Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ZxC9GgEyvhPoMlm2YrX5dLFkNoM.roa
File: ZxC9GgEyvhPoMlm2YrX5dLFkNoM.roa (raw, json)
Hash identifier: jQ9BOj7Vz6o6Qi762txwlxNXTUf8+iItpQWx4PaGX5k=
Subject key identifier: 67:10:BD:1A:01:32:BE:13:E8:32:59:B6:62:B5:F9:74:B1:64:36:83
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 01888B58C9FD333327207D191B6968D1FB70
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ZxC9GgEyvhPoMlm2YrX5dLFkNoM.roa
Signing time: Mon 05 Jun 2023 11:37:11 +0000
ROA not before: Mon 05 Jun 2023 11:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209817
IP address blocks: 94.240.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:58:c9:fd:33:33:27:20:7d:19:1b:69:68:d1:fb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jun 5 11:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6710bd1a0132be13e83259b662b5f974b1643683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:1d:d3:33:f1:f6:d6:36:81:bf:c6:20:5c:
de:22:c6:d9:99:e5:ba:2e:be:08:29:ab:4c:1b:19:
c9:49:a4:00:b6:2c:14:c9:8d:e0:fc:8b:7a:78:f6:
99:34:c5:81:c2:82:d2:1a:95:d3:18:b1:e7:31:ed:
86:85:05:2a:1e:36:d0:cb:04:25:6d:8b:0a:9f:f4:
d2:19:d7:81:48:ae:0e:64:09:2d:2c:09:30:dc:57:
0c:c4:7b:63:1e:80:1b:9e:0c:af:cc:78:94:cf:46:
22:4b:3a:2b:2f:7d:3c:00:9c:ff:86:54:8d:07:c6:
45:e1:70:de:87:e8:5f:aa:93:36:5b:61:8b:eb:93:
7e:14:ad:17:ba:69:cf:24:f1:4a:fb:bd:2f:36:9d:
14:1a:14:8c:a0:6f:29:4c:d7:6c:2f:6a:44:0c:db:
f9:cd:64:c6:83:10:de:2b:3c:f6:13:c7:39:65:da:
6e:30:74:cf:5b:eb:21:f9:1c:7c:26:f0:8e:b9:60:
72:66:58:da:ef:95:83:9b:1b:99:fe:57:b5:d3:3a:
1d:86:7c:44:dd:04:77:3a:77:7e:b2:d1:0d:18:48:
2a:ad:69:57:92:78:2b:7a:64:5a:24:ed:26:c3:9a:
67:05:13:be:9a:cb:32:31:80:4e:0d:e8:77:15:a5:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:BD:1A:01:32:BE:13:E8:32:59:B6:62:B5:F9:74:B1:64:36:83
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/ZxC9GgEyvhPoMlm2YrX5dLFkNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.14.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5a:3f:9f:5e:e8:3d:e5:8a:e5:50:4a:a7:f4:bb:01:35:02:
1f:78:4d:2a:58:8a:76:e3:14:7e:9c:f4:d4:1f:8f:b3:75:59:
a1:a0:d1:47:42:4f:78:86:9e:c8:ef:7f:07:ba:09:79:33:be:
29:d8:81:13:64:ab:00:b2:05:1e:a4:1b:f4:95:c9:08:e0:d6:
fd:d7:ef:de:fb:fb:71:52:b4:6e:4c:3c:8e:16:4b:48:3d:0a:
f7:97:16:92:6e:7e:99:af:6a:82:d0:77:70:15:44:a2:a6:a5:
8a:36:90:75:a0:29:21:a5:3c:c3:60:70:50:13:76:8c:4a:e7:
d2:05:75:cd:bb:28:d6:19:99:df:4a:9e:9c:be:8d:b7:71:70:
fe:24:e3:5d:9a:8a:17:7d:e4:93:f0:4a:e1:3e:35:74:39:04:
d7:f1:68:3a:41:a4:3c:92:1c:ae:12:d9:19:6e:f8:05:11:33:
42:1d:65:35:fd:0c:4f:c7:25:e5:0e:23:5a:45:b3:3d:98:7f:
83:9a:65:01:06:b3:8e:8a:59:40:7a:d8:f3:ab:24:ff:e5:44:
06:4e:16:3c:ee:53:7f:1d:75:ae:13:d8:81:b5:27:a9:cc:52:
bc:4c:52:10:81:43:38:38:ff:0b:2c:67:f4:3b:c0:30:96:76:
d7:11:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:55 2025 by rpki-client