Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/nz3mbf75GYWsDVzEr3u7LD6Tfoc.roa
File: nz3mbf75GYWsDVzEr3u7LD6Tfoc.roa (raw, json)
Hash identifier: eKaE7ik+ItfjAgFAvDM2yX/3ZUMLyxO5vi6n+VXQPVk=
Subject key identifier: 9F:3D:E6:6D:FE:F9:19:85:AC:0D:5C:C4:AF:7B:BB:2C:3E:93:7E:87
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 01857183220E09DF63DC7D1C6A142825851F
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/nz3mbf75GYWsDVzEr3u7LD6Tfoc.roa
Signing time: Mon 02 Jan 2023 08:04:57 +0000
ROA not before: Mon 02 Jan 2023 08:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58
IP address blocks: 93.88.72.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:22:0e:09:df:63:dc:7d:1c:6a:14:28:25:85:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 2 08:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f3de66dfef91985ac0d5cc4af7bbb2c3e937e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:5a:c5:58:fd:02:02:9a:5c:ea:0f:2d:ad:
0d:97:6c:4b:08:56:26:18:27:43:8c:35:14:17:21:
d6:ef:6d:66:b2:4a:ba:5c:de:e7:c4:d5:40:8c:ad:
df:3e:cc:49:bb:64:b1:c6:50:13:84:34:ce:20:64:
ed:3d:1b:40:cf:75:47:f1:f3:47:7b:6e:28:f2:91:
e4:a3:cb:ae:5d:8d:d7:63:67:93:16:12:75:24:f1:
d8:05:7b:62:0d:3a:af:13:90:bb:ce:22:d6:dd:7d:
4b:ee:90:14:2d:26:19:d3:55:fa:10:11:d8:f0:e9:
07:33:73:5f:18:d8:a8:c3:05:63:aa:fb:00:dd:7b:
3d:d6:af:70:e6:1c:97:9b:1e:85:06:47:ec:53:8d:
4f:b2:af:19:8b:4a:38:67:26:6a:46:d1:a7:8c:76:
88:e2:95:67:fd:0a:77:06:ab:c9:60:63:45:6f:cc:
b8:c0:6a:5a:cf:ce:d7:5e:9a:1e:8e:25:1e:52:d4:
24:40:4d:b8:51:17:bd:be:42:1f:f7:43:de:3e:c1:
a2:b5:63:4e:ad:69:76:f6:1a:01:e0:03:0a:53:da:
4e:63:9c:bf:a6:e7:f1:cf:f9:2b:f4:77:1c:28:8a:
2d:50:68:e6:e4:b9:54:f8:f0:c5:00:60:af:dd:62:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3D:E6:6D:FE:F9:19:85:AC:0D:5C:C4:AF:7B:BB:2C:3E:93:7E:87
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/nz3mbf75GYWsDVzEr3u7LD6Tfoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.72.0/23
Signature Algorithm: sha256WithRSAEncryption
41:c7:fb:51:b3:69:30:ef:25:ac:8e:18:15:52:c6:f1:d4:42:
29:71:26:3c:5a:ea:9d:c9:c8:63:b1:66:a7:97:c0:9f:51:cc:
55:8b:ca:97:5f:7f:81:17:b3:0f:bc:ab:f0:f4:a5:30:4d:94:
9d:e8:dd:23:8b:f4:e5:0e:bb:4c:1a:58:b7:34:84:ef:b8:14:
7a:37:71:ca:05:ff:ae:2d:0c:b8:3d:cc:82:6d:32:1f:91:44:
38:cf:f7:5d:1d:cf:69:e9:5e:5d:8d:18:b4:d0:4b:6e:37:08:
c3:6d:2d:d2:cc:d6:65:95:10:24:54:09:ea:d2:6f:a4:5e:ba:
89:44:f5:ca:43:96:6b:49:6e:be:9b:85:b8:17:c5:bc:d7:22:
8f:eb:97:b5:8f:36:b1:38:2c:c6:da:99:b3:1f:4b:ae:2c:65:
85:3b:52:19:e5:40:06:e1:95:e6:cb:c4:ab:4d:59:0a:0f:b9:
a3:f7:8c:77:45:27:63:cc:1c:29:71:27:d9:45:c6:ca:31:0f:
ed:dd:72:6f:e7:af:70:45:67:47:ef:56:33:4f:49:7b:14:b0:
b0:10:7f:f7:7a:63:e2:65:a3:1d:be:94:5f:b7:a4:a0:b7:b8:
e8:dd:29:38:26:cb:9f:50:12:f2:b5:39:8b:c7:2b:cb:55:68:
fb:cf:a9:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxgyIOCd9j3H0cahQoJYUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0
YjUxMjkwHhcNMjMwMTAyMDgwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjNkZTY2ZGZlZjkxOTg1YWMwZDVjYzRhZjdiYmIyYzNlOTM3ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwZaxVj9AgKaXOoPLa0Nl2xLCFYm
GCdDjDUUFyHW721mskq6XN7nxNVAjK3fPsxJu2SxxlAThDTOIGTtPRtAz3VH8fNH
e24o8pHko8uuXY3XY2eTFhJ1JPHYBXtiDTqvE5C7ziLW3X1L7pAULSYZ01X6EBHY
8OkHM3NfGNiowwVjqvsA3Xs91q9w5hyXmx6FBkfsU41Psq8Zi0o4ZyZqRtGnjHaI
4pVn/Qp3BqvJYGNFb8y4wGpaz87XXpoejiUeUtQkQE24URe9vkIf90PePsGitWNO
rWl29hoB4AMKU9pOY5y/pufxz/kr9HccKIotUGjm5LlU+PDFAGCv3WKEOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ895m3++RmFrA1cxK97uyw+k36HMB8GA1UdIwQY
MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt
YmYzYjIxYTI3MGYyLzEvbnozbWJmNzVHWVdzRFZ6RXIzdTdMRDZUZm9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy
LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXVhIMA0G
CSqGSIb3DQEBCwUAA4IBAQBBx/tRs2kw7yWsjhgVUsbx1EIpcSY8WuqdychjsWan
l8CfUcxVi8qXX3+BF7MPvKvw9KUwTZSd6N0ji/TlDrtMGli3NITvuBR6N3HKBf+u
LQy4PcyCbTIfkUQ4z/ddHc9p6V5djRi00EtuNwjDbS3SzNZllRAkVAnq0m+kXrqJ
RPXKQ5ZrSW6+m4W4F8W81yKP65e1jzaxOCzG2pmzH0uuLGWFO1IZ5UAG4ZXmy8Sr
TVkKD7mj94x3RSdjzBwpcSfZRcbKMQ/t3XJv569wRWdH71YzT0l7FLCwEH/3emPi
ZaMdvpRft6Sgt7jo3Sk4JsufUBLytTmLxyvLVWj7z6nX
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:21 2025 by rpki-client