Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Z4NEZ_T57yQSql6MzErfjSBNU8A.roa
File: Z4NEZ_T57yQSql6MzErfjSBNU8A.roa (raw, json)
Hash identifier: yB16PzEAtFyPsF3tutHm9wOOjwSIuZFOKmJCAM4BfFU=
Subject key identifier: 67:83:44:67:F4:F9:EF:24:12:AA:5E:8C:CC:4A:DF:8D:20:4D:53:C0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505614F846D22EA9154758364B141DD45
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Z4NEZ_T57yQSql6MzErfjSBNU8A.roa
Signing time: Mon 12 Dec 2022 08:09:01 +0000
ROA not before: Mon 12 Dec 2022 08:09:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24767
IP address blocks: 193.201.228.0/22 maxlen: 24
212.69.96.0/19 maxlen: 24
212.14.160.0/19 maxlen: 24
188.162.0.0/16 maxlen: 24
195.230.64.0/19 maxlen: 24
195.16.96.0/19 maxlen: 24
195.149.111.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
212.44.64.0/19 maxlen: 24
212.119.160.0/19 maxlen: 24
213.154.160.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:61:4f:84:6d:22:ea:91:54:75:83:64:b1:41:dd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 08:09:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67834467f4f9ef2412aa5e8ccc4adf8d204d53c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:59:68:fd:63:ab:a5:96:ab:fe:c9:4c:f6:
46:f7:d6:7e:45:42:f7:41:ea:2c:a4:ec:28:f2:30:
00:ef:da:63:8f:db:dd:ce:a4:23:a9:6b:d1:a8:fc:
06:87:b2:3f:9e:ee:a2:0d:89:a5:c9:ad:54:86:1d:
01:05:8f:b5:3b:81:e3:71:2b:c0:33:65:6a:6f:1a:
37:ac:76:ce:97:ed:1a:80:8b:12:e3:cf:34:37:cf:
f7:56:68:10:ae:a1:79:bd:1c:33:82:9c:11:2e:ec:
0c:f4:30:81:69:f1:c0:84:3f:20:bc:37:b5:bc:fc:
0f:b8:e9:1b:b1:4f:04:9a:f1:37:15:69:fa:8d:9e:
26:91:28:e6:5c:ff:9c:b3:ff:22:83:07:fa:f3:ae:
01:1c:38:f8:fe:08:52:a5:14:6e:ba:cf:49:85:a2:
b2:7f:e4:03:6d:ae:55:03:a9:87:c0:e6:3d:1e:7c:
31:f9:be:d4:84:82:ca:89:5b:15:a5:a2:c0:8f:3c:
4b:ee:ac:73:2a:ef:80:0f:c6:8f:0a:63:7b:64:a0:
05:fe:32:f1:67:bd:94:cf:b2:3d:78:69:1a:9e:e0:
6b:8b:b4:ec:62:bb:6e:30:c3:e4:2c:ff:c3:e1:45:
52:44:e6:c3:f2:54:e6:69:d8:6e:9c:68:ee:ed:9a:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:44:67:F4:F9:EF:24:12:AA:5E:8C:CC:4A:DF:8D:20:4D:53:C0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Z4NEZ_T57yQSql6MzErfjSBNU8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
195.149.111.0/24
195.230.64.0/19
212.14.160.0/19
212.44.64.0/19
212.69.96.0/19
212.119.160.0/19
213.154.160.0/19
Signature Algorithm: sha256WithRSAEncryption
28:a6:fa:7e:50:9f:06:37:0c:58:8e:e5:d7:28:07:8c:75:9d:
b9:58:d2:0b:c0:7c:2e:a0:28:fd:7d:33:af:7f:dc:23:bb:78:
5a:73:8b:c3:e0:86:74:0a:58:f5:0d:e0:e4:65:45:cc:cb:86:
23:27:8b:5c:42:73:a4:b8:c1:96:82:e9:31:85:52:e2:e6:d7:
c7:1f:4e:f1:22:bd:82:75:f5:4b:8e:03:e4:0d:93:e1:4d:2d:
bb:b4:dd:e8:95:31:e5:46:f4:d8:03:90:57:19:e8:e8:2d:8b:
05:9d:72:bb:90:cb:88:dd:03:e5:7a:47:c9:9d:a9:10:16:6b:
8b:1e:60:63:cd:b5:b7:5d:7c:ee:7f:96:c7:bc:d7:46:61:c6:
1c:21:a7:16:6f:5b:a4:88:78:11:e7:39:44:d0:55:99:71:14:
48:0b:e7:98:6d:6c:1a:6c:f4:7c:e1:c5:51:04:5b:7e:3e:13:
09:e7:dc:e1:7a:26:a1:60:df:a6:ec:91:25:a1:f6:d8:43:22:
3b:d8:f7:a0:52:75:f1:93:ff:77:5d:a4:49:a8:17:bc:02:e3:
eb:63:f6:8e:f1:b6:27:5c:53:95:ad:44:b5:89:95:b3:3a:02:
2c:5a:e2:5a:92:a0:52:40:63:e9:c1:27:be:02:a1:2e:25:28:
08:72:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:15:11 2025 by rpki-client