Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/zAvCFH0FMwX7ndZUAJ7gVx7Wsi0.roa
File: zAvCFH0FMwX7ndZUAJ7gVx7Wsi0.roa (raw, json)
Hash identifier: 7zzv1x6+34jhUhTIRM75ODT3DdtlkMGhGx4vWsVrgi4=
Subject key identifier: CC:0B:C2:14:7D:05:33:05:FB:9D:D6:54:00:9E:E0:57:1E:D6:B2:2D
Certificate issuer: /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial: 02DD6C
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/zAvCFH0FMwX7ndZUAJ7gVx7Wsi0.roa
Signing time: Fri 28 Jan 2022 21:14:33 +0000
ROA not before: Fri 28 Jan 2022 21:14:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 217.8.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187756 (0x2dd6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Validity
Not Before: Jan 28 21:14:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0bc2147d053305fb9dd654009ee0571ed6b22d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:70:c2:56:46:70:48:13:a4:20:64:57:a4:6a:
af:f0:1a:6b:27:ef:87:66:4f:5a:ab:2f:f0:b8:dc:
c3:9d:ab:f7:91:f8:6d:4e:ac:1a:08:67:8a:19:1f:
8e:ee:cf:5d:bf:85:cf:18:d9:52:06:46:4a:0e:41:
08:39:05:10:ac:fd:ea:a6:8c:ef:d7:23:0e:a8:de:
9b:15:25:02:35:db:6a:71:30:15:b2:ca:15:2f:e9:
7c:02:1c:e9:a3:01:8d:08:16:ce:ef:b8:d3:68:ce:
4e:c8:89:fb:f5:93:f7:cf:2c:ef:dd:19:2d:0d:c3:
a9:9d:fa:0f:ab:0b:d9:92:a2:4c:e0:f2:f8:f7:32:
0d:c2:fd:2c:28:50:fa:7e:67:25:ea:0a:5b:fb:bc:
17:22:93:13:b0:5d:4e:e5:e5:7b:e9:7e:8b:6d:44:
de:51:6d:3d:31:bc:36:65:8c:cb:35:2e:34:b8:ea:
00:30:fb:19:c1:f1:0e:17:fd:53:86:df:65:0a:cb:
24:0f:f8:33:b6:7b:13:7b:71:69:8e:2a:77:e7:69:
c8:f7:de:1c:65:27:2d:e6:d9:da:13:2f:85:24:a1:
74:f5:d6:27:47:68:df:39:e5:94:17:a7:e5:63:ee:
43:a3:07:0a:d7:9f:e5:30:6e:95:14:ac:17:ef:3f:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:C2:14:7D:05:33:05:FB:9D:D6:54:00:9E:E0:57:1E:D6:B2:2D
X509v3 Authority Key Identifier:
keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/zAvCFH0FMwX7ndZUAJ7gVx7Wsi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.118.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:13:eb:79:05:8c:29:f8:03:6a:59:50:68:b5:07:8a:87:47:
ff:2a:62:99:8f:17:37:b6:9d:ca:f9:4c:26:6b:18:34:28:d9:
be:6c:7e:6b:52:9a:d5:e9:ed:df:f8:e5:da:32:f6:5f:71:08:
b4:3f:45:f0:31:cb:e4:cb:e5:9b:fc:77:10:77:0f:99:19:b9:
92:e5:8b:f0:ce:d7:34:d9:fd:29:7e:15:78:70:1b:a6:d3:58:
ce:b0:a8:03:0b:29:af:e0:fa:17:20:1e:b4:e8:63:22:5d:e3:
26:ef:dc:70:c0:3c:cf:33:8b:df:e7:62:c7:d7:62:13:c1:3d:
d6:f6:0f:21:54:2e:d2:5b:f5:30:7c:88:89:a7:35:26:9a:08:
13:fa:22:7e:18:fd:2f:23:3b:07:cb:20:56:42:f5:94:c9:a2:
6b:fc:dc:15:04:6e:15:e0:ba:49:b0:a0:3f:b3:45:b4:b6:99:
04:7d:17:6a:f9:d0:f8:d1:e0:72:15:16:38:2f:b1:fd:e2:99:
b6:4d:fa:10:c2:fd:5d:29:b7:1d:bf:96:a8:cb:f9:cc:96:4e:
fe:5f:e8:27:0a:76:59:6b:60:fc:0a:62:08:c4:3e:a3:90:68:
89:bc:7c:f9:21:9d:a9:82:b9:e7:6b:a1:7b:bd:92:f1:c7:a5:
c0:04:2f:3f
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAt1sMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
NDdlZTFmMTdjOTg3ZGViYjJjMDIwZDhiNWYyZDhiZGFkYmViNzcwHhcNMjIwMTI4
MjExNDMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjYzBiYzIxNDdkMDUz
MzA1ZmI5ZGQ2NTQwMDllZTA1NzFlZDZiMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0XDCVkZwSBOkIGRXpGqv8BprJ++HZk9aqy/wuNzDnav3kfht
TqwaCGeKGR+O7s9dv4XPGNlSBkZKDkEIOQUQrP3qpozv1yMOqN6bFSUCNdtqcTAV
ssoVL+l8AhzpowGNCBbO77jTaM5OyIn79ZP3zyzv3RktDcOpnfoPqwvZkqJM4PL4
9zINwv0sKFD6fmcl6gpb+7wXIpMTsF1O5eV76X6LbUTeUW09Mbw2ZYzLNS40uOoA
MPsZwfEOF/1Tht9lCsskD/gztnsTe3Fpjip352nI994cZSct5tnaEy+FJKF09dYn
R2jfOeWUF6flY+5DowcK15/lMG6VFKwX7z/XOwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMwLwhR9BTMF+53WVACe4Fce1rItMB8GA1UdIwQYMBaAFJtH7h8XyYfeuywC
DYtfLYva2+t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2FhLzEv
ekF2Q0ZIMEZNd1g3bmRaVUFKN2dWeDdXc2kwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85
YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2FhLzEvbTBmdUh4ZkpoOTY3
TEFJTmkxOHRpOXJiNjNjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Qh2MA0GCSqGSIb3DQEBCwUAA4IB
AQBME+t5BYwp+ANqWVBotQeKh0f/KmKZjxc3tp3K+Uwmaxg0KNm+bH5rUprV6e3f
+OXaMvZfcQi0P0XwMcvky+Wb/HcQdw+ZGbmS5Yvwztc02f0pfhV4cBum01jOsKgD
Cymv4PoXIB606GMiXeMm79xwwDzPM4vf52LH12ITwT3W9g8hVC7SW/UwfIiJpzUm
mggT+iJ+GP0vIzsHyyBWQvWUyaJr/NwVBG4V4LpJsKA/s0W0tpkEfRdq+dD40eBy
FRY4L7H94pm2TfoQwv1dKbcdv5aoy/nMlk7+X+gnCnZZa2D8CmIIxD6jkGiJvHz5
IZ2pgrnna6F7vZLxx6XABC8/
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:32 2025 by rpki-client