4f:10:5b:99:19:
de:bd:60:4d:9a:65:c8:e6:17:89:53:a2:0f:ee:80:45:9c:ef:
7f:bb:e9:86:46:11:97:03:f3:77:c2:97:56:2a:5e:a4:21:82:
18:75:0e:5b:ea:0c:ca:fa:a8:48:2c:18:21:e6:9d:cc:8a:a4:
66:34:80:cb:1e:14:6f:0f:c8:f4:af:56:9c:ab:37:ba:27:4b:
f0:be:d5:11:f8:2c:18:70:ed:78:d2:20:7d:07:b8:5e:48:6b:
2e:8e:d4:ae:ad:e8:91:d8:23:92:77:f9:17:f9:fe:76:e3:cd:
06:41:0c:fb:56:da:1a:12:d4:bf:f4:3d:45:aa:b0:21:9a:45:
a3:38:01:99:69:10:62:ba:f2:77:69:df:2c:76:94:7b:54:6a:
54:95:e0:15:c5:a3:60:a2:dc:06:22:09:78:a1:d4:13:07:d2:
fe:a7:d2:4a:dd:91:04:c3:30:8d:f6:b7:c6:f2:0f:35:82:43:
b5:5f:a8:75:62:f0:cb:a4:3c:4b:a1:7a:26:34:f0:9c:37:ba:
a2:c7:d1:1f:0e:db:a9:6c:3a:d6:dc:0b:6d:78:bf:18:90:20:
98:a9:7d:8f:a1:e9:bc:95:1c:cd:84:51:60:23:73:41:8d:cd:
e9:48:06:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:55 2025 by rpki-client