Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/1-xPymOxn7s6Dd12tw_ZFSD_A8ak.roa
File: 1-xPymOxn7s6Dd12tw_ZFSD_A8ak.roa (raw, json)
Hash identifier: hAn5+gO0Ddf1yJ2R3qJRDWjEkyi1fY5PDoQe1/5Xb9I=
Subject key identifier: FB:13:F2:98:EC:67:EE:CE:83:77:5D:AD:C3:F6:45:48:3F:C0:F1:A9
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 01856CE62843B5EC98CE2CE604724481D5BB
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/1-xPymOxn7s6Dd12tw_ZFSD_A8ak.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 192.109.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:28:43:b5:ec:98:ce:2c:e6:04:72:44:81:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb13f298ec67eece83775dadc3f645483fc0f1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:6e:ca:c8:33:24:22:81:37:d1:70:7d:48:
f6:d6:bf:4a:f0:fa:a0:2f:96:c8:4d:4c:cb:eb:c1:
3a:c9:27:57:25:00:7c:c1:c9:b6:ff:18:45:d4:00:
cd:e0:ce:26:7a:51:d5:87:71:99:1d:3e:82:d8:54:
5c:25:a8:be:77:7b:ab:89:35:3b:a0:ab:54:2a:69:
b0:1e:a6:61:c6:5c:c7:06:35:2f:0d:a4:17:e0:c9:
eb:b8:13:75:d7:b4:cd:df:eb:00:01:5c:e3:f9:88:
ef:7f:b3:53:59:65:f6:37:55:6a:56:d7:4d:2d:a1:
39:25:0f:33:7b:af:bb:a6:2e:ab:37:ae:b7:0a:ff:
e0:1a:89:c3:ab:e8:62:49:13:90:50:ac:00:b2:60:
84:c4:f6:05:1d:0f:34:7b:05:49:ad:75:8a:dd:f9:
d0:0e:3b:da:55:9e:7f:42:3c:53:e7:38:ae:ba:2b:
26:92:16:2f:67:7e:0d:ef:3f:14:ce:00:40:53:92:
97:cd:da:d4:df:78:bf:58:47:1a:30:ef:ba:15:4b:
50:7d:4c:ee:f3:71:31:45:2d:c5:d9:65:c9:de:93:
8d:e4:9a:e7:43:82:e0:62:8f:ca:49:59:82:1a:04:
d2:d6:97:e7:4b:62:a1:0e:15:c4:4b:cd:10:ff:56:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:F2:98:EC:67:EE:CE:83:77:5D:AD:C3:F6:45:48:3F:C0:F1:A9
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/1-xPymOxn7s6Dd12tw_ZFSD_A8ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.135.0/24
Signature Algorithm: sha256WithRSAEncryption
90:65:fe:ab:be:54:40:47:23:0b:36:a5:b1:94:4d:d2:58:dc:
a3:e4:95:31:d1:49:3e:70:10:b9:6c:50:05:4f:73:5e:ab:f0:
9d:a6:05:54:9f:5e:a5:21:5a:aa:8b:a6:5e:d5:b6:07:e2:61:
8c:d0:92:a6:1e:f9:6a:6f:87:1c:54:82:35:fa:0a:95:6f:95:
a6:1a:c2:4e:6d:36:18:ca:61:56:8b:ef:52:f7:46:fa:4e:77:
25:3d:27:1a:49:f8:ab:55:4e:2d:1d:45:26:e6:3f:a5:23:7c:
08:11:b2:da:29:31:10:6a:b8:1e:fe:da:ea:64:fa:47:02:6f:
19:78:7c:2f:68:28:ef:dd:41:4b:17:10:ac:21:1d:de:48:bc:
2f:61:0f:40:7e:7b:4e:6f:c9:14:a8:96:0d:7f:a5:98:36:45:
29:3d:4a:84:ad:d7:40:7d:e7:78:53:d0:c9:3b:d9:5c:86:7f:
72:e3:c1:b8:1b:95:e5:b2:bb:04:0a:56:2d:ba:52:39:f3:38:
12:70:f3:b5:8e:cb:d8:23:c2:6b:ec:a1:12:db:ed:b4:8a:e7:
7e:c1:f1:06:c2:3c:9c:01:20:eb:32:ac:ba:1d:93:8c:91:0f:
87:cf:00:08:5c:23:4e:19:9e:ac:d2:01:46:28:fb:d7:5b:e0:
4a:51:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:28:11 2025 by rpki-client