Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/ZJTl1C2JkmnMyF7T3mVNfld3Wac.roa
File: ZJTl1C2JkmnMyF7T3mVNfld3Wac.roa (raw, json)
Hash identifier: pl+dj0nmy408Htk+ohtfvxccvr2y5LFSX2VRDRZtyFQ=
Subject key identifier: 64:94:E5:D4:2D:89:92:69:CC:C8:5E:D3:DE:65:4D:7E:57:77:59:A7
Certificate issuer: /CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Certificate serial: 039CFBA5
Authority key identifier: 83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/ZJTl1C2JkmnMyF7T3mVNfld3Wac.roa
Signing time: Tue 12 Apr 2022 11:38:15 +0000
ROA not before: Tue 12 Apr 2022 11:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16167
IP address blocks: 193.41.230.0/24 maxlen: 24
185.243.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60619685 (0x39cfba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83d829263b3c5f63968037f9e863fd0fd01e7869
Validity
Not Before: Apr 12 11:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6494e5d42d899269ccc85ed3de654d7e577759a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:87:c2:fc:8a:4e:91:fe:b3:49:5a:18:aa:
f2:b0:cb:42:f0:c6:2a:70:af:1d:ec:2a:c1:55:98:
5c:89:65:87:f6:36:ee:d0:69:43:ea:00:d4:b0:d6:
42:5d:18:57:02:92:50:8a:7f:a0:16:15:7a:e7:88:
c9:98:67:a1:ab:63:5c:d0:11:93:ca:cb:90:ce:3d:
a7:eb:bc:1b:2d:bd:56:a8:52:27:02:5c:d4:23:3f:
36:c5:a2:d1:d6:9c:6f:08:22:2f:1b:d1:97:36:27:
e2:4f:29:00:8e:03:70:ae:e3:97:5a:d5:7b:5a:c5:
e8:fd:56:bc:0a:4b:7a:45:9b:aa:4e:27:4a:99:ce:
0f:86:92:6e:09:1c:87:1b:52:5d:3c:84:f2:9c:9e:
90:bc:b4:bd:85:14:1e:04:8d:7a:71:ca:80:18:21:
5e:2f:a5:eb:d1:08:90:64:4a:40:17:d9:2c:3c:8d:
83:46:36:c2:81:d4:63:39:e9:7c:6e:8c:f9:f8:8c:
c3:eb:95:d0:69:ef:29:fd:70:19:56:0d:84:82:9a:
b1:20:6b:71:6b:c7:09:6a:93:18:5e:3f:01:51:47:
70:0c:bc:b2:aa:33:d5:85:1b:86:46:95:c5:b8:e8:
c3:fb:8a:1a:73:f1:a3:b0:4e:f1:d5:d5:95:52:17:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:94:E5:D4:2D:89:92:69:CC:C8:5E:D3:DE:65:4D:7E:57:77:59:A7
X509v3 Authority Key Identifier:
keyid:83:D8:29:26:3B:3C:5F:63:96:80:37:F9:E8:63:FD:0F:D0:1E:78:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9gpJjs8X2OWgDf56GP9D9AeeGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/ZJTl1C2JkmnMyF7T3mVNfld3Wac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a36a22-4955-4090-97d6-3c34a8c28ca1/1/g9gpJjs8X2OWgDf56GP9D9AeeGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.0.0/24
193.41.230.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d7:7c:43:89:b7:99:5f:30:e7:a5:b3:1c:5e:46:7f:e5:0d:
73:44:07:a0:47:83:8f:15:29:d3:e2:67:87:49:d5:5c:5b:96:
f3:da:59:33:c4:0d:0c:ba:55:85:4b:9c:eb:08:ba:eb:6c:d4:
b6:10:ca:6d:03:94:1b:31:e4:81:2c:26:e1:64:44:b1:97:43:
d4:63:2d:57:5a:09:69:af:22:33:5b:9b:a5:17:d0:86:34:88:
54:d4:16:99:bc:60:56:ce:47:21:56:a6:9a:ee:d6:a4:28:00:
96:bc:cd:bb:d5:a2:27:de:bd:d3:6f:39:94:03:b9:20:f3:98:
78:d1:a4:0c:97:33:5d:97:83:d3:5a:75:a0:27:f3:7b:df:3e:
c4:6d:81:70:05:9a:7c:4c:39:d3:b4:b5:b9:c1:20:93:ee:da:
27:53:40:f3:78:eb:f1:0e:01:00:38:cd:8f:29:54:04:04:1e:
fb:2b:d7:50:01:49:6f:6e:be:53:98:0a:99:15:ad:06:ec:3b:
1b:42:cb:5b:f5:f8:87:10:b9:e7:07:be:92:61:fa:0e:4e:ce:
93:1b:6a:71:1a:ca:2f:2d:f4:f4:b5:2d:f1:a5:d6:67:7e:14:
dc:1d:08:3d:5e:96:ab:92:af:a6:9b:c0:94:ad:83:cc:b6:5e:
65:7f:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:01 2025 by rpki-client