Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RZJCMBsPvWRI-HRdbPH62RBR8w8.roa
File: RZJCMBsPvWRI-HRdbPH62RBR8w8.roa (raw, json)
Hash identifier: PzhkiEw/q/lc+xSx1rCwqPFC0uKPvkRODS64693hyUk=
Subject key identifier: 45:92:42:30:1B:0F:BD:64:48:F8:74:5D:6C:F1:FA:D9:10:51:F3:0F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A93C6BE69483BFC514685637AFA4F4D1A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RZJCMBsPvWRI-HRdbPH62RBR8w8.roa
Signing time: Thu 14 Sep 2023 12:59:50 +0000
ROA not before: Thu 14 Sep 2023 12:59:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47957
IP address blocks: 194.71.146.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:c6:be:69:48:3b:fc:51:46:85:63:7a:fa:4f:4d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 14 12:59:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459242301b0fbd6448f8745d6cf1fad91051f30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:f4:d7:05:4a:8b:93:75:b3:e2:d3:13:8b:
01:9e:6e:e8:fa:51:8e:d5:41:6b:b6:3c:31:f9:3a:
66:17:31:58:02:ca:3f:7a:41:f9:b3:a5:14:89:56:
fa:9a:63:74:82:54:73:66:6d:2f:9a:a9:ec:2c:55:
88:84:8e:26:95:96:21:ae:29:1b:75:27:e2:1c:48:
dc:6c:8d:01:3a:a6:2c:69:66:33:00:ea:0e:52:57:
96:0e:be:34:7c:46:f6:e8:26:b9:1b:72:3e:44:cd:
78:ca:3b:bd:7e:bf:b1:e4:fb:8f:1f:b7:13:39:a7:
3e:4a:ad:29:a4:b6:ee:f9:2b:2a:89:b5:29:4c:6f:
09:fb:7d:89:d3:dc:8b:0d:67:66:28:8d:3e:4c:6f:
59:46:c3:68:e7:a3:12:35:3b:d4:34:81:43:b2:4a:
8a:65:80:fb:d7:59:c2:d3:f6:cb:bd:13:66:73:b3:
b2:ca:90:a6:99:60:70:26:fa:a8:52:03:94:9c:a2:
c2:17:8c:77:df:97:51:6d:d2:34:86:61:3f:d5:a2:
53:63:ed:57:58:54:d6:78:92:ef:ac:9a:5b:a5:28:
32:0c:f7:d2:ea:f2:18:72:12:a1:c2:d2:10:58:cc:
37:25:21:eb:62:4f:68:b6:2c:c1:66:c6:8c:ad:18:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:92:42:30:1B:0F:BD:64:48:F8:74:5D:6C:F1:FA:D9:10:51:F3:0F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/RZJCMBsPvWRI-HRdbPH62RBR8w8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
21:d9:28:b7:24:e1:68:cd:fa:73:06:9b:13:54:73:11:09:ad:
df:fc:d6:e3:64:0b:87:76:9f:a9:7d:b1:86:71:bc:c7:2a:3e:
3c:60:81:f1:9e:88:6f:55:77:49:42:6e:1e:ca:3f:87:35:28:
87:64:fe:4c:96:16:50:1d:8a:60:8b:de:02:8a:d2:63:bd:e6:
cc:07:2e:de:1c:76:9f:8c:a3:ea:9c:82:47:19:30:6e:a7:e4:
b1:d5:b0:a2:93:a4:98:9a:69:7a:47:72:aa:2e:8e:c7:f9:b5:
8d:5a:13:46:53:09:20:42:f5:2a:09:3e:38:8e:26:b4:31:cb:
a0:b2:63:ea:c9:38:d3:d0:f4:11:79:a0:92:e7:87:9b:7c:5f:
d8:e6:61:ad:20:8e:ec:a7:ae:8a:73:fb:e3:18:c5:55:0b:85:
91:d4:03:68:82:7e:13:a0:f1:fc:59:dd:7e:76:91:5f:dc:18:
cb:a6:0e:fe:ef:97:87:3b:a5:94:cb:9e:c1:b1:29:b7:86:67:
93:a9:6e:a6:d7:8e:5d:bc:f8:a7:68:23:66:08:ca:c8:26:01:
66:71:9c:c5:ab:c7:9e:ad:37:b5:0f:4b:41:6c:cb:fd:57:9c:
b5:ab:04:2a:00:c2:50:26:e8:fc:f1:a6:a5:f9:57:87:19:b0:
0d:e7:87:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqTxr5pSDv8UUaFY3r6T00aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwOTE0MTI1OTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkyNDIzMDFiMGZiZDY0NDhmODc0NWQ2Y2YxZmFkOTEwNTFmMzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZL01wVKi5N1s+LTE4sBnm7o+lGO
1UFrtjwx+TpmFzFYAso/ekH5s6UUiVb6mmN0glRzZm0vmqnsLFWIhI4mlZYhrikb
dSfiHEjcbI0BOqYsaWYzAOoOUleWDr40fEb26Ca5G3I+RM14yju9fr+x5PuPH7cT
Oac+Sq0ppLbu+SsqibUpTG8J+32J09yLDWdmKI0+TG9ZRsNo56MSNTvUNIFDskqK
ZYD711nC0/bLvRNmc7OyypCmmWBwJvqoUgOUnKLCF4x335dRbdI0hmE/1aJTY+1X
WFTWeJLvrJpbpSgyDPfS6vIYchKhwtIQWMw3JSHrYk9otizBZsaMrRgDiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWSQjAbD71kSPh0XWzx+tkQUfMPMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvUlpKQ01Cc1B2V1JJLUhSZGJQSDYyUkJSOHc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkeSMA0G
CSqGSIb3DQEBCwUAA4IBAQAh2Si3JOFozfpzBpsTVHMRCa3f/NbjZAuHdp+pfbGG
cbzHKj48YIHxnohvVXdJQm4eyj+HNSiHZP5MlhZQHYpgi94CitJjvebMBy7eHHaf
jKPqnIJHGTBup+Sx1bCik6SYmml6R3KqLo7H+bWNWhNGUwkgQvUqCT44jia0Mcug
smPqyTjT0PQReaCS54ebfF/Y5mGtII7sp66Kc/vjGMVVC4WR1ANogn4ToPH8Wd1+
dpFf3BjLpg7+75eHO6WUy57BsSm3hmeTqW6m145dvPinaCNmCMrIJgFmcZzFq8ee
rTe1D0tBbMv9V5y1qwQqAMJQJuj88aal+VeHGbAN54ed
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:01 2025 by rpki-client