Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/ZBD_Mv_EthbHjc_8xVmkm_ufO1s.roa
File: ZBD_Mv_EthbHjc_8xVmkm_ufO1s.roa (raw, json)
Hash identifier: GwCDqJ7FPWgCjXs0KfPqBwLfARsBtHupWTVSkvp+s7I=
Subject key identifier: 64:10:FF:32:FF:C4:B6:16:C7:8D:CF:FC:C5:59:A4:9B:FB:9F:3B:5B
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 018C09A81CC702C6A48EF6EC8FAAA789279F
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/ZBD_Mv_EthbHjc_8xVmkm_ufO1s.roa
Signing time: Sun 26 Nov 2023 03:24:21 +0000
ROA not before: Sun 26 Nov 2023 03:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210165
IP address blocks: 91.225.1.0/24 maxlen: 24
2a12:3440::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:09:a8:1c:c7:02:c6:a4:8e:f6:ec:8f:aa:a7:89:27:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Nov 26 03:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6410ff32ffc4b616c78dcffcc559a49bfb9f3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:62:29:ab:76:b1:7e:56:9f:fd:1d:b8:37:
05:5d:c3:31:9d:74:80:fc:c4:19:83:0c:0b:8c:6b:
27:af:43:6e:88:0b:a2:c9:57:0b:aa:36:a9:17:a9:
08:ef:5b:c1:32:97:7c:8c:d5:f8:f6:7e:f8:3f:07:
66:68:59:29:d8:ab:8e:fc:2d:45:ca:07:11:15:a7:
bc:cc:01:24:31:65:da:40:1a:66:7d:fb:6d:83:c4:
e6:79:b2:65:65:27:74:6a:99:e9:c7:3f:e1:9d:f8:
d6:03:07:60:d4:fe:51:61:30:9f:7f:b9:e2:2e:f6:
93:fc:98:b5:10:29:4d:51:6a:d8:07:c1:49:f1:00:
87:58:38:50:3c:16:eb:39:dc:c5:ab:02:2d:b1:4d:
d8:87:ec:b6:a1:94:a0:c2:26:3b:8e:fc:22:56:3e:
57:d2:70:f0:4c:82:5b:a8:c0:a7:49:e6:d4:77:12:
bf:e8:a7:0f:29:83:b5:a0:5c:6d:31:10:3f:58:1f:
5a:32:01:f1:ec:4a:81:5d:2c:a0:c8:90:0c:66:4c:
4e:dd:14:10:1f:e8:f2:ba:c8:28:34:64:65:57:5e:
87:c8:95:b0:9a:09:fe:41:28:7c:08:dd:33:46:f8:
35:f3:5e:59:82:c3:a2:90:c1:cc:0c:cc:bc:93:3e:
cb:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:10:FF:32:FF:C4:B6:16:C7:8D:CF:FC:C5:59:A4:9B:FB:9F:3B:5B
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/ZBD_Mv_EthbHjc_8xVmkm_ufO1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.1.0/24
IPv6:
2a12:3440::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d8:ff:8d:aa:5f:bb:64:48:34:3b:b1:0a:56:4d:5a:5f:f8:
49:a9:77:df:33:44:e7:e8:d4:b5:af:bb:f5:04:1e:16:92:2f:
4e:72:51:b2:26:4e:fc:bb:44:4a:2f:3f:8d:60:6e:09:ca:20:
2e:5a:da:96:cf:38:83:c4:4f:52:97:14:ab:1a:49:bd:c3:d0:
fc:bc:18:7f:7c:a1:dc:47:2a:41:bc:22:2d:e0:eb:3a:79:56:
74:c9:32:5f:ca:d5:26:d6:18:90:a3:51:fb:f0:69:70:b1:0f:
b4:b2:d4:9f:6c:c3:7d:d9:52:4b:f2:71:93:fe:8f:a3:2f:ef:
8f:fb:54:29:96:74:e0:18:97:cd:d2:74:c8:b6:e0:78:5e:a7:
10:59:04:19:d7:6e:df:2e:a2:68:f4:9f:b8:ef:d3:fa:96:40:
3f:35:94:73:e8:e5:a7:40:64:20:18:e2:ef:9c:59:58:ee:76:
74:2c:ec:90:08:cc:c5:51:ca:8f:f5:28:6a:c3:7f:68:b1:bd:
cb:e5:8d:5c:11:bf:80:c2:eb:c9:23:4e:48:f8:d9:75:70:be:
a7:73:0d:7a:76:a2:a7:a5:1d:a1:1e:4d:3f:12:4d:7a:11:38:
6a:0e:83:d6:84:36:6f:71:15:ed:65:ad:cb:21:b5:68:07:81:
d4:34:b3:24
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYwJqBzHAsakjvbsj6qniSefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZjQ4NzQ5OTRkZTdhMTRlNGI1ODRmNmQyYjk2YjJkOTkx
YjFlOTEwHhcNMjMxMTI2MDMyNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDEwZmYzMmZmYzRiNjE2Yzc4ZGNmZmNjNTU5YTQ5YmZiOWYzYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUliKat2sX5Wn/0duDcFXcMxnXSA
/MQZgwwLjGsnr0NuiAuiyVcLqjapF6kI71vBMpd8jNX49n74PwdmaFkp2KuO/C1F
ygcRFae8zAEkMWXaQBpmffttg8TmebJlZSd0apnpxz/hnfjWAwdg1P5RYTCff7ni
LvaT/Ji1EClNUWrYB8FJ8QCHWDhQPBbrOdzFqwItsU3Yh+y2oZSgwiY7jvwiVj5X
0nDwTIJbqMCnSebUdxK/6KcPKYO1oFxtMRA/WB9aMgHx7EqBXSygyJAMZkxO3RQQ
H+jyusgoNGRlV16HyJWwmgn+QSh8CN0zRvg1815ZgsOikMHMDMy8kz7LgQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGQQ/zL/xLYWx43P/MVZpJv7nztbMB8GA1UdIwQY
MBaAFG70h0mU3noU5LWE9tK5ay2ZGx6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMt
NTBlNzQ2NDI0NjMwLzEvWkJEX012X0V0aGJIamNfOHhWbWttX3VmTzFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMTE1MDgtZDVhMi00ZGM1LWJjOTMtNTBlNzQ2NDI0NjMw
LzEvYnZTSFNaVGVlaFRrdFlUMjBybHJMWmtiSHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+EBMA0E
AgACMAcDBQMqEjRAMA0GCSqGSIb3DQEBCwUAA4IBAQAr2P+Nql+7ZEg0O7EKVk1a
X/hJqXffM0Tn6NS1r7v1BB4Wki9OclGyJk78u0RKLz+NYG4JyiAuWtqWzziDxE9S
lxSrGkm9w9D8vBh/fKHcRypBvCIt4Os6eVZ0yTJfytUm1hiQo1H78GlwsQ+0stSf
bMN92VJL8nGT/o+jL++P+1QplnTgGJfN0nTItuB4XqcQWQQZ127fLqJo9J+479P6
lkA/NZRz6OWnQGQgGOLvnFlY7nZ0LOyQCMzFUcqP9Shqw39osb3L5Y1cEb+AwuvJ
I05I+Nl1cL6ncw16dqKnpR2hHk0/Ek16EThqDoPWhDZvcRXtZa3LIbVoB4HUNLMk
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:36 2025 by rpki-client