Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/ZvKezO7Xmtm2kBPnT2Z6RM2Bvws.roa
File: ZvKezO7Xmtm2kBPnT2Z6RM2Bvws.roa (raw, json)
Hash identifier: iwxhjDyS5vBFnSgWbwzGLvXmC0dIoJBTCFTBEuLPw5g=
Subject key identifier: 66:F2:9E:CC:EE:D7:9A:D9:B6:90:13:E7:4F:66:7A:44:CD:81:BF:0B
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 01856F1DA1AF59DA2D61385F2BF316CC99FB
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/ZvKezO7Xmtm2kBPnT2Z6RM2Bvws.roa
Signing time: Sun 01 Jan 2023 20:54:50 +0000
ROA not before: Sun 01 Jan 2023 20:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198595
IP address blocks: 185.202.127.0/24 maxlen: 24
2001:67c:104::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:a1:af:59:da:2d:61:38:5f:2b:f3:16:cc:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Jan 1 20:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66f29ecceed79ad9b69013e74f667a44cd81bf0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:b8:0c:03:96:ec:1a:5d:62:ce:09:eb:d8:
0c:68:02:12:f4:24:0d:e1:05:b7:43:c0:37:c9:ba:
67:05:91:57:c6:1f:1b:3b:29:34:57:33:00:7c:39:
6a:b8:8f:9c:a6:d5:7d:4a:fa:44:95:23:b9:40:5f:
0d:ee:95:15:94:db:ce:78:62:cd:bf:23:12:a8:09:
d5:f9:52:13:9b:00:42:a7:64:55:ba:35:98:3c:98:
a3:cb:90:38:4a:91:a2:09:ec:13:a6:ea:5e:a8:38:
61:fd:7a:31:bb:7b:50:51:94:e8:1e:b7:5e:0a:00:
87:b4:d4:39:d3:21:96:29:e7:64:60:ff:ba:95:21:
4a:19:be:31:49:51:1e:19:92:03:83:72:d5:74:7a:
6b:9b:27:88:6a:2c:95:1f:33:50:93:f3:34:70:d4:
4b:de:42:29:2c:2f:f2:ff:27:b0:38:03:fd:ec:0d:
c7:3e:66:0a:35:f4:19:14:44:a4:be:b3:c9:63:b6:
37:97:d7:39:64:34:57:2b:7b:32:b5:5e:ed:03:7c:
a0:bb:46:d6:b6:5e:33:72:a5:3f:90:12:3f:03:7c:
74:12:91:00:cf:e0:10:cf:4c:d0:09:d5:b8:72:40:
31:67:86:2d:4e:84:b6:71:99:d0:ce:71:c3:c5:2a:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:9E:CC:EE:D7:9A:D9:B6:90:13:E7:4F:66:7A:44:CD:81:BF:0B
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/ZvKezO7Xmtm2kBPnT2Z6RM2Bvws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.127.0/24
IPv6:
2001:67c:104::/48
Signature Algorithm: sha256WithRSAEncryption
44:e6:ce:c3:2c:be:d3:c9:4c:92:99:bf:9c:90:ea:9a:25:0f:
a5:68:74:56:1c:de:c3:42:73:e8:92:d7:c3:5d:79:ee:78:16:
9c:9b:c6:b9:5f:ce:ce:8e:5a:8a:29:b9:3c:3c:6b:26:9b:f1:
a8:e8:93:39:8d:34:7f:72:42:bc:67:4d:56:7d:36:2e:45:ef:
b8:98:89:5a:ab:45:fd:eb:f7:db:dd:41:29:a2:42:f0:42:c9:
ef:ab:54:18:8a:41:f2:20:fd:4a:f8:d3:4d:0a:b4:c4:fd:09:
53:b9:03:79:18:59:f7:29:34:a4:39:10:39:98:69:30:17:65:
98:f1:a5:61:8c:8e:4c:0a:19:65:5d:ea:a8:a0:98:86:f7:86:
3f:a6:9a:3f:21:da:0a:be:65:67:8c:3c:4f:d4:30:4b:ff:41:
fe:bb:ff:ef:fa:5c:8b:d1:ce:bd:eb:9b:fd:4a:f1:31:5c:4f:
7e:7f:09:f6:91:61:8b:42:ad:a9:25:a5:2c:9f:c4:35:16:0b:
f3:ed:46:6c:e1:af:83:88:61:40:a1:8a:d8:6c:09:76:a2:21:
fa:32:36:92:a6:7d:1c:9e:d0:eb:f5:0a:c9:a8:d8:97:49:09:
40:66:85:7c:e4:05:33:a1:d1:92:e7:89:c8:38:65:0a:9f:5f:
b5:cb:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:33 2025 by rpki-client