Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/zErWdhLXFovBgpJju3d1AhFb1Ds.roa
File: zErWdhLXFovBgpJju3d1AhFb1Ds.roa (raw, json)
Hash identifier: eKKpB4gCQQp/sCtQ16DH5ExyUddUBYH4rKUncMLb9e4=
Subject key identifier: CC:4A:D6:76:12:D7:16:8B:C1:82:92:63:BB:77:75:02:11:5B:D4:3B
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 018657724A658874D32E9624D3B51A6BD1BF
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/zErWdhLXFovBgpJju3d1AhFb1Ds.roa
Signing time: Wed 15 Feb 2023 23:39:12 +0000
ROA not before: Wed 15 Feb 2023 23:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25111
IP address blocks: 193.0.58.0/24 maxlen: 24
193.0.57.0/24 maxlen: 24
193.0.56.0/24 maxlen: 24
193.0.60.0/24 maxlen: 24
193.0.59.0/24 maxlen: 24
2001:67c:184::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:72:4a:65:88:74:d3:2e:96:24:d3:b5:1a:6b:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Feb 15 23:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4ad67612d7168bc1829263bb777502115bd43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:d8:a5:4b:95:d1:cc:5f:11:50:b2:13:69:
57:1e:bd:80:86:f4:50:fd:af:a4:49:f7:47:b9:8c:
2e:bf:74:19:cd:e9:56:23:a4:f8:44:80:24:df:00:
65:80:19:f1:f1:94:69:98:ef:fa:26:fa:70:72:2c:
d4:a6:d5:9d:6d:07:25:12:89:0f:c9:1e:05:5f:66:
87:7f:ee:08:e7:de:41:fa:8b:95:09:5a:82:e2:07:
d8:35:c4:c3:9c:87:be:14:d8:7b:54:9e:64:a6:ff:
be:d4:84:7f:7d:4e:dd:cb:5a:61:19:8f:b2:56:fd:
3c:2a:4a:5d:5a:c2:84:9c:d6:78:5c:d3:f2:ec:65:
2c:bc:7c:7c:48:fa:13:88:11:6b:af:38:01:41:1e:
e8:91:ab:d6:52:76:91:91:f6:28:f1:7a:2f:94:ff:
d3:dc:1f:91:49:66:64:dc:f0:d8:9a:5f:95:43:62:
6b:e1:fc:32:03:de:51:e2:42:a9:27:93:82:ef:da:
17:b6:e0:6f:c2:47:81:ec:8a:82:fd:00:2b:4b:b0:
5d:01:a5:3a:55:b0:19:b9:e7:b4:13:84:6e:b0:f5:
db:3d:5f:e7:13:5c:cb:04:94:75:35:4f:fd:56:2b:
dd:0c:e8:c1:ee:22:63:8a:e5:db:00:a6:34:98:5f:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:D6:76:12:D7:16:8B:C1:82:92:63:BB:77:75:02:11:5B:D4:3B
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/zErWdhLXFovBgpJju3d1AhFb1Ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.56.0-193.0.60.255
IPv6:
2001:67c:184::/48
Signature Algorithm: sha256WithRSAEncryption
b6:e5:b0:ac:db:06:6f:78:99:4a:41:69:a4:98:42:0b:62:10:
5e:0c:37:a4:28:a4:13:17:6e:89:58:67:78:1a:26:16:f9:84:
eb:f8:da:8d:20:6d:83:77:45:cf:a2:08:d0:e1:64:20:ef:0d:
85:e4:e1:53:ef:49:3d:e3:26:b0:26:7f:55:34:1c:21:94:80:
a2:18:9a:fe:88:08:df:52:b2:01:b8:7b:c8:68:e0:68:d2:d7:
ba:40:87:b1:f7:de:b6:e9:8d:eb:f2:93:83:74:ff:b9:7a:3d:
76:0c:05:cc:54:08:cd:4c:b6:3b:4d:ca:c9:a1:eb:93:33:22:
2f:e0:5f:1c:2a:19:3b:a0:c3:f5:fb:3d:51:89:1d:db:d7:75:
ad:67:1a:83:ec:21:e4:5c:4d:38:06:a8:4d:02:4c:7b:ea:3a:
10:05:1b:81:64:f1:25:40:eb:79:c0:a4:36:bd:55:f4:07:d9:
98:d3:71:b1:e2:75:4d:61:75:da:77:2e:55:dd:f2:41:ba:53:
3a:f3:63:18:71:05:d9:b1:68:8c:e3:a0:f6:25:12:5e:aa:73:
43:ac:92:8e:c6:8f:76:5d:04:a9:57:63:5c:60:67:17:7f:6e:
41:63:d9:da:34:36:0d:28:ff:47:f8:1e:98:bd:30:13:08:11:
3b:c1:7b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:33 2025 by rpki-client