Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/ZcOibJTjACAjBEBDk5_y3h4g8Hw.roa
File: ZcOibJTjACAjBEBDk5_y3h4g8Hw.roa (raw, json)
Hash identifier: WpGQzHc+19ubIan2Ar7rdrBQBlMAXsfvvj2cBD+f1D4=
Subject key identifier: 65:C3:A2:6C:94:E3:00:20:23:04:40:43:93:9F:F2:DE:1E:20:F0:7C
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 01857246B0B7A9EF23145103C7C224AFB2E1
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/ZcOibJTjACAjBEBDk5_y3h4g8Hw.roa
Signing time: Mon 02 Jan 2023 11:38:33 +0000
ROA not before: Mon 02 Jan 2023 11:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208357
IP address blocks: 185.54.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b0:b7:a9:ef:23:14:51:03:c7:c2:24:af:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jan 2 11:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c3a26c94e3002023044043939ff2de1e20f07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:4d:02:f5:45:67:f5:a7:87:b5:04:e9:b2:
39:a9:df:3b:24:bc:24:e9:3f:a9:97:b8:6b:97:a4:
a8:22:53:53:48:8b:1e:b1:de:9b:c7:dc:0f:9f:46:
61:14:33:9e:a6:aa:35:72:9f:df:30:82:94:28:02:
63:f2:95:f3:8f:b2:b0:63:a2:35:a5:9b:fd:99:96:
73:90:db:77:21:9a:d0:aa:37:ff:ea:34:6d:bc:e8:
c6:64:81:5c:b3:18:31:4b:45:49:0e:d0:7c:81:d7:
7b:51:8d:48:95:99:13:12:85:29:93:1c:71:b8:ee:
ba:72:d7:4c:30:e4:c6:53:3d:eb:94:39:69:aa:1f:
87:e9:e3:4d:d5:26:0d:46:c3:c5:c1:8d:8c:66:59:
88:50:bf:06:58:b5:66:cc:81:16:48:65:70:30:6c:
1a:69:77:ef:33:cd:35:34:28:ba:c6:34:fe:eb:ac:
68:85:3c:47:e3:28:db:fc:b5:18:5e:17:dc:0e:c7:
24:39:2e:f6:7f:6d:6d:66:13:58:f5:02:7f:8d:6f:
64:9d:cf:40:14:5e:55:90:22:86:ad:d0:23:2f:f9:
40:6b:18:8d:83:c0:f3:b0:6d:a5:18:63:90:73:13:
16:eb:21:e6:aa:4b:2f:fd:3e:a9:fc:08:cc:0d:27:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:A2:6C:94:E3:00:20:23:04:40:43:93:9F:F2:DE:1E:20:F0:7C
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/ZcOibJTjACAjBEBDk5_y3h4g8Hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.138.0/24
Signature Algorithm: sha256WithRSAEncryption
64:03:7c:8a:b6:2b:98:28:03:f8:4c:3f:94:1a:26:ae:df:3c:
63:f2:4b:2d:13:8a:10:aa:2a:b6:f3:de:fb:14:76:c0:bc:51:
ae:3d:78:28:c6:9d:9e:ad:6a:59:13:69:cf:ef:0d:fd:e4:1a:
de:e1:1f:57:cf:e4:f7:a2:36:13:c8:ce:12:a1:43:c7:70:5f:
5f:6c:34:dc:78:13:43:28:51:ea:0e:11:1f:d3:17:6a:66:8e:
48:b8:a7:65:b0:c9:1f:0b:92:70:04:68:7a:6e:f5:a3:41:8d:
7c:ea:b5:9f:a7:79:65:76:b5:32:4b:1d:bf:36:bd:4a:3a:c6:
f8:16:4a:89:83:b2:07:85:fb:e1:14:13:1a:ca:22:19:58:15:
0a:a3:21:3b:57:70:42:39:2b:96:22:ef:c6:bf:ed:1e:61:ac:
38:27:af:86:6f:55:21:68:35:51:f9:45:39:d8:3e:a4:04:54:
39:3c:bc:ae:d9:b6:cd:24:8e:c1:47:78:7e:46:ce:6f:14:d6:
eb:94:5b:a8:20:45:57:55:93:f3:72:9b:65:df:36:9b:0c:bc:
43:ef:47:84:9e:fd:ac:cc:d3:63:1a:c8:19:21:71:78:2f:75:
5c:a1:9d:41:f7:9e:f7:8d:3a:9e:8c:f6:d2:5b:2b:e4:e6:fa:
99:a9:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:43 2025 by rpki-client