Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zjqcu3MWFxz9EJtt0MpyxZLs2sc.roa
File: Zjqcu3MWFxz9EJtt0MpyxZLs2sc.roa (raw, json)
Hash identifier: XsOkwj0AdM7vxjeZA5Dc60SItEPGKPEmqU6MzlxKpL4=
Subject key identifier: 66:3A:9C:BB:73:16:17:1C:FD:10:9B:6D:D0:CA:72:C5:92:EC:DA:C7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB08EBA7242A8735798359EFDF400C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zjqcu3MWFxz9EJtt0MpyxZLs2sc.roa
Signing time: Sun 01 Jan 2023 10:05:23 +0000
ROA not before: Sun 01 Jan 2023 10:05:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205078
IP address blocks: 193.180.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:08:eb:a7:24:2a:87:35:79:83:59:ef:df:40:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=663a9cbb7316171cfd109b6dd0ca72c592ecdac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:4c:7a:0d:19:d5:49:f5:6e:da:d6:87:a2:
da:1c:98:f5:ee:7e:70:e0:7b:ed:c6:cc:9f:ba:2f:
fe:28:bb:25:a8:c2:9a:da:95:c2:0a:41:1c:22:92:
78:67:12:77:de:53:bf:9b:4e:56:b5:46:35:94:2d:
ee:9e:fa:ae:2e:0d:82:d7:b5:52:03:fb:87:c5:c2:
54:8f:d6:88:25:b5:6b:e7:0a:a7:9a:ec:e8:c5:35:
f5:b8:c5:70:7a:f9:28:7c:56:1d:cd:3a:06:8c:10:
39:77:fc:55:62:00:ae:84:a7:26:0b:d2:a0:d2:16:
52:3b:65:28:ee:d2:09:aa:61:f9:36:73:ed:b1:ff:
69:4f:45:ca:2e:78:84:9f:05:0e:33:88:7e:c3:cd:
45:91:6f:9e:f2:dc:b5:a9:7a:4b:e4:00:92:76:ff:
b8:72:76:c5:4c:64:e1:61:fc:f3:8d:83:a0:11:7d:
4d:c0:15:6e:dd:c8:60:75:5d:f3:24:a1:01:5d:ab:
9e:41:60:6c:63:15:23:34:57:19:d4:b2:f2:8d:bf:
84:b8:0f:2d:a9:a5:7b:0d:91:f7:90:ef:0c:c6:a7:
a9:08:c0:90:48:dc:54:ea:76:b9:f8:81:bc:73:e2:
13:5d:66:72:fa:25:51:06:9a:8a:5b:c9:5d:70:fc:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:9C:BB:73:16:17:1C:FD:10:9B:6D:D0:CA:72:C5:92:EC:DA:C7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Zjqcu3MWFxz9EJtt0MpyxZLs2sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
20:21:11:1a:1c:c2:6b:40:d0:a0:20:89:01:4d:14:d9:be:b1:
70:b9:cb:f4:c1:76:9c:d5:56:31:e8:28:8b:80:70:07:0d:8b:
17:06:fc:5a:de:bf:5e:9a:35:02:5b:68:33:c2:56:33:aa:82:
fc:0a:02:92:61:31:7a:c2:01:6b:dc:36:ae:cb:f7:f4:de:f3:
c0:06:05:5d:a5:f6:29:bc:fd:e2:05:65:9a:09:a7:89:3d:55:
4d:6b:05:81:0e:d1:e4:22:64:61:e5:d0:e5:89:d6:dd:b6:f2:
37:15:7c:8b:5f:a1:a0:15:d7:7f:c7:5c:c6:b6:ae:86:c4:b1:
38:29:3f:a1:66:18:13:21:a5:95:10:bb:6b:6b:ef:e0:65:d5:
71:98:f0:ba:33:a5:0e:02:ba:d3:f4:1f:b6:87:e4:97:2b:cc:
67:79:03:d2:1a:b8:e0:bb:11:67:7c:17:69:9e:9b:f8:60:f3:
a6:34:0a:65:7a:55:d1:90:30:d9:f1:54:e4:f6:30:f7:33:55:
1a:5a:cb:e9:43:20:d1:66:75:15:fb:1c:25:f4:87:55:52:51:
4b:cd:f5:7c:5f:8d:ad:e7:9e:87:77:1f:21:01:6f:f1:8e:6f:
38:5f:85:0c:c6:f6:2e:64:a1:be:3c:e7:0a:f3:1b:59:97:a6:
ab:1c:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:08 2025 by rpki-client