Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/Z0iKnnWHCZKSyZqXCQMpn9_43Kw.roa
File: Z0iKnnWHCZKSyZqXCQMpn9_43Kw.roa (raw, json)
Hash identifier: fXI8r5NH9vD9vQ8fqs4PDzzEv5yrqbsV/UT4hSixOpA=
Subject key identifier: 67:48:8A:9E:75:87:09:92:92:C9:9A:97:09:03:29:9F:DF:F8:DC:AC
Certificate issuer: /CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Certificate serial: 01856BDCB319F7CFCE49338BC1ED744EC7D1
Authority key identifier: 62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/Z0iKnnWHCZKSyZqXCQMpn9_43Kw.roa
Signing time: Sun 01 Jan 2023 05:45:03 +0000
ROA not before: Sun 01 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.188.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:b3:19:f7:cf:ce:49:33:8b:c1:ed:74:4e:c7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e5ec9df4dd03b9f500a6a0947d147b6ed21666
Validity
Not Before: Jan 1 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67488a9e7587099292c99a970903299fdff8dcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:db:2d:87:58:80:a0:0f:b1:8d:ab:df:60:
c4:9e:41:cb:5a:2b:04:72:ee:65:56:a6:ba:d6:9c:
43:0a:f4:01:4e:98:c7:c2:00:eb:6a:4c:32:e1:5e:
a3:da:7f:74:78:65:18:c3:7c:89:3d:82:65:41:65:
53:e6:34:11:f6:16:d6:bc:54:31:55:44:16:77:60:
04:48:15:4d:34:98:4a:07:e1:23:91:b8:e4:c8:77:
37:5f:cb:c9:2f:13:92:4f:91:8c:d7:85:a0:62:65:
7d:04:03:91:23:b6:8c:86:82:fd:6a:00:a2:cc:89:
6c:c0:14:a5:df:04:7d:aa:30:4c:9c:a6:88:40:c1:
09:cb:f9:0f:70:50:2c:02:dc:08:13:ac:c6:47:60:
62:d2:b8:02:6a:fb:0c:a4:ce:87:ec:f2:0f:9b:c5:
18:ad:47:a2:02:0f:56:5a:68:9c:dc:77:79:bf:2c:
8e:6d:81:d4:7a:b1:63:54:68:53:8e:42:9d:b9:16:
18:08:e3:b1:ed:84:60:bb:ab:52:91:7d:83:1b:2b:
b6:e9:d0:61:fe:a9:0e:67:6e:a7:68:0e:c0:4e:bb:
fd:bc:3e:ce:9d:69:e5:59:45:55:25:d5:a5:36:5e:
96:9b:7a:3b:65:24:58:e9:0b:bd:3c:ea:8f:30:b0:
5b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:48:8A:9E:75:87:09:92:92:C9:9A:97:09:03:29:9F:DF:F8:DC:AC
X509v3 Authority Key Identifier:
keyid:62:E5:EC:9D:F4:DD:03:B9:F5:00:A6:A0:94:7D:14:7B:6E:D2:16:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YuXsnfTdA7n1AKaglH0Ue27SFmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/Z0iKnnWHCZKSyZqXCQMpn9_43Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a7ce03-1f15-4dbc-9a8d-a81544ea5b67/1/YuXsnfTdA7n1AKaglH0Ue27SFmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.93.0/24
Signature Algorithm: sha256WithRSAEncryption
af:59:07:75:2f:cb:e2:06:1e:cf:05:cc:dd:f6:87:97:f5:06:
c7:6e:f1:e8:c1:08:f0:76:67:d4:65:bb:9f:7d:1e:91:47:30:
90:02:ed:98:9e:05:e7:e4:99:0c:f0:9e:08:ea:36:0f:27:50:
b5:46:14:aa:4c:4e:f6:e3:75:53:c6:22:ef:96:10:26:13:6c:
95:28:b8:05:3d:0c:8c:60:d1:74:04:78:7a:38:94:7c:ba:ab:
e3:c5:f1:88:ff:25:17:ee:a8:a6:28:33:02:c3:6e:02:20:69:
b3:a5:c2:64:42:b6:d5:b6:5d:51:df:9d:f8:22:50:c5:f2:57:
ce:e6:59:ed:75:71:55:12:bf:66:c3:79:aa:45:50:3f:6b:b0:
56:a7:84:95:19:df:d9:4f:46:2f:41:20:77:4e:17:8e:c2:a5:
61:38:be:8d:d4:71:c8:f6:3c:93:1e:15:9e:19:a1:cc:a4:bb:
42:9f:03:0c:f1:93:8e:09:81:87:36:5e:b4:ae:ff:d5:51:bd:
ba:e8:5b:56:b0:f7:b5:d1:75:3f:21:cd:b5:08:bf:cd:66:e8:
46:ce:f6:a6:ae:3f:04:39:30:79:a7:c1:ca:67:df:0d:f5:3e:
51:de:aa:0f:17:fb:f5:47:44:83:ad:4b:ad:a4:28:ac:5e:12:
90:e6:42:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:36 2025 by rpki-client