Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/zD4yaP5lULVExH0BaSaLNJgLrqg.roa
File: zD4yaP5lULVExH0BaSaLNJgLrqg.roa (raw, json)
Hash identifier: 18kYEno+odH+t0JBr8ihOBOQ4Z0t8rysPxfS9NRddKE=
Subject key identifier: CC:3E:32:68:FE:65:50:B5:44:C4:7D:01:69:26:8B:34:98:0B:AE:A8
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 01845D0C86015349429FF2B9775D04EBCB59
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/zD4yaP5lULVExH0BaSaLNJgLrqg.roa
Signing time: Wed 09 Nov 2022 15:40:12 +0000
ROA not before: Wed 09 Nov 2022 15:40:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48181
IP address blocks: 2.56.52.0/22 maxlen: 24
151.237.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:0c:86:01:53:49:42:9f:f2:b9:77:5d:04:eb:cb:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Nov 9 15:40:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3e3268fe6550b544c47d0169268b34980baea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:f1:b8:3a:6f:c8:d3:f3:c1:ca:e8:c4:da:
50:af:72:a6:a5:2a:d2:e7:d0:3a:61:d2:b9:8d:2e:
25:e6:8a:f4:23:e0:e8:64:ed:50:71:ce:b1:40:3a:
19:df:5e:4a:8e:fb:26:d2:64:13:43:74:5b:2e:e7:
fd:d4:4b:e5:39:cc:13:c3:a5:43:51:5f:39:89:7b:
58:3e:b7:dc:6e:03:fa:68:c5:9a:5f:a4:a4:21:1b:
97:0b:9c:ff:7d:a0:59:2f:75:b1:9e:ee:f1:5a:fb:
94:31:e8:a3:bb:a8:0f:4a:e0:6d:85:f6:93:37:1d:
bd:88:8e:78:3b:00:8c:48:90:a4:71:09:dc:69:4d:
36:0b:2c:ca:78:92:b1:3c:49:16:2c:75:74:39:bf:
e0:49:06:9c:ab:75:6b:74:c1:65:03:0f:f6:9e:3f:
82:7a:0b:e7:8b:4d:8a:92:30:fe:5c:47:fb:c0:03:
4e:37:bc:1d:69:ad:8f:98:56:7b:0c:35:d8:30:15:
6a:ea:96:e9:34:43:46:04:c7:06:07:6a:7c:28:61:
e0:bc:90:8b:53:4c:3f:78:69:78:91:28:19:d2:d7:
01:93:d2:28:a0:88:d3:81:9c:7a:f9:26:6c:58:8e:
20:fc:fa:68:00:8f:68:d4:a9:c1:d5:0a:de:87:79:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:32:68:FE:65:50:B5:44:C4:7D:01:69:26:8B:34:98:0B:AE:A8
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/zD4yaP5lULVExH0BaSaLNJgLrqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.52.0/22
151.237.48.0/21
Signature Algorithm: sha256WithRSAEncryption
92:0d:27:5c:4b:9c:d2:9a:c7:8c:55:90:0e:13:3e:a0:f8:11:
39:1c:c3:20:bf:45:3c:5b:0f:7c:52:d1:0f:b7:30:4c:f2:85:
0a:6e:67:42:6b:a8:f1:7d:cc:7d:6f:b0:ca:de:0b:c4:f5:73:
59:d3:d1:fb:67:03:9f:4f:2f:ff:a5:24:50:09:48:03:50:64:
4a:b5:d0:31:9e:71:29:84:a0:78:fe:8c:7d:ff:36:55:a0:67:
22:de:9b:e5:4c:7f:9c:59:20:3e:7d:16:db:41:76:bc:a4:cb:
7f:b4:a7:4b:a1:24:b6:72:7c:9a:15:65:d6:00:a6:43:b5:83:
f1:34:d2:53:88:b1:4e:2a:91:a3:11:62:92:7d:22:ed:b7:2a:
ee:d7:25:c5:88:2c:a6:ae:32:b4:a3:92:22:15:7f:6b:5c:3d:
0d:01:f7:ac:a3:e0:37:b4:62:ac:d5:18:3d:4b:15:21:c8:a2:
a9:b3:71:22:70:95:88:47:a3:b0:06:d8:00:7e:06:37:e0:b0:
5b:3f:d3:04:4b:25:0b:72:61:6f:ee:bd:a5:e8:a3:8d:b9:2e:
42:9f:7b:7a:80:27:cc:31:26:2a:4c:80:54:9a:17:ea:0d:93:
65:d9:ac:72:db:f4:67:1e:76:26:b0:64:5a:80:2c:7e:79:0c:
1f:1a:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:08:18 2025 by rpki-client