Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/rZZwJVO9Eg9okO3SUZPp_8tPbGA.roa
File: rZZwJVO9Eg9okO3SUZPp_8tPbGA.roa (raw, json)
Hash identifier: lzTHvEIzU5N8anhOefQXQKZVvFIsMc4jdclPUpnMBko=
Subject key identifier: AD:96:70:25:53:BD:12:0F:68:90:ED:D2:51:93:E9:FF:CB:4F:6C:60
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 0186E53B7EE8462F034D82C167989DFB58CA
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/rZZwJVO9Eg9okO3SUZPp_8tPbGA.roa
Signing time: Wed 15 Mar 2023 12:25:26 +0000
ROA not before: Wed 15 Mar 2023 12:25:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 141.98.209.0/24 maxlen: 24
2a12:96c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:3b:7e:e8:46:2f:03:4d:82:c1:67:98:9d:fb:58:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Mar 15 12:25:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad96702553bd120f6890edd25193e9ffcb4f6c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:57:c1:4a:c0:68:21:43:10:44:a2:6e:8d:
68:27:a3:18:fc:8c:a9:c5:ca:f7:2c:fc:b8:c3:dc:
e2:a4:19:7b:1c:29:25:d2:62:89:a5:30:7f:d5:29:
2f:87:e8:64:a4:25:3a:38:5d:2b:27:da:22:d9:f4:
af:fa:49:dc:9a:4a:56:77:df:1e:9c:98:70:9b:83:
b0:2e:ed:73:a3:72:47:cc:74:11:b8:69:20:b4:84:
ac:b5:45:c7:5d:cb:f4:90:0b:0a:1a:e5:a3:80:a5:
3a:21:3f:49:ff:b4:7f:40:00:07:9b:0a:96:5b:f9:
ef:d6:a2:ea:63:8d:b4:d1:b1:7a:37:06:0a:78:09:
a4:42:41:8d:e4:2f:c6:a2:95:aa:54:38:61:05:a5:
07:21:bf:f3:46:f1:3f:40:ac:cf:61:65:92:b2:78:
c4:95:fe:47:70:e8:04:17:1f:86:53:8d:a7:65:79:
42:67:bf:91:88:fc:80:ae:90:67:a2:18:1a:70:91:
1d:30:55:16:2c:28:06:ca:e2:e8:e4:b6:f5:97:43:
0e:9a:e3:4b:0a:05:78:a5:ef:a2:94:86:d0:96:25:
d3:40:77:31:6e:4a:ed:19:57:90:1d:00:72:fb:e8:
86:5b:6e:55:17:29:62:7c:86:f6:86:f8:e3:13:38:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:70:25:53:BD:12:0F:68:90:ED:D2:51:93:E9:FF:CB:4F:6C:60
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/rZZwJVO9Eg9okO3SUZPp_8tPbGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.209.0/24
IPv6:
2a12:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:e2:ea:db:f8:87:bf:43:97:b3:3b:28:b4:2c:5b:f8:4e:b9:
db:4f:89:ef:b9:ac:63:81:b7:60:c0:d3:fc:27:0e:b4:35:52:
cb:3c:53:44:d3:68:d3:f5:f8:16:fe:9f:45:a6:1e:97:71:27:
cc:6c:10:d2:66:77:21:ad:be:48:ca:11:8e:e1:18:47:bb:f1:
7d:e7:3e:7f:41:50:e8:55:52:8d:f6:cb:49:3e:4c:10:a4:3b:
43:cc:8e:8a:e6:42:78:49:a4:b5:2d:2d:af:80:68:ad:86:bb:
76:e8:30:78:75:51:d1:40:0a:84:1d:ab:7f:26:72:09:31:ac:
4e:3b:23:dd:4b:44:e1:55:36:ab:ba:68:88:ad:2f:d8:77:11:
f1:7e:29:d1:3c:3f:3c:a3:87:84:06:dd:dd:c5:53:37:11:01:
1e:03:ca:78:64:58:87:1d:21:2d:47:5d:5b:e6:d1:e7:83:d9:
32:15:48:bb:d5:d4:1c:84:8c:ee:1a:53:0e:28:02:48:44:4a:
82:1e:bf:20:09:7b:4a:54:73:e0:0f:3c:1f:b3:d6:15:c8:7d:
d2:38:02:1e:d0:4b:56:f0:e3:12:88:6f:df:bd:64:a6:a0:4c:
95:37:b9:ee:e3:ea:4a:13:52:20:cd:0b:51:83:79:9c:66:9a:
3b:46:b7:11
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYblO37oRi8DTYLBZ5id+1jKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOTYzZGQwMWVjODBkZTllMTM4YzlkZTQ0YTM2ZDQ4ZjA2
YjkzZmQwHhcNMjMwMzE1MTIyNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDk2NzAyNTUzYmQxMjBmNjg5MGVkZDI1MTkzZTlmZmNiNGY2YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4npXwUrAaCFDEESibo1oJ6MY/Iyp
xcr3LPy4w9zipBl7HCkl0mKJpTB/1Skvh+hkpCU6OF0rJ9oi2fSv+kncmkpWd98e
nJhwm4OwLu1zo3JHzHQRuGkgtISstUXHXcv0kAsKGuWjgKU6IT9J/7R/QAAHmwqW
W/nv1qLqY4200bF6NwYKeAmkQkGN5C/GopWqVDhhBaUHIb/zRvE/QKzPYWWSsnjE
lf5HcOgEFx+GU42nZXlCZ7+RiPyArpBnohgacJEdMFUWLCgGyuLo5Lb1l0MOmuNL
CgV4pe+ilIbQliXTQHcxbkrtGVeQHQBy++iGW25VFylifIb2hvjjEzg1jQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK2WcCVTvRIPaJDt0lGT6f/LT2xgMB8GA1UdIwQY
MBaAFM2WPdAeyA3p4TjJ3kSjbUjwa5P9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYt
NmNmMTY1MjM5YmQ5LzEvclpad0pWTzlFZzlva08zU1VaUHBfOHRQYkdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lNDAzYWEtN2ZhNS00ZDk2LWI0OWYtNmNmMTY1MjM5YmQ5
LzEvelpZOTBCN0lEZW5oT01uZVJLTnRTUEJya18wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAjWLRMA0E
AgACMAcDBQMqEpbAMA0GCSqGSIb3DQEBCwUAA4IBAQA/4urb+Ie/Q5ezOyi0LFv4
TrnbT4nvuaxjgbdgwNP8Jw60NVLLPFNE02jT9fgW/p9Fph6XcSfMbBDSZnchrb5I
yhGO4RhHu/F95z5/QVDoVVKN9stJPkwQpDtDzI6K5kJ4SaS1LS2vgGithrt26DB4
dVHRQAqEHat/JnIJMaxOOyPdS0ThVTarumiIrS/YdxHxfinRPD88o4eEBt3dxVM3
EQEeA8p4ZFiHHSEtR11b5tHng9kyFUi71dQchIzuGlMOKAJIREqCHr8gCXtKVHPg
Dzwfs9YVyH3SOAIe0EtW8OMSiG/fvWSmoEyVN7nu4+pKE1IgzQtRg3mcZpo7RrcR
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:23 2025 by rpki-client