Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/ZkvcPJCR4p3lKy_zTDc2JLfTPbA.roa
File: ZkvcPJCR4p3lKy_zTDc2JLfTPbA.roa (raw, json)
Hash identifier: SXiaL3WbM8FoXt2tcV2+HowDSDJWLM3KfUV+G3PeCHw=
Subject key identifier: 66:4B:DC:3C:90:91:E2:9D:E5:2B:2F:F3:4C:37:36:24:B7:D3:3D:B0
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 06387507
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/ZkvcPJCR4p3lKy_zTDc2JLfTPbA.roa
Signing time: Sat 01 Jan 2022 06:01:08 +0000
ROA not before: Sat 01 Jan 2022 06:01:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211062
IP address blocks: 77.75.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104363271 (0x6387507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Jan 1 06:01:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=664bdc3c9091e29de52b2ff34c373624b7d33db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:5f:f6:75:57:ff:4e:34:b8:83:1d:6b:04:
9e:a9:50:df:e7:d6:0a:b4:2e:01:a0:2c:32:1c:6a:
0c:8e:e8:6a:8a:0c:50:42:5f:15:31:1e:d9:7d:c7:
f0:12:9c:42:22:bb:13:85:0f:3c:33:04:86:61:7b:
ee:a6:00:7f:a3:34:c9:a0:07:d3:49:fd:56:75:3c:
f7:6a:cf:ab:48:94:86:2d:8a:a6:6b:56:b1:c3:fd:
c1:6d:56:32:f7:06:04:bb:e4:ed:7f:cd:a4:c8:8d:
7b:0c:ac:67:06:ce:78:0c:5e:cd:91:d0:ec:8b:3c:
f7:aa:db:96:97:7a:17:11:3a:49:99:56:34:2f:91:
b6:9c:92:85:22:a2:30:0d:af:5d:9f:82:05:83:15:
51:35:49:66:78:2b:de:f7:68:6b:dd:0d:b7:38:c5:
4f:3a:1e:64:ee:01:74:2f:a0:18:49:f5:04:8e:8f:
6d:32:1d:4d:59:2a:2f:39:36:d1:03:f0:bc:32:68:
e4:ec:91:84:d8:4f:bf:9f:2a:f0:8f:d1:ce:17:fc:
c0:85:fe:6c:57:e9:fc:95:bf:5a:55:76:61:2f:a4:
33:e0:f3:88:1a:31:ab:1d:38:a5:8f:f5:74:32:1e:
e0:96:72:22:28:9d:06:6d:0b:38:a7:98:73:4f:4a:
26:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4B:DC:3C:90:91:E2:9D:E5:2B:2F:F3:4C:37:36:24:B7:D3:3D:B0
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/ZkvcPJCR4p3lKy_zTDc2JLfTPbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:d0:e5:4c:1c:b6:5c:04:e8:c6:aa:99:b6:aa:89:4e:ec:0f:
eb:2e:6a:69:db:4c:a5:63:68:b2:48:13:fa:49:29:76:fd:01:
30:75:a8:40:b0:9c:50:b7:c9:86:f7:5d:dd:60:2c:65:42:f6:
d3:14:1c:0b:3c:25:1d:1f:16:a8:56:11:8b:94:d0:af:08:3a:
d1:2a:75:f5:d7:8a:04:0c:58:4e:1c:aa:3e:45:c9:04:8d:7a:
b1:69:17:53:87:90:a9:ce:9f:6c:f2:ff:1e:16:d0:23:30:77:
88:e6:05:aa:68:5c:fb:1e:d5:4f:30:52:ed:e1:2e:04:c4:82:
2c:c0:82:65:be:2b:61:f2:d6:b3:b5:9a:0c:0c:32:99:d6:0e:
d1:51:f9:5d:27:4e:f2:ad:56:2b:ff:ca:1f:ba:b4:79:56:c2:
1a:18:fd:b0:e5:54:42:ad:bb:ea:77:e9:56:f9:08:b0:3d:32:
47:e9:cd:7b:7e:2b:24:16:63:d4:f8:4a:09:65:66:8e:46:25:
c2:b6:b4:3a:55:cd:88:54:cc:e2:01:b6:1e:6e:83:91:20:de:
23:33:22:22:76:3c:f4:dd:e3:b7:40:87:07:a9:e1:09:57:4c:
6e:54:4e:86:52:ff:97:5d:a7:c1:1c:2d:a5:85:30:d7:78:f2:
5d:6d:f1:60
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBjh1BzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NDUyYjAzZTFiMDE3MDk2Mzg5NDBkOTU5Mjk4M2NkZTc3ZWNhYjc3MB4XDTIyMDEw
MTA2MDEwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjY0YmRjM2M5MDkx
ZTI5ZGU1MmIyZmYzNGMzNzM2MjRiN2QzM2RiMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALHSX/Z1V/9ONLiDHWsEnqlQ3+fWCrQuAaAsMhxqDI7oaooM
UEJfFTEe2X3H8BKcQiK7E4UPPDMEhmF77qYAf6M0yaAH00n9VnU892rPq0iUhi2K
pmtWscP9wW1WMvcGBLvk7X/NpMiNewysZwbOeAxezZHQ7Is896rblpd6FxE6SZlW
NC+RtpyShSKiMA2vXZ+CBYMVUTVJZngr3vdoa90NtzjFTzoeZO4BdC+gGEn1BI6P
bTIdTVkqLzk20QPwvDJo5OyRhNhPv58q8I/Rzhf8wIX+bFfp/JW/WlV2YS+kM+Dz
iBoxqx04pY/1dDIe4JZyIiidBm0LOKeYc09KJksCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRmS9w8kJHineUrL/NMNzYkt9M9sDAfBgNVHSMEGDAWgBSEUrA+GwFwljiU
DZWSmDzed+yrdzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hGS3dQaHNCY0pZNGxBMlZrcGc4M25mc3EzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTQvMDExZjZlLWU5MjgtNGYyYi1hYTI0LTIwMGZjMjc0Y2IwMS8x
L1prdmNQSkNSNHAzbEt5X3pURGMySkxmVFBiQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQv
MDExZjZlLWU5MjgtNGYyYi1hYTI0LTIwMGZjMjc0Y2IwMS8xL2hGS3dQaHNCY0pZ
NGxBMlZrcGc4M25mc3EzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1LlDANBgkqhkiG9w0BAQsFAAOC
AQEAXdDlTBy2XAToxqqZtqqJTuwP6y5qadtMpWNoskgT+kkpdv0BMHWoQLCcULfJ
hvdd3WAsZUL20xQcCzwlHR8WqFYRi5TQrwg60Sp19deKBAxYThyqPkXJBI16sWkX
U4eQqc6fbPL/HhbQIzB3iOYFqmhc+x7VTzBS7eEuBMSCLMCCZb4rYfLWs7WaDAwy
mdYO0VH5XSdO8q1WK//KH7q0eVbCGhj9sOVUQq276nfpVvkIsD0yR+nNe34rJBZj
1PhKCWVmjkYlwra0OlXNiFTM4gG2Hm6DkSDeIzMiInY89N3jt0CHB6nhCVdMblRO
hlL/l12nwRwtpYUw13jyXW3xYA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 07:56:43 2025 by rpki-client