Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Zuc-kPHOVBMskHE_xPtf3QmpuSs.roa
File: Zuc-kPHOVBMskHE_xPtf3QmpuSs.roa (raw, json)
Hash identifier: ttNosGALBUHRNgvGILmHWPoWeF7ZTWX6xkJMYxZ7vtM=
Subject key identifier: 66:E7:3E:90:F1:CE:54:13:2C:90:71:3F:C4:FB:5F:DD:09:A9:B9:2B
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B2AFF7AEEF8465D5D23B8DAC6ED40
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Zuc-kPHOVBMskHE_xPtf3QmpuSs.roa
Signing time: Sun 01 Jan 2023 18:14:52 +0000
ROA not before: Sun 01 Jan 2023 18:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213360
IP address blocks: 193.38.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:2a:ff:7a:ee:f8:46:5d:5d:23:b8:da:c6:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66e73e90f1ce54132c90713fc4fb5fdd09a9b92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:9c:46:34:8f:d4:21:ee:d9:d7:a6:a6:e7:
74:cb:18:22:80:a1:96:76:05:cf:8d:17:51:60:01:
8a:60:f0:91:31:e5:1e:f1:41:9a:1a:11:28:3b:11:
30:d4:20:f5:d9:ba:81:84:a4:90:f7:1a:0b:fc:e6:
8a:75:12:79:db:82:9d:90:7d:11:da:cc:d2:86:f4:
bf:0e:3f:f3:ad:85:03:60:9d:54:8e:83:bf:9a:4b:
c9:0a:36:e8:75:fa:8c:6c:50:33:ed:6b:14:2b:99:
6e:e0:58:7d:02:43:10:50:e7:c6:5c:22:33:85:be:
b1:07:89:ce:6d:47:89:49:a7:25:e2:b8:05:78:a1:
12:c6:16:e1:13:ee:3f:04:38:d3:bb:85:20:24:61:
66:ed:fa:ec:5f:42:c1:5e:f8:e8:a3:60:7f:a2:35:
1f:a1:58:56:ca:b3:1a:0c:d5:25:5a:c3:0d:e3:50:
94:91:95:09:cb:7d:94:67:a1:e5:34:69:26:47:ce:
9a:6f:23:08:94:cd:be:d3:68:11:f5:41:f6:89:83:
96:96:27:5d:86:c3:17:76:b9:24:a9:28:e9:6c:a1:
65:04:84:3a:d7:e4:9b:34:d8:6d:c3:fc:dc:ba:ab:
b5:8c:c4:ff:1a:fd:e8:e9:56:bf:99:23:0c:73:cb:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:3E:90:F1:CE:54:13:2C:90:71:3F:C4:FB:5F:DD:09:A9:B9:2B
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Zuc-kPHOVBMskHE_xPtf3QmpuSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:65:7a:59:10:e5:66:61:7f:11:15:ad:2e:5b:66:aa:6c:
e9:4d:5f:ae:f1:b4:17:f8:6b:6e:c9:47:e1:e9:c8:1b:b5:6a:
28:e3:36:b9:93:08:b6:56:e5:c1:f7:b9:0b:a5:37:39:c7:82:
69:87:89:9e:36:19:b5:24:1d:92:4a:e6:8a:6f:72:6b:8a:f6:
89:73:e5:de:1e:13:e2:c6:75:c2:c4:64:b4:d0:47:cb:df:5f:
ba:20:8a:e3:80:21:1e:f7:57:25:b8:09:68:f1:84:7b:b0:e1:
9d:42:ca:b1:a9:28:b6:c6:5c:f1:e5:6d:91:35:73:e5:38:e7:
90:9a:22:73:e4:be:41:86:4b:b0:42:54:28:f1:52:fd:b8:5d:
ec:06:f8:2a:ed:04:f9:4f:0e:93:1e:fc:bb:06:9c:f4:d3:5c:
16:2e:c5:2f:9c:57:3f:51:42:06:5c:6d:5f:6f:b7:14:02:ad:
9b:97:88:12:a3:f1:28:de:ff:af:b0:f8:3f:ae:fb:ab:93:30:
88:9a:f6:47:4b:be:6a:47:3b:d2:e0:0f:3a:c6:c8:71:91:5d:
6c:4a:be:67:b1:d0:82:66:c4:8a:74:72:fa:d1:ee:98:d6:36:
1f:bc:7e:a1:b0:2f:7a:99:01:d9:a2:00:24:ca:5f:6e:5e:b9:
d0:89:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:11 2025 by rpki-client