Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zvtQmcw65y4MDQ5z-K9-ZsoXwvg.roa
File: zvtQmcw65y4MDQ5z-K9-ZsoXwvg.roa (raw, json)
Hash identifier: 5GjHOPR5c37SHb+VkudhdaYu112u3EH1nMU8XLCkoeI=
Subject key identifier: CE:FB:50:99:CC:3A:E7:2E:0C:0D:0E:73:F8:AF:7E:66:CA:17:C2:F8
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4F3118AEDFB7897375A4ECA9A50BC
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zvtQmcw65y4MDQ5z-K9-ZsoXwvg.roa
Signing time: Sun 01 Jan 2023 19:35:27 +0000
ROA not before: Sun 01 Jan 2023 19:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198700
IP address blocks: 37.16.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:f3:11:8a:ed:fb:78:97:37:5a:4e:ca:9a:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefb5099cc3ae72e0c0d0e73f8af7e66ca17c2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:b3:78:23:60:01:e9:57:e1:af:5c:cf:70:
02:ad:9a:ce:f4:71:eb:f6:55:00:7d:0d:03:14:b0:
20:e6:1b:e8:a9:a4:4f:39:5a:c9:8b:9c:49:26:36:
81:00:9d:93:c4:19:47:32:12:7b:e5:54:06:3d:10:
48:3a:73:2b:fc:02:f7:97:8d:4b:06:47:00:49:d1:
40:e3:10:a1:12:d0:8b:5f:8e:b5:53:2f:bf:cb:b0:
90:f0:e1:f7:25:3b:64:2a:a6:a0:f9:b6:59:e1:1c:
b1:10:50:37:30:70:52:71:1f:09:64:b8:54:59:a0:
65:43:e6:5a:40:6d:c9:ce:d8:5f:71:2d:27:42:27:
47:02:ae:d2:82:4a:ba:c4:d3:87:7e:ca:a1:8d:08:
95:c0:bf:99:9d:64:01:4d:f2:78:4a:99:70:c9:49:
b8:eb:1a:e3:4c:5a:76:4f:f2:c8:3c:80:4f:30:e8:
44:1f:c7:de:46:f9:cc:7a:27:a5:46:4b:d7:e7:e2:
59:ce:2b:f9:4b:ad:59:8a:0b:21:0d:56:04:a7:79:
6d:8d:2e:b6:56:4f:e3:9a:96:1e:d1:66:8f:eb:77:
8f:77:4c:4d:6b:72:fc:e1:b7:37:30:4a:08:74:60:
f7:9d:2f:59:b4:c2:7f:53:5e:57:08:c7:18:17:92:
8d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FB:50:99:CC:3A:E7:2E:0C:0D:0E:73:F8:AF:7E:66:CA:17:C2:F8
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zvtQmcw65y4MDQ5z-K9-ZsoXwvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e5:21:69:9d:aa:a8:ea:0b:3f:7c:72:be:90:52:1a:c6:5d:
25:22:e3:e4:d9:42:8f:4d:70:67:6b:d9:62:ef:5b:d5:62:1a:
01:cd:5e:6a:75:b1:12:69:20:df:67:99:2b:ca:54:d1:55:af:
d6:51:a3:e1:9b:0e:48:e2:e9:9b:b5:1b:c6:6d:0d:ac:7f:90:
54:19:e7:ed:fd:36:99:50:ba:60:7a:dc:cb:a7:de:79:41:41:
ef:30:31:29:43:60:cb:80:6e:b5:a2:e0:61:7a:01:69:94:be:
d6:f8:83:e1:b6:26:de:6d:ad:f7:97:4f:af:d5:2b:9b:eb:46:
bc:c1:35:86:a9:5e:49:38:df:47:b5:6a:61:e8:03:11:00:a7:
d5:ee:dd:80:8e:26:6d:c3:75:11:9b:ae:4c:ff:0d:8a:bc:26:
ab:ba:12:86:41:b5:33:47:1f:93:0d:ef:b4:62:32:18:3f:3d:
39:8d:ff:a3:83:69:89:85:67:d2:51:9c:bf:b0:b2:0f:4f:82:
e3:26:48:54:a6:7e:c5:95:9c:7b:ae:50:e1:6a:10:e2:f4:0c:
bb:7f:0d:38:a4:7e:4b:7c:b5:9f:19:75:3e:12:0a:43:2d:7f:
a4:0c:be:9d:e3:5a:83:9e:fe:69:b5:a5:6d:1a:fe:82:fb:35:
f5:e7:a5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:33:52 2025 by rpki-client