Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/zbh_d32XP2ijPwFZKJ0XFyYzh_Y.roa
File: zbh_d32XP2ijPwFZKJ0XFyYzh_Y.roa (raw, json)
Hash identifier: uX4t24zyswq24KV9eKE3pwTnNQaX72Y0RvKBPJ68ar8=
Subject key identifier: CD:B8:7F:77:7D:97:3F:68:A3:3F:01:59:28:9D:17:17:26:33:87:F6
Certificate issuer: /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial: 0E939499
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/zbh_d32XP2ijPwFZKJ0XFyYzh_Y.roa
Signing time: Sat 01 Jan 2022 05:54:09 +0000
ROA not before: Sat 01 Jan 2022 05:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49283
IP address blocks: 2001:67c:27b0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 244552857 (0xe939499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Validity
Not Before: Jan 1 05:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdb87f777d973f68a33f0159289d1717263387f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:91:35:ed:c2:d1:1e:0f:a6:97:9a:61:c5:
49:42:96:39:7f:8a:e4:9a:42:10:e8:6e:81:05:17:
05:47:fb:df:c4:b4:77:52:b1:21:94:98:d2:12:15:
05:64:6c:bc:08:f4:f3:85:72:1e:bd:ce:ef:9e:b2:
b6:d9:3b:18:24:8c:2e:eb:60:75:eb:06:93:ac:aa:
4b:1d:dd:48:bf:b2:a8:ed:1c:2c:9e:e4:4e:22:00:
ee:7e:c2:ca:e3:03:a7:e1:11:bf:4c:fd:a4:31:b6:
f1:ec:d2:b3:5e:61:71:88:c0:fc:77:2e:9a:57:68:
35:e5:51:99:28:23:88:ec:db:c0:6a:5b:03:ca:52:
89:2d:23:03:4c:6c:76:0f:75:60:e4:2b:9e:6c:b1:
50:47:d8:03:41:f4:74:98:63:08:d7:9b:17:e8:fa:
47:d9:e8:8b:1c:a8:62:2d:62:67:9f:0b:1f:bc:46:
ad:cf:8a:5d:c2:36:94:4d:11:8d:db:54:41:c7:02:
99:c7:9c:68:e0:e6:33:b2:af:83:9c:80:c2:27:47:
b1:48:e8:44:35:a1:0b:9a:b3:91:46:5e:5a:92:76:
5c:83:e9:b6:aa:a8:43:27:fa:c0:b0:13:a8:a7:f4:
3e:d7:84:7a:e5:6a:be:df:bf:72:ac:35:59:95:89:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:7F:77:7D:97:3F:68:A3:3F:01:59:28:9D:17:17:26:33:87:F6
X509v3 Authority Key Identifier:
keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/zbh_d32XP2ijPwFZKJ0XFyYzh_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:27b0::/48
Signature Algorithm: sha256WithRSAEncryption
97:78:ea:b6:bc:29:a1:5f:49:41:78:c4:8e:e0:09:e9:23:f0:
50:04:9c:68:4a:67:fc:af:24:49:cc:ad:1c:85:49:54:57:5b:
ea:8c:57:a3:b0:3e:87:3b:0c:0e:54:48:ca:04:46:b7:14:ef:
b9:cc:2b:b9:60:7f:00:6e:81:8a:64:3f:12:bf:25:56:15:c8:
d9:e3:ea:de:7d:ad:15:56:f8:17:6e:64:e6:8a:71:58:10:2f:
64:c5:a7:3f:c4:c3:46:5e:dd:7c:e3:9b:01:bb:9d:74:d7:02:
3f:ae:1c:fd:31:db:b7:a7:54:68:1e:1e:5e:17:19:4a:e7:e2:
18:dc:58:ba:34:80:1c:ab:c5:7a:f1:d2:f6:ae:7f:3a:95:6c:
04:f2:a0:c0:c7:a0:99:a4:bb:da:60:e5:ee:2a:89:80:5a:0a:
41:34:dc:b4:ed:cd:84:c4:33:f8:16:e3:10:77:91:ed:b5:54:
80:7e:4d:61:1b:2a:d4:e2:39:e0:82:23:1a:eb:03:b2:b3:23:
80:13:d6:8f:f4:6f:8a:6b:fb:9d:e9:bc:6b:2f:5e:03:11:0e:
1e:5e:19:11:41:4d:17:85:c4:9b:e7:e3:ab:9c:a2:91:bf:cc:
54:5c:2f:b7:e4:0e:83:db:e5:f8:d0:c4:08:8b:4b:e1:59:7b:
fa:d3:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:40 2025 by rpki-client