Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zsm5zoPzPGCGhZiDD2rf9bNOGFY.roa
File: zsm5zoPzPGCGhZiDD2rf9bNOGFY.roa (raw, json)
Hash identifier: OcgU25Rem5+9gH2ehleWXd5XpSynChUDI59uiJBsyqQ=
Subject key identifier: CE:C9:B9:CE:83:F3:3C:60:86:85:98:83:0F:6A:DF:F5:B3:4E:18:56
Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial: 0189ACF382BCF7B11F387A72669E081054C2
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zsm5zoPzPGCGhZiDD2rf9bNOGFY.roa
Signing time: Mon 31 Jul 2023 17:16:27 +0000
ROA not before: Mon 31 Jul 2023 17:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 46.34.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ac:f3:82:bc:f7:b1:1f:38:7a:72:66:9e:08:10:54:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Validity
Not Before: Jul 31 17:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cec9b9ce83f33c60868598830f6adff5b34e1856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:27:05:02:56:eb:17:26:db:29:10:86:78:1d:
2d:f0:9d:50:2d:d2:fc:c9:1d:f7:1d:49:28:14:06:
25:b2:c8:7f:14:4a:da:18:82:8f:3f:6b:33:e0:23:
4c:90:ef:54:9d:42:4c:4f:f9:e4:04:72:94:63:b5:
0a:4f:85:14:60:2f:26:12:ce:f8:1a:e1:17:91:b0:
df:3b:34:0f:39:2d:a2:da:0f:a7:c3:59:bb:57:8a:
ff:35:81:47:34:a3:b7:f6:aa:74:eb:81:c0:70:fb:
b0:60:9f:1d:ff:43:7c:76:25:5b:ea:a2:4d:69:a3:
8a:83:9e:56:35:0c:a2:b4:02:51:86:fb:47:2e:ae:
17:22:6a:aa:c9:20:c3:e2:07:f4:95:bd:26:46:75:
d5:bd:04:8f:31:0f:2d:34:d2:32:63:62:9d:71:2c:
34:35:0a:1a:1d:bb:7b:de:f9:a5:b3:cb:04:58:94:
33:6e:d0:43:58:75:57:6d:30:08:b9:cc:11:a8:70:
08:41:c0:5a:fe:20:84:ac:ee:bf:fd:75:4e:24:d5:
57:5c:5b:72:5d:90:9c:6e:86:c8:88:c2:e7:6f:44:
8f:ae:8e:6f:aa:c2:42:69:b0:35:67:b6:60:32:6f:
33:15:d3:24:0c:35:21:46:53:52:22:a7:d6:49:eb:
6c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C9:B9:CE:83:F3:3C:60:86:85:98:83:0F:6A:DF:F5:B3:4E:18:56
X509v3 Authority Key Identifier:
keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/zsm5zoPzPGCGhZiDD2rf9bNOGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.44.0/24
Signature Algorithm: sha256WithRSAEncryption
71:21:be:a3:04:c2:b5:f3:6a:c6:b5:1b:fc:93:cb:68:fe:db:
12:47:de:4d:1d:d5:7f:38:7b:8c:21:08:40:99:8f:3b:da:23:
42:6e:a3:df:07:d4:bf:05:8e:db:06:30:60:9c:c5:73:4e:6b:
5c:51:08:03:4f:bf:de:62:e8:87:22:0b:fb:0e:73:d5:16:3f:
4d:51:19:0c:9f:c5:f1:a8:78:02:55:67:c3:54:55:ab:d3:87:
1d:df:43:a6:d9:36:dd:3b:ce:aa:74:c5:e4:10:e4:ae:8a:4b:
aa:e7:58:e1:5c:ce:55:13:1d:6a:71:75:44:a1:e4:76:73:2a:
ed:30:52:40:86:96:20:38:e1:a9:3f:b5:62:ad:80:9e:3e:1f:
12:30:3a:84:8f:0a:26:1e:26:c6:73:a4:58:e8:05:76:b9:6d:
5e:4c:fe:f2:5e:bb:27:16:d9:c2:9a:10:11:8a:f2:42:60:71:
81:ba:9b:23:7c:3c:31:0d:0e:46:c1:20:8c:be:e2:1e:4f:fa:
a6:08:65:cf:a1:34:f9:05:ce:17:7f:82:65:1e:ae:c8:f4:81:
f4:f1:67:c3:c7:3f:c2:bd:bf:7f:7c:6a:f0:91:8e:4b:c6:41:
d2:90:e9:12:33:e0:c7:32:d9:bf:60:82:27:3b:af:ed:e4:06:
5d:f6:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:13 2025 by rpki-client