Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/zcZNStzrgJw6hRq-hQL3wojCOJc.roa
File: zcZNStzrgJw6hRq-hQL3wojCOJc.roa (raw, json)
Hash identifier: pZPrnkiRIjR1ZW2xaTjynXC69H9GHfrOWu5u7s/WKCs=
Subject key identifier: CD:C6:4D:4A:DC:EB:80:9C:3A:85:1A:BE:85:02:F7:C2:88:C2:38:97
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 01856FF068BB5FEC8B4603CE2CAA6A3A2BCF
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/zcZNStzrgJw6hRq-hQL3wojCOJc.roa
Signing time: Mon 02 Jan 2023 00:45:04 +0000
ROA not before: Mon 02 Jan 2023 00:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 94.142.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:68:bb:5f:ec:8b:46:03:ce:2c:aa:6a:3a:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Jan 2 00:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc64d4adceb809c3a851abe8502f7c288c23897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:b4:0b:fb:d7:11:8a:35:6e:5f:f7:39:70:
16:6a:a1:35:f1:86:4f:4f:9a:90:21:21:14:b7:13:
f4:8e:4e:36:1e:0a:cc:cf:c1:ca:ad:b2:c3:f8:b2:
25:37:e7:bc:2c:d3:84:6c:ea:13:ce:94:5b:8e:fd:
67:62:9b:cb:76:f4:ac:51:02:b7:d5:09:41:e5:79:
20:c9:fc:3e:17:e9:73:b7:e6:f5:e0:9d:f3:b6:2b:
65:c9:78:35:66:e2:19:a1:76:10:9b:2c:32:81:88:
b6:c4:02:53:41:c0:06:79:53:16:9a:20:5e:40:b1:
ca:46:94:c0:69:09:e4:f5:78:41:7a:73:f7:0a:93:
8f:ad:e4:40:16:d9:8d:21:ef:a9:ff:a5:7a:57:67:
57:cc:2c:bc:f0:3f:85:64:5c:7d:8b:01:35:80:82:
94:d7:da:6f:ec:df:27:4b:a0:fd:82:e3:fe:80:bb:
cf:43:e3:46:e3:dd:b8:13:91:36:96:7f:ec:2f:a7:
57:43:d4:6d:eb:c4:d2:aa:c1:b9:8e:96:da:82:a3:
f8:c5:92:f2:52:61:82:98:e2:9a:86:21:4f:07:dc:
60:41:d4:e7:99:2e:80:3f:f0:37:33:55:bf:5d:4c:
c2:6b:2c:34:1e:93:93:81:d1:84:37:aa:af:fd:37:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:4D:4A:DC:EB:80:9C:3A:85:1A:BE:85:02:F7:C2:88:C2:38:97
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/zcZNStzrgJw6hRq-hQL3wojCOJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.131.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:10:85:82:81:36:74:41:72:ae:f3:a8:7e:8d:9b:0b:b5:12:
bf:97:a3:e0:fa:a5:46:b6:36:b1:2b:7d:a1:ef:7f:91:f1:d6:
1c:7a:98:ba:d7:c7:fb:54:31:d2:81:b0:84:67:bb:f2:3b:63:
12:62:78:62:54:f6:67:ca:72:2a:4a:ce:f8:79:82:a3:4c:a7:
88:b6:43:0b:2a:de:9f:d1:5c:d0:ab:8c:25:c9:ad:b1:b5:9a:
79:98:e1:d4:c3:57:e4:b2:97:eb:01:96:f6:5e:a5:aa:b1:d6:
32:38:95:3a:8a:5e:77:2e:50:b2:ee:81:d8:24:e5:17:e1:c8:
78:00:27:67:95:69:05:48:0d:73:50:ad:f5:4f:52:9b:62:27:
3b:62:2b:b1:1c:11:fb:54:01:12:2a:8a:52:09:c2:b6:1b:b1:
a8:6b:22:82:c1:0b:5a:50:d5:f4:69:ec:ce:0d:bd:e5:38:08:
27:4b:76:e9:09:23:0e:81:39:a2:a4:6c:d9:f4:40:ab:03:6a:
62:f6:08:0b:70:84:10:d3:26:1f:29:1b:59:28:b3:22:cc:8a:
d9:d5:c3:6b:64:3c:b0:07:18:a0:00:03:5f:4e:f4:72:01:7f:
b9:d4:f2:6f:b9:15:96:20:aa:ab:5f:58:91:dd:a9:63:b0:17:
7b:04:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:11 2025 by rpki-client