Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/ZIeT-ttqmoCWHbODHg3ZZAJJrnk.roa
File: ZIeT-ttqmoCWHbODHg3ZZAJJrnk.roa (raw, json)
Hash identifier: ZCpdyFbqS6ZdGYQno6RaBvv5g3zDC9+lXh5NU2HG9LE=
Subject key identifier: 64:87:93:FA:DB:6A:9A:80:96:1D:B3:83:1E:0D:D9:64:02:49:AE:79
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 018668E8DFA2491953A746D1AB5E2D3BD01A
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/ZIeT-ttqmoCWHbODHg3ZZAJJrnk.roa
Signing time: Sun 19 Feb 2023 09:02:17 +0000
ROA not before: Sun 19 Feb 2023 09:02:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209500
IP address blocks: 83.229.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:e8:df:a2:49:19:53:a7:46:d1:ab:5e:2d:3b:d0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Feb 19 09:02:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=648793fadb6a9a80961db3831e0dd9640249ae79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:57:b7:bf:83:2a:d7:0c:e5:27:4e:3a:51:
b9:27:b3:22:a1:f0:41:57:c4:2c:34:de:c7:12:5b:
f8:d0:d3:6f:b5:60:fb:7d:9f:2c:82:49:45:98:23:
52:d6:0e:d7:67:5a:61:f0:37:8b:f3:4a:b9:db:4b:
85:61:db:d9:4b:22:b6:b2:f7:3b:25:ff:79:e1:72:
f6:f2:a8:14:ed:a7:8a:07:0e:a1:82:03:46:c6:52:
b9:43:44:fb:b9:88:cd:4b:9c:7e:39:a0:70:d6:60:
d1:ba:9d:e4:30:ee:0b:bf:dc:7e:25:aa:34:18:dd:
44:81:d9:64:7a:86:9b:ff:94:75:ca:cd:5c:b7:7d:
6e:9c:cc:7f:cf:f6:bf:56:0b:02:55:67:28:de:a7:
fc:67:cb:13:ea:6d:0a:8b:1f:dc:ae:de:34:0f:28:
d6:f7:a5:b3:ef:f1:7a:a5:e0:f9:fd:6d:97:21:da:
8c:c0:3b:ec:fe:b7:ab:7b:86:15:d5:0a:2c:14:83:
1b:5b:90:97:b9:b5:8f:d6:f3:e2:b0:75:54:45:5b:
ee:05:5f:da:cd:86:eb:bd:9d:f0:78:00:63:2e:1c:
ce:17:6e:79:e9:42:e6:77:7e:0e:1d:16:ef:c7:42:
9a:2f:fd:c1:48:06:92:95:b1:10:de:66:b7:4b:15:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:87:93:FA:DB:6A:9A:80:96:1D:B3:83:1E:0D:D9:64:02:49:AE:79
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/ZIeT-ttqmoCWHbODHg3ZZAJJrnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.62.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e7:55:29:36:94:b5:8b:23:42:af:f2:83:59:6d:e2:d1:50:
54:bd:65:04:a8:d9:e1:15:15:b2:04:b7:70:f2:03:30:5a:bc:
c9:74:c2:21:2a:f4:6c:26:12:00:46:85:93:d4:76:23:16:27:
1f:39:08:8f:2c:79:39:e5:11:08:82:ad:c6:24:be:33:28:bd:
e1:cc:24:f3:b4:fd:72:ad:dd:f1:f5:a4:0a:2a:45:57:a4:c7:
34:06:fc:3f:e0:24:56:ef:07:15:5d:f9:aa:c2:2a:32:df:77:
a7:b4:5c:3f:20:c1:77:06:03:3b:d1:d7:48:d8:12:4c:6a:4e:
bb:a9:28:04:67:38:f4:58:20:49:05:6b:76:7b:95:75:63:87:
79:0a:24:34:73:40:c5:6d:c0:23:18:7e:a3:f8:04:ce:1e:fc:
e7:48:37:e8:8b:98:eb:0a:e3:68:83:36:67:1e:39:54:26:4a:
d8:51:6f:36:17:fd:40:03:e1:51:b1:df:3d:ce:cf:dc:93:6c:
cb:1c:f8:03:e2:9a:28:bb:51:9d:e6:53:8e:58:b6:87:d9:7b:
4e:71:ea:3f:f2:7f:84:d2:e1:8e:50:cb:08:32:53:1a:e8:c4:
9d:ed:31:52:97:91:92:1c:8f:a8:43:4d:b7:b8:95:70:b9:7f:
4d:d0:6a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:58:55 2025 by rpki-client