Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/ZP8hvT9IhpDXKNO3FT7EO_2gxzA.roa
File: ZP8hvT9IhpDXKNO3FT7EO_2gxzA.roa (raw, json)
Hash identifier: CsvFuOHijKNo4egzyAO3KrO/FLMThzVCeHJKBg7NbJ0=
Subject key identifier: 64:FF:21:BD:3F:48:86:90:D7:28:D3:B7:15:3E:C4:3B:FD:A0:C7:30
Certificate issuer: /CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Certificate serial: 01856CC15B9940651903C23FFE8330D09E25
Authority key identifier: 7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/ZP8hvT9IhpDXKNO3FT7EO_2gxzA.roa
Signing time: Sun 01 Jan 2023 09:54:49 +0000
ROA not before: Sun 01 Jan 2023 09:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39071
IP address blocks: 195.66.66.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:5b:99:40:65:19:03:c2:3f:fe:83:30:d0:9e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5d4828dc34199ef717cc03a48a0074c1443b8
Validity
Not Before: Jan 1 09:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64ff21bd3f488690d728d3b7153ec43bfda0c730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:fb:be:9a:35:d5:15:e6:bc:97:5c:99:24:
c7:97:a1:d0:b2:9f:c0:f0:d5:34:9a:ff:d7:03:ed:
4b:88:bc:7c:c2:d1:44:25:58:04:39:c0:dc:d0:45:
1f:9d:d9:d2:e7:35:59:b4:3e:13:f5:76:1d:8b:20:
c9:2a:97:d1:a8:0e:7c:9f:b4:ad:25:5f:35:0c:a3:
5e:13:27:73:ef:ad:a8:db:97:cb:64:69:84:16:78:
55:4a:3e:fe:65:b2:81:e7:5a:c5:de:0c:64:12:63:
ce:3c:a0:9f:c3:bf:3a:ab:9e:33:23:25:dc:0e:0b:
0d:94:86:4d:bc:f7:e9:b4:62:ba:44:95:93:18:d1:
f2:22:59:be:84:fd:65:b2:73:53:c2:aa:01:68:de:
1a:cd:5c:60:56:71:14:bc:c3:d0:14:af:3b:66:d1:
88:13:8e:62:08:bb:bd:2e:db:e3:2b:ac:d9:c1:0f:
75:9a:1a:33:ab:26:d8:20:bb:d2:63:1b:69:3a:87:
93:0f:39:12:8d:e8:e7:30:12:13:40:47:00:be:3f:
d3:0a:a5:bb:6f:a7:b5:d1:b9:34:f3:4b:2e:31:72:
0b:4b:81:b5:10:d3:2f:78:08:3d:83:83:15:0a:e7:
78:86:70:d8:0f:ac:85:16:07:10:af:b3:be:4d:16:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FF:21:BD:3F:48:86:90:D7:28:D3:B7:15:3E:C4:3B:FD:A0:C7:30
X509v3 Authority Key Identifier:
keyid:7E:C5:D4:82:8D:C3:41:99:EF:71:7C:C0:3A:48:A0:07:4C:14:43:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXUgo3DQZnvcXzAOkigB0wUQ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/ZP8hvT9IhpDXKNO3FT7EO_2gxzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a00b89-b398-40d9-bdb5-427b2d4f9c82/1/fsXUgo3DQZnvcXzAOkigB0wUQ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:08:d2:3a:69:09:56:26:02:de:7b:78:0c:66:48:6d:a6:12:
82:e2:8b:58:96:41:44:ca:ea:94:15:4c:10:00:75:a5:ed:58:
93:0b:af:a7:c7:18:e1:8d:29:0e:fc:23:b9:0c:8d:2c:cb:24:
94:98:a7:2f:1c:3d:79:0e:37:1e:2e:5f:87:ae:28:7a:33:52:
5f:63:0e:5a:c7:6c:9c:e2:e6:16:43:67:43:c3:04:5d:88:a1:
ac:45:fe:04:0e:b0:57:bf:ee:f9:c8:22:e2:d4:88:79:1d:53:
96:56:b5:2b:22:3d:09:e6:02:d9:41:aa:3b:f0:48:db:a1:51:
92:25:59:2d:4e:d4:4c:39:e1:33:70:28:c0:aa:59:63:5d:2c:
41:46:84:22:dc:18:6d:c6:dc:75:e7:b4:38:28:10:39:a4:86:
eb:b9:57:ff:3a:57:96:11:29:07:9f:67:52:3a:37:b1:64:69:
9c:92:fc:6c:76:8c:97:91:39:e5:0c:7a:6e:72:4c:bc:68:57:
c8:0d:53:50:a1:5e:16:69:82:27:93:0b:fd:1c:66:ce:18:dd:
a4:4f:1b:d2:62:89:05:5c:5b:fb:76:71:51:08:10:95:65:15:
c3:5c:cf:53:2b:15:9e:f1:3b:c3:35:ba:db:fd:3b:12:75:9e:
e8:3e:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:51:57 2025 by rpki-client