Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/ZfjxnghSwdrTvwBgOIUUywQllzs.roa
File: ZfjxnghSwdrTvwBgOIUUywQllzs.roa (raw, json)
Hash identifier: EYuUreYZTikYoQA6eaYeVoXsLZDWRE20IrgPFb7umy0=
Subject key identifier: 65:F8:F1:9E:08:52:C1:DA:D3:BF:00:60:38:85:14:CB:04:25:97:3B
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 02A57885
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/ZfjxnghSwdrTvwBgOIUUywQllzs.roa
Signing time: Sat 01 Jan 2022 13:01:16 +0000
ROA not before: Sat 01 Jan 2022 13:01:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133542
IP address blocks: 150.129.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44398725 (0x2a57885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jan 1 13:01:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65f8f19e0852c1dad3bf0060388514cb0425973b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:e6:58:93:27:d7:88:99:4e:e4:4f:4d:b3:
c7:fc:32:c1:fc:1b:a7:af:57:df:87:03:e7:0b:9f:
78:6d:99:00:43:27:ea:93:d6:03:d3:eb:d5:5f:cb:
b5:25:a0:92:72:1f:de:75:8e:1f:f5:52:7f:38:ad:
17:07:bd:bc:e3:82:66:15:af:37:14:e4:22:09:ea:
6c:e0:6b:a5:e3:31:1f:d2:0b:a1:c8:95:e0:30:ef:
71:33:73:16:2d:fc:bd:fc:d0:98:be:d2:39:0a:08:
02:78:94:a4:39:49:86:11:ad:9c:9b:7b:fd:b6:fc:
41:83:a2:28:5d:8f:96:c2:cc:b3:d7:74:1a:57:d6:
77:03:d8:26:11:d0:6b:0b:8b:32:cf:35:e7:33:92:
8d:bb:6b:cf:bc:36:77:6c:eb:7a:90:ac:8c:33:f9:
8c:14:bf:4e:63:c4:d3:fb:4b:c9:48:23:b4:70:e3:
f8:cd:78:76:88:80:e4:8d:6b:91:1c:28:4c:91:ab:
4d:b6:dc:cc:3d:d4:ea:c7:a8:f0:c8:64:da:f8:5b:
b3:e8:c6:c6:36:d0:4d:e6:09:42:b1:99:9c:90:06:
8b:8a:92:53:58:ce:f9:6e:6f:19:61:cf:55:32:48:
80:b9:ac:16:3e:ef:89:df:15:83:2c:09:b7:d2:b4:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:F1:9E:08:52:C1:DA:D3:BF:00:60:38:85:14:CB:04:25:97:3B
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/ZfjxnghSwdrTvwBgOIUUywQllzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.129.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:1c:18:b5:66:86:74:94:a4:42:37:e4:67:65:f1:6a:17:1c:
09:0d:86:d4:6e:f9:65:70:b0:d6:fa:cb:30:9e:de:33:44:09:
b8:a3:ef:a2:5b:50:0f:7f:51:2a:06:01:fd:87:f7:cb:19:dc:
02:bb:85:b3:3b:1b:eb:e0:85:b5:de:5f:ad:b9:a2:28:cb:90:
45:49:70:a1:09:f5:1b:1b:42:06:84:50:bd:db:4d:e7:7c:5b:
66:0f:fa:0b:8d:a2:a1:ab:6e:6d:58:6c:41:48:79:4f:09:12:
5c:76:85:9e:d7:e1:de:4b:14:cc:64:73:3e:0c:46:8e:d0:da:
e9:82:72:58:76:a3:d4:37:47:c8:c8:8d:af:a7:cf:61:68:c5:
2a:7d:27:e9:2f:18:5c:67:b2:ad:2e:bf:cc:b2:c4:5d:06:24:
32:e3:60:e2:92:eb:1a:61:77:2d:bf:1d:09:0d:23:56:b9:00:
31:ee:19:46:bb:a5:35:1b:3f:67:94:55:ff:07:1b:fd:b2:de:
d6:69:f4:47:03:fd:f2:c9:82:3f:d8:69:9d:8b:f6:d7:99:ec:
17:d3:73:fc:6b:2f:71:31:54:a0:48:71:c6:6f:29:2c:4d:b6:
62:dc:be:45:18:69:c1:3a:e9:fd:95:7b:f7:de:70:5a:96:49:
b7:78:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:32:04 2025 by rpki-client