Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/Z1auZ6nvSRT7lQ6jqdM3-I8STcs.roa
File: Z1auZ6nvSRT7lQ6jqdM3-I8STcs.roa (raw, json)
Hash identifier: qQ3SYtMmDoIimFCZ98BLZRer5hALOxfe8tPgdX6JFKk=
Subject key identifier: 67:56:AE:67:A9:EF:49:14:FB:95:0E:A3:A9:D3:37:F8:8F:12:4D:CB
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 17406C62
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/Z1auZ6nvSRT7lQ6jqdM3-I8STcs.roa
Signing time: Sat 01 Jan 2022 14:05:25 +0000
ROA not before: Sat 01 Jan 2022 14:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12986
IP address blocks: 194.153.128.0/24 maxlen: 24
193.26.27.0/24 maxlen: 24
2001:67c:218c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390098018 (0x17406c62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Jan 1 14:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6756ae67a9ef4914fb950ea3a9d337f88f124dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:37:37:00:85:30:b3:b4:16:cf:f4:06:1d:
68:b2:eb:5d:29:25:d1:6a:1f:65:39:e6:4c:1b:52:
a2:d6:b0:7a:69:fd:ef:79:f4:0a:3b:1d:2d:bc:04:
15:bc:db:d0:d5:9d:f5:ad:78:ca:a2:e9:b4:a0:dd:
5e:19:28:9f:7b:58:4d:47:ca:1b:2f:59:0d:d3:77:
0a:44:5b:13:de:6f:ad:47:c2:e3:15:4e:02:15:76:
37:7d:ca:a7:36:b0:85:fe:4e:83:a4:6d:ea:67:9c:
e5:31:c6:d9:cb:ec:7d:35:57:c8:64:4b:c4:4e:d6:
ae:8a:94:b7:ac:a3:4c:20:fd:ac:17:69:8b:2a:6c:
4a:8b:97:b0:0a:f3:38:4e:03:1e:28:4b:7b:77:ec:
59:a3:2e:5d:fa:3e:11:5f:ca:e9:99:54:e5:96:83:
3e:64:c3:f8:c4:49:46:08:04:4e:ed:5a:c5:60:23:
a0:75:01:0d:7b:33:be:4c:ce:e1:20:be:41:2f:8c:
78:b3:6d:30:8f:3e:00:37:bd:58:fc:0f:4f:06:40:
c4:71:1a:51:6e:af:73:16:96:8a:8e:91:3f:e8:c9:
0f:ed:55:74:a5:e8:47:d2:5c:f9:9b:12:cd:30:86:
d0:b5:93:76:8d:da:ca:d6:cf:c0:a3:28:cd:fc:d2:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:56:AE:67:A9:EF:49:14:FB:95:0E:A3:A9:D3:37:F8:8F:12:4D:CB
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/Z1auZ6nvSRT7lQ6jqdM3-I8STcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.27.0/24
194.153.128.0/24
IPv6:
2001:67c:218c::/48
Signature Algorithm: sha256WithRSAEncryption
34:66:20:a2:27:dd:ab:3d:06:6d:64:1e:50:a1:05:28:c3:4c:
7f:34:c9:df:b4:07:8a:a4:5b:85:08:e0:6a:77:7a:31:a0:87:
fb:f3:4c:94:b7:76:bd:12:02:8e:1e:08:fa:db:ae:81:75:9c:
78:53:b6:30:8e:51:a0:d7:48:a8:0c:d3:68:5e:ad:48:85:f9:
d5:20:85:3c:ae:05:77:b8:f1:0d:96:7b:62:fc:13:59:83:ca:
23:8d:7b:4e:f4:b8:ae:b1:b2:a3:05:6e:f6:b1:a4:f1:14:0e:
cd:6e:3a:43:f8:52:3c:71:79:b7:55:24:f4:0c:4b:ed:b8:22:
e8:7d:36:5c:45:d5:58:84:e1:53:0b:bf:ff:03:66:59:b9:04:
8a:7d:33:15:b0:c1:f6:d9:73:0a:c9:bf:54:23:ce:de:67:91:
0c:61:05:d6:e1:ca:54:cc:b8:43:57:29:47:f2:ae:4f:fe:f9:
f6:a4:4a:4d:80:8c:7c:f4:9d:85:49:3c:fc:b2:ac:87:9a:0d:
ce:4b:97:98:1e:a0:30:ea:5f:e2:49:24:f9:0f:57:c5:84:a1:
0a:4c:73:72:54:3f:4f:3a:3e:f3:28:4d:f3:37:88:cb:b8:d8:
a7:e0:11:47:89:ce:ef:87:84:be:bf:c7:05:99:ea:32:f3:5b:
7e:0b:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:12 2025 by rpki-client