Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/ZZ0CHvEbPhfVBkDmlYFW7yThrhU.roa
File: ZZ0CHvEbPhfVBkDmlYFW7yThrhU.roa (raw, json)
Hash identifier: FglftmsJ56Ng7bVJelWRcoZfuUubuoKGuKjw8F/47Xw=
Subject key identifier: 65:9D:02:1E:F1:1B:3E:17:D5:06:40:E6:95:81:56:EF:24:E1:AE:15
Certificate issuer: /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial: 0185A1C25506728EAAA82E79DB12606D01F5
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/ZZ0CHvEbPhfVBkDmlYFW7yThrhU.roa
Signing time: Wed 11 Jan 2023 16:55:45 +0000
ROA not before: Wed 11 Jan 2023 16:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 178.255.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:c2:55:06:72:8e:aa:a8:2e:79:db:12:60:6d:01:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Validity
Not Before: Jan 11 16:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=659d021ef11b3e17d50640e6958156ef24e1ae15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:92:d2:e9:00:e2:d0:bd:1b:31:b8:d9:42:9e:
2d:a3:68:9b:cd:45:65:fb:ca:d9:40:86:b0:06:6d:
8d:c3:2e:4e:1c:a3:a5:ad:40:9d:16:97:72:f0:18:
54:6a:f5:ac:21:f8:e0:00:d8:8f:97:c5:58:40:95:
b8:ca:a6:18:82:cd:c6:7c:78:c3:3a:30:7d:36:11:
b8:9f:ee:84:59:5e:3a:c9:53:09:44:e3:c0:9c:5c:
e9:fc:96:d9:a8:23:63:72:98:3b:ef:60:75:4e:66:
cc:9b:06:29:52:06:af:81:38:81:db:53:7e:18:70:
66:1a:ab:e1:84:75:36:0c:61:f7:07:3f:3f:ca:24:
b2:a2:60:03:0a:2c:d8:f2:31:2f:36:00:07:f8:d7:
d4:c1:f6:69:05:e4:b9:a9:90:88:70:1b:b7:6d:e7:
f2:32:ad:1b:e3:f8:7d:b7:75:be:e7:83:4b:8f:a3:
35:e8:e9:c8:65:97:97:cc:38:15:9a:b1:25:76:28:
a0:b3:59:77:da:ad:9e:85:94:af:16:8b:56:c7:60:
c2:9b:0a:97:fc:3a:24:41:17:dc:ea:f9:3d:c4:a8:
90:f6:64:ee:72:56:08:bf:bb:a6:16:31:9f:39:6e:
02:1d:6f:1f:95:9d:33:08:34:9a:95:25:ca:c1:6c:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:02:1E:F1:1B:3E:17:D5:06:40:E6:95:81:56:EF:24:E1:AE:15
X509v3 Authority Key Identifier:
keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/ZZ0CHvEbPhfVBkDmlYFW7yThrhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.219.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6a:0e:4f:21:79:12:05:40:b5:e1:b6:23:da:77:01:f4:8f:
85:15:6e:e1:c7:48:99:ba:90:3f:3f:ea:99:a2:95:5a:21:00:
4b:54:7c:52:8d:7a:16:c9:26:ab:99:54:9f:cf:90:80:eb:b3:
79:bf:14:d0:ab:a8:dc:d5:b3:03:e8:af:ad:6f:43:b2:c7:b4:
86:9e:39:81:12:79:23:3d:04:5d:c5:7b:5f:65:01:2e:dd:f2:
fe:bb:85:e0:1f:f1:f3:9d:c5:f6:a6:79:47:22:e5:ce:7c:c1:
37:5f:e5:68:31:70:7b:35:64:c4:b5:c7:75:07:57:5a:5e:76:
25:fc:27:1d:d4:8c:11:a1:b1:e8:76:26:04:2f:15:1d:64:2f:
2c:de:5f:55:3c:43:1b:34:fd:ae:35:fd:91:4b:a1:4a:2e:27:
76:2a:e1:e4:25:0e:1c:f9:cd:c8:bf:3c:2f:4c:fb:a4:ed:ea:
dc:28:a5:c4:d6:9a:03:23:85:ad:44:5c:71:c1:09:dd:e0:8c:
51:0c:90:57:40:24:42:d6:09:a0:06:a6:8c:11:f5:fa:09:e8:
90:9c:c9:66:dd:75:0e:82:c8:c1:7f:50:fb:71:ce:00:df:f9:
ca:a4:4a:1a:7b:88:a4:69:a5:84:38:3d:a4:00:02:01:a9:67:
5b:f3:5b:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWhwlUGco6qqC552xJgbQH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYjI4MDVkODc3NmVlZGViN2FhNGNiZTVhZjU2OGNkYjI2
MjlmYzIwHhcNMjMwMTExMTY1NTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTlkMDIxZWYxMWIzZTE3ZDUwNjQwZTY5NTgxNTZlZjI0ZTFhZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55LS6QDi0L0bMbjZQp4to2ibzUVl
+8rZQIawBm2Nwy5OHKOlrUCdFpdy8BhUavWsIfjgANiPl8VYQJW4yqYYgs3GfHjD
OjB9NhG4n+6EWV46yVMJROPAnFzp/JbZqCNjcpg772B1TmbMmwYpUgavgTiB21N+
GHBmGqvhhHU2DGH3Bz8/yiSyomADCizY8jEvNgAH+NfUwfZpBeS5qZCIcBu3befy
Mq0b4/h9t3W+54NLj6M16OnIZZeXzDgVmrEldiigs1l32q2ehZSvFotWx2DCmwqX
/DokQRfc6vk9xKiQ9mTuclYIv7umFjGfOW4CHW8flZ0zCDSalSXKwWxbSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWdAh7xGz4X1QZA5pWBVu8k4a4VMB8GA1UdIwQY
MBaAFPOygF2Hdu7et6pMvlr1aM2yYp/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgt
ODNiYzc5NzI3OGUyLzEvWlowQ0h2RWJQaGZWQmtEbWxZRlc3eVRocmhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9iODYyZDMtNjg0NC00NmY3LWJkOTgtODNiYzc5NzI3OGUy
LzEvODdLQVhZZDI3dDYzcWt5LVd2Vm96YkppbjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv/bMA0G
CSqGSIb3DQEBCwUAA4IBAQBCag5PIXkSBUC14bYj2ncB9I+FFW7hx0iZupA/P+qZ
opVaIQBLVHxSjXoWySarmVSfz5CA67N5vxTQq6jc1bMD6K+tb0Oyx7SGnjmBEnkj
PQRdxXtfZQEu3fL+u4XgH/HzncX2pnlHIuXOfME3X+VoMXB7NWTEtcd1B1daXnYl
/Ccd1IwRobHodiYELxUdZC8s3l9VPEMbNP2uNf2RS6FKLid2KuHkJQ4c+c3Ivzwv
TPuk7ercKKXE1poDI4WtRFxxwQnd4IxRDJBXQCRC1gmgBqaMEfX6CeiQnMlm3XUO
gsjBf1D7cc4A3/nKpEoae4ikaaWEOD2kAAIBqWdb81tD
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:14 2025 by rpki-client