Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zzAWKabxenWlSDQWBm-2axP0W1U.roa
File: zzAWKabxenWlSDQWBm-2axP0W1U.roa (raw, json)
Hash identifier: Awpp7v195QNzoT+or+Perjb0HFLG0d9I9ZT9OzSk+s8=
Subject key identifier: CF:30:16:29:A6:F1:7A:75:A5:48:34:16:06:6F:B6:6B:13:F4:5B:55
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4FF3AB30F9F1B8A17AF4A38325E92
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zzAWKabxenWlSDQWBm-2axP0W1U.roa
Signing time: Sun 01 Jan 2023 19:35:30 +0000
ROA not before: Sun 01 Jan 2023 19:35:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212967
IP address blocks: 5.8.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ff:3a:b3:0f:9f:1b:8a:17:af:4a:38:32:5e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf301629a6f17a75a5483416066fb66b13f45b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:f3:97:25:07:30:d3:fd:cf:f1:2a:70:69:
07:bd:4f:f5:da:e8:49:ad:e4:8e:49:95:66:f3:a1:
16:ec:54:3c:f9:14:0b:06:69:3d:60:86:22:fa:06:
82:c2:ca:65:47:61:49:60:69:f0:ef:71:d8:4c:38:
b7:64:e4:9b:07:f9:e4:08:8e:9d:c1:c4:95:6a:0f:
6e:0f:35:a1:b8:06:3c:15:3d:1d:63:38:ba:70:d5:
67:ff:cb:22:ff:ab:7f:8d:48:76:85:0f:98:a6:9a:
ea:7f:60:4b:99:94:ed:84:41:ac:27:bb:27:9c:90:
7c:0c:9d:46:ab:5a:75:f2:41:1d:31:74:d9:5a:e7:
b0:de:63:d8:3c:d4:7a:a5:1b:49:d6:88:62:20:c3:
0e:aa:d2:d6:b1:dd:75:35:81:db:66:cd:9c:cc:fa:
7c:1a:e0:d3:c0:d5:e4:74:3c:5a:34:7d:d6:09:94:
f6:7a:f9:71:9c:6c:6c:81:c7:c1:8a:40:fc:6a:8d:
02:81:27:16:6b:a5:dc:81:8f:f3:15:43:bb:cb:32:
22:45:22:a0:da:83:3d:32:85:66:2b:81:0a:73:18:
af:d3:26:30:df:25:0e:92:e4:5d:e3:5f:30:e6:52:
cf:49:17:c4:be:78:3d:f4:00:14:9c:66:67:76:15:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:30:16:29:A6:F1:7A:75:A5:48:34:16:06:6F:B6:6B:13:F4:5B:55
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/zzAWKabxenWlSDQWBm-2axP0W1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.183.0/24
Signature Algorithm: sha256WithRSAEncryption
27:48:83:74:e6:fe:9d:f4:ff:88:24:ff:2c:7c:5b:1f:21:43:
b0:f3:af:81:4c:74:4a:4c:3b:0e:ab:f9:88:ca:7d:51:cb:ff:
e8:69:04:32:8d:19:5a:de:ce:e7:9a:4c:12:30:9d:59:dc:a5:
da:be:4e:ef:6f:64:bb:33:6a:88:aa:9a:20:43:97:a4:56:91:
06:70:0f:39:7b:f2:b6:2e:8a:c1:90:93:23:bb:6c:69:6e:e8:
c5:a5:d7:34:8a:ed:4c:03:ba:39:70:c2:90:79:1c:8b:f6:d5:
77:e6:87:65:d0:ef:8b:ed:95:2d:18:61:a7:8b:d5:72:5b:48:
fa:19:41:97:07:27:57:87:2c:f8:a4:ee:60:55:19:1a:75:b0:
a5:ed:f7:eb:4c:09:28:2c:3c:d9:51:a3:c6:50:45:df:1a:6b:
0f:c3:fa:d7:5e:f2:6a:35:92:43:5f:ac:14:99:d8:6e:8a:53:
75:90:9c:15:99:83:8f:4f:d9:ea:95:1b:db:46:64:b9:36:0e:
1f:6c:c4:43:d3:9e:9d:cd:ad:a2:80:b6:68:ca:05:d7:2d:86:
5f:47:5e:94:83:df:84:45:68:e3:49:2a:27:ad:4b:be:db:21:
43:15:fd:94:84:25:af:1d:52:01:a7:60:8f:f8:4c:8a:6c:41:
fe:19:55:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:31:20 2025 by rpki-client