Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/Z115MWIro67GNZDsUSDXdsed8wo.roa
File: Z115MWIro67GNZDsUSDXdsed8wo.roa (raw, json)
Hash identifier: UXlczy32k21oDS8r2GixGmVmv4B9eIMgzSpiafgwfac=
Subject key identifier: 67:5D:79:31:62:2B:A3:AE:C6:35:90:EC:51:20:D7:76:C7:9D:F3:0A
Certificate issuer: /CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Certificate serial: 01856F79A4D53ED263B056DB1944A45BF2C4
Authority key identifier: F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/Z115MWIro67GNZDsUSDXdsed8wo.roa
Signing time: Sun 01 Jan 2023 22:35:21 +0000
ROA not before: Sun 01 Jan 2023 22:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63473
IP address blocks: 109.205.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a4:d5:3e:d2:63:b0:56:db:19:44:a4:5b:f2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b50c7e81d8cf264d1209b6ad5a3ccb82c16fdd
Validity
Not Before: Jan 1 22:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675d7931622ba3aec63590ec5120d776c79df30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:3b:92:58:f8:19:19:52:d9:32:75:a3:98:
b6:7f:36:39:49:91:5f:75:42:6c:75:59:b4:f0:58:
9f:f6:cb:6c:f0:24:24:6a:ef:11:0d:d7:03:b7:2a:
b3:f0:47:b5:26:30:53:da:ae:23:1d:0c:aa:f8:6a:
63:57:96:c6:bb:f8:30:52:c3:a9:13:3f:66:23:50:
2d:e2:ff:76:71:37:d7:05:b1:23:7b:0e:9c:76:30:
1a:28:f4:55:88:ae:4f:1b:bf:9d:38:01:8a:0a:8b:
a9:90:ed:7e:e8:b0:78:15:a9:1b:4d:fc:52:37:1a:
2a:5a:c0:b6:c2:b0:d2:19:ae:90:06:40:5a:04:e5:
80:e9:19:ba:67:a7:5b:91:52:6d:a4:6a:fa:9a:32:
a7:6f:b9:f6:11:17:c8:0a:c7:bc:37:1f:2c:28:d0:
24:28:43:fb:03:0d:d3:2d:46:0c:36:2d:3d:94:4f:
ab:85:14:cc:2b:dc:e5:45:5a:ef:b9:39:05:cf:ee:
a2:05:f1:0c:f1:4c:46:12:67:c6:e4:a1:44:93:6a:
8d:cb:c6:08:f7:60:ef:f6:47:67:98:db:41:64:f3:
e8:0a:ef:c3:82:b1:9c:22:01:d8:e3:8a:ac:65:4f:
07:49:6f:46:4a:42:ce:bd:e4:d8:9b:fe:70:1c:e0:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:79:31:62:2B:A3:AE:C6:35:90:EC:51:20:D7:76:C7:9D:F3:0A
X509v3 Authority Key Identifier:
keyid:F7:B5:0C:7E:81:D8:CF:26:4D:12:09:B6:AD:5A:3C:CB:82:C1:6F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97UMfoHYzyZNEgm2rVo8y4LBb90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/Z115MWIro67GNZDsUSDXdsed8wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/97UMfoHYzyZNEgm2rVo8y4LBb90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.61.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b2:66:db:2c:7b:0c:00:69:bd:fd:c2:67:b3:67:c6:76:26:
b4:a5:7d:d6:9a:15:89:ec:9b:5c:a3:1b:c4:ec:cf:05:88:fe:
7c:8c:26:b5:7f:4f:bf:29:8f:9c:91:d2:eb:c7:20:cf:8d:7b:
da:80:d0:51:87:43:0d:fc:7e:ef:15:bc:df:0d:f7:fc:67:53:
06:dc:39:34:8f:de:c0:e4:84:25:06:83:04:cd:f1:f9:ae:a9:
9d:20:f2:b3:28:9d:70:a6:89:5d:1b:9b:7d:28:0c:5f:23:ff:
db:ff:ed:db:b9:34:85:43:e2:2f:ed:fb:18:73:93:01:13:01:
d7:75:55:e2:e5:e1:0d:32:0a:53:73:14:b2:03:dd:eb:d9:69:
77:94:85:1d:1c:75:5f:3f:cf:12:5d:67:ee:23:3c:ed:8f:61:
62:19:cf:4c:8a:36:24:1f:c5:29:43:bf:03:fb:1e:a4:15:24:
86:bc:6f:a6:61:cb:17:5f:be:d0:a6:fe:64:88:bf:3e:fb:37:
62:8a:a0:81:b7:7c:d2:37:ad:9a:ec:60:46:9d:47:a6:7e:72:
b1:90:4e:18:48:87:a9:75:2c:fc:46:3f:7e:bd:db:de:46:97:
7e:9c:a5:33:a7:43:92:42:89:7f:8c:cd:3e:80:a7:3d:19:02:
56:7a:37:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:47 2025 by rpki-client