Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/zy7-_7_30-ebq8CHzoGCafWS7X0.roa
File: zy7-_7_30-ebq8CHzoGCafWS7X0.roa (raw, json)
Hash identifier: V5xHP5si9b2KxmkMyoL6QEuRWMfYz+pL4FUOQhdp/SI=
Subject key identifier: CF:2E:FE:FF:BF:F7:D3:E7:9B:AB:C0:87:CE:81:82:69:F5:92:ED:7D
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 0186E03443CA6C17AD9994D18CE5E41891C9
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/zy7-_7_30-ebq8CHzoGCafWS7X0.roa
Signing time: Tue 14 Mar 2023 12:59:26 +0000
ROA not before: Tue 14 Mar 2023 12:59:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205473
IP address blocks: 188.72.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:34:43:ca:6c:17:ad:99:94:d1:8c:e5:e4:18:91:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Mar 14 12:59:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf2efeffbff7d3e79babc087ce818269f592ed7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:95:55:4e:c0:51:ed:48:36:1e:7f:44:79:
9e:9e:a5:7f:10:1e:48:d3:d7:db:36:66:c5:e3:de:
58:97:d7:0d:08:0c:7e:40:30:51:72:a7:82:54:3b:
49:59:7c:c4:63:ea:08:7f:f4:8e:68:3c:a9:9b:59:
fb:35:69:65:1c:a1:99:e1:db:df:80:fb:de:cb:5e:
a1:6f:90:0e:91:82:eb:4f:70:e5:82:a2:d9:b0:74:
16:5f:42:59:c6:26:e6:eb:f6:25:9a:9e:48:7a:81:
35:b8:0c:4e:e3:6a:99:3a:ca:62:f5:4f:09:a1:64:
20:8a:5a:27:49:c1:46:5e:6f:7a:7c:44:ef:97:18:
8f:73:a7:76:78:a9:d9:f5:4e:ff:d7:55:51:df:bb:
91:dc:7d:47:8b:21:52:cf:95:10:84:7c:1b:d5:39:
07:a2:13:1d:5d:d2:6c:80:b3:8e:41:2f:db:1b:c9:
77:13:25:f3:4d:eb:39:3b:b8:ce:c8:04:42:b1:e4:
ab:8a:20:39:f9:5a:a9:a3:ba:ca:5d:ca:41:56:9d:
4f:84:45:99:1d:65:41:3d:b2:1d:be:9a:bf:23:da:
6b:17:2b:99:df:c4:e3:b6:e1:4b:0c:39:81:33:25:
3f:b9:7a:97:ad:cf:b9:c6:88:d1:d5:d8:b5:94:02:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:FE:FF:BF:F7:D3:E7:9B:AB:C0:87:CE:81:82:69:F5:92:ED:7D
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/zy7-_7_30-ebq8CHzoGCafWS7X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:04:e4:ee:e8:ea:8a:dd:8a:f5:fc:85:fa:d4:ba:5e:cf:01:
3c:a5:05:70:cd:d8:1c:bb:c0:76:85:bf:08:f1:17:a0:55:f0:
46:f8:3f:db:47:ef:6d:10:1c:2d:5f:48:06:1d:85:f1:fc:10:
2c:4d:12:df:b2:00:90:de:51:95:a6:bd:68:06:db:6a:2a:ea:
9e:07:45:03:c5:54:48:ce:43:56:66:67:43:0e:1b:80:19:40:
f3:30:97:86:39:79:d2:fc:f8:75:44:b4:2f:63:27:12:38:00:
5a:1a:c1:97:d6:f8:4e:75:e0:d4:07:c2:d3:f6:f9:4d:da:89:
d5:81:34:10:cb:2c:c7:5f:76:5d:4a:ef:b5:b7:41:4f:dd:e7:
4e:43:a4:42:dc:21:05:8d:01:28:b9:25:0a:90:0f:1b:83:6a:
71:d7:db:95:d6:84:63:5e:7a:05:16:e2:79:74:3e:e6:9e:ba:
04:a4:68:91:43:16:a6:ae:f2:92:9c:91:74:b5:12:17:78:c2:
31:d6:0e:67:24:25:f0:16:43:e5:2d:31:de:fd:25:bc:82:6b:
8e:f6:27:6a:6b:b5:e1:31:db:cd:df:17:9b:3b:67:0c:ec:f0:
27:36:b2:54:98:83:af:60:7c:f1:94:71:da:df:7f:10:63:6f:
dd:a9:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:16:39 2025 by rpki-client