Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ziyTwLze4uIFAulB66Ly0kunCyY.roa
File: ziyTwLze4uIFAulB66Ly0kunCyY.roa (raw, json)
Hash identifier: OWkYm+Qa84XmR5Ct6eozM+G3knQfdp+BZUPl8GoK8ks=
Subject key identifier: CE:2C:93:C0:BC:DE:E2:E2:05:02:E9:41:EB:A2:F2:D2:4B:A7:0B:26
Certificate issuer: /CN=927b1e56ac7d07802c4567c4679435159b422096
Certificate serial: 018572B436EE03DE49AC827FCC6C6D8AE494
Authority key identifier: 92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ziyTwLze4uIFAulB66Ly0kunCyY.roa
Signing time: Mon 02 Jan 2023 13:38:11 +0000
ROA not before: Mon 02 Jan 2023 13:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197688
IP address blocks: 193.142.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:36:ee:03:de:49:ac:82:7f:cc:6c:6d:8a:e4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927b1e56ac7d07802c4567c4679435159b422096
Validity
Not Before: Jan 2 13:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce2c93c0bcdee2e20502e941eba2f2d24ba70b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:54:cc:39:b8:d3:73:4f:41:d9:58:35:5d:
85:b3:62:9a:96:d2:42:c9:bd:3e:f4:da:53:ba:eb:
a8:a9:66:1c:24:8e:ad:48:e6:fe:12:01:56:88:70:
f7:6e:cd:ff:a5:a6:0d:c8:ac:d4:7c:71:ef:ac:06:
c4:9d:46:7b:19:32:0a:62:e3:08:d0:06:ce:5f:97:
31:4a:46:68:71:8b:d6:bb:40:89:6b:8e:66:d9:83:
29:8e:f1:45:36:7e:a1:2a:93:c0:4b:6e:ea:bb:70:
69:fd:e7:66:bc:31:f1:fa:6c:24:d6:a0:e7:49:f0:
30:f5:ed:ac:91:f4:6f:ca:4c:02:98:8e:ed:b6:13:
4d:16:28:c4:f9:8c:8d:02:20:7b:67:3a:e8:d2:5e:
26:dc:a9:06:f9:4c:d3:4b:a8:a4:0e:a1:ec:be:cd:
6d:bf:a6:05:27:ab:d4:32:0f:0f:c5:9b:48:25:ef:
af:e7:8a:b4:6a:5b:0f:fd:e8:f5:0b:87:9a:0a:df:
cd:ba:98:18:84:75:bb:e8:03:a4:d8:d2:c4:ce:3a:
eb:cd:0e:cd:21:9e:4a:62:e8:7e:b5:66:09:1e:b4:
9b:a4:f0:49:28:99:d4:b2:fb:2d:6c:a9:7d:d3:cb:
a5:c4:c4:11:81:6b:43:f4:25:32:cb:8f:84:85:2a:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2C:93:C0:BC:DE:E2:E2:05:02:E9:41:EB:A2:F2:D2:4B:A7:0B:26
X509v3 Authority Key Identifier:
keyid:92:7B:1E:56:AC:7D:07:80:2C:45:67:C4:67:94:35:15:9B:42:20:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knseVqx9B4AsRWfEZ5Q1FZtCIJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/ziyTwLze4uIFAulB66Ly0kunCyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f11dea-305e-4898-9192-365347f416c0/1/knseVqx9B4AsRWfEZ5Q1FZtCIJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.159.0/24
Signature Algorithm: sha256WithRSAEncryption
53:83:ee:d4:0f:23:ca:24:6e:d6:3d:fd:8e:d2:d5:9c:31:0d:
65:ba:7d:ec:98:e0:a1:dc:f5:dd:f9:48:41:65:3f:2c:11:cb:
bd:dd:78:15:d2:86:7d:2f:a2:5f:dd:38:e6:64:f9:52:50:9b:
73:ab:d3:9d:cd:de:25:e8:55:14:ea:36:14:86:5b:d9:b0:81:
1c:2d:65:31:4b:98:4c:de:a3:62:95:95:84:aa:19:5f:0a:b1:
36:d4:5b:80:14:fd:6e:c8:b6:c1:91:55:05:cc:e3:1f:ee:69:
09:da:f7:3f:b2:98:9a:2b:c2:71:db:ed:e9:88:9b:e6:a2:40:
48:c5:d1:32:ac:41:d3:b0:11:fb:88:91:db:ac:30:da:94:24:
41:11:f2:54:52:2c:50:68:5f:6e:f3:5f:b9:42:4f:b8:1e:5b:
ce:0e:0c:6b:45:8c:41:c8:a7:f6:c3:0e:7f:77:cf:ca:7c:f5:
ef:c7:75:bd:41:6b:29:a4:00:f1:f2:68:22:a2:fc:86:21:12:
75:70:b0:84:b3:76:38:08:e9:ed:02:ce:a7:c7:e4:4a:c7:59:
8c:0f:ff:e3:ef:ad:b9:be:20:29:98:d4:6f:71:b2:dc:2d:d5:
09:a6:5c:b2:d7:08:c1:87:64:d5:ba:fd:6b:81:a4:7d:26:40:
ad:2e:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:59 2025 by rpki-client