Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zEp3f4hxdRpzCuBdUKxH9R0YZ18.roa
File: zEp3f4hxdRpzCuBdUKxH9R0YZ18.roa (raw, json)
Hash identifier: 8DAv4lxpinE9ZXYWbFN8o59Dx9rT+IKZIms6CFZ3FqY=
Subject key identifier: CC:4A:77:7F:88:71:75:1A:73:0A:E0:5D:50:AC:47:F5:1D:18:67:5F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4FB410F12F65F4BC3EA12052F7943
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zEp3f4hxdRpzCuBdUKxH9R0YZ18.roa
Signing time: Sun 01 Jan 2023 19:35:29 +0000
ROA not before: Sun 01 Jan 2023 19:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204574
IP address blocks: 188.164.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:fb:41:0f:12:f6:5f:4b:c3:ea:12:05:2f:79:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4a777f8871751a730ae05d50ac47f51d18675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:7f:1b:c9:e7:a6:01:e5:0e:2a:b1:13:51:
ed:7f:14:77:45:75:e9:67:4c:e9:e7:39:33:e3:be:
9c:cf:00:1e:63:c5:69:9e:e1:43:78:36:c7:51:e4:
41:82:a1:7d:33:f1:22:57:67:80:7b:30:f1:c6:8f:
67:af:81:8c:17:f5:17:4a:47:40:a8:fa:38:fb:74:
01:42:d4:2f:ac:28:c5:5c:bc:f5:62:7a:96:b1:a5:
6a:df:eb:5f:36:90:84:2f:83:83:03:4c:89:39:e6:
fb:74:51:83:2a:f6:5a:38:b0:5b:74:f4:08:b9:e4:
d5:f1:31:31:2f:90:d9:85:70:04:bb:90:4c:b5:cb:
e5:f3:45:3d:28:f2:0c:4e:74:5e:df:5d:8f:53:46:
d1:3d:5e:09:4f:21:dc:99:28:9b:74:75:a7:95:25:
3f:ad:70:df:f0:61:64:8b:d5:a8:bb:c7:a2:ab:e1:
46:90:39:ca:a0:f1:31:39:bc:09:61:e4:09:c7:07:
be:43:cf:df:87:f2:21:ee:6e:5c:4c:dd:55:72:59:
e8:ed:ed:6d:e6:82:40:11:b2:f0:b6:7b:62:32:aa:
40:25:b1:a3:cf:90:36:6e:7b:95:e2:27:a0:34:fd:
f5:64:71:3a:0a:69:6b:45:17:16:89:c3:09:3e:8a:
c9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:77:7F:88:71:75:1A:73:0A:E0:5D:50:AC:47:F5:1D:18:67:5F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zEp3f4hxdRpzCuBdUKxH9R0YZ18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2c:12:c8:93:5c:c0:75:f2:8d:79:c9:b4:89:a5:c0:33:47:
de:b7:10:9e:48:a5:35:65:4a:d3:85:36:96:dd:39:8c:06:66:
63:18:ba:33:41:46:8f:39:db:a1:af:3f:fe:9f:45:7a:a9:b0:
23:70:dc:55:8d:d6:9f:6b:83:0c:38:9f:80:83:92:39:cc:cb:
f2:cc:48:29:5e:cc:3d:b6:b8:26:9a:92:3e:e1:c4:6b:97:3a:
36:66:a1:2b:5a:f5:d5:53:92:f0:5b:be:33:81:a3:39:89:04:
0f:08:85:de:7a:20:a9:65:f1:41:d5:6b:2f:48:8e:a7:8a:13:
5d:b9:90:a2:ba:87:9c:1a:08:1a:37:7b:b2:87:2a:21:e4:cb:
2e:1e:a0:42:d1:2e:88:67:ea:12:6d:29:5b:83:9d:0c:ab:ab:
73:d8:b4:4f:da:da:6e:83:e8:33:b2:a0:8f:71:58:3f:cc:ae:
28:09:2c:91:69:bb:19:0d:d4:20:db:5a:ca:75:6b:5f:f3:91:
4a:3d:fb:88:a0:95:21:1c:ca:7c:b9:ae:b3:43:c4:a0:fd:0b:
b2:fd:62:2e:4f:7f:5f:df:99:41:26:74:45:30:52:2b:ab:4d:
c0:a8:97:50:59:7a:4e:11:f4:da:5e:22:42:aa:a0:22:74:28:
61:1e:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:04 2025 by rpki-client