Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ZPv0nSs9oI5lI2hUcHzAsA_oWTA.roa
File: ZPv0nSs9oI5lI2hUcHzAsA_oWTA.roa (raw, json)
Hash identifier: 507hZHc7Gr9I9lW8QfEs2d2SlzHGwdcBWoiFQ1Kgp/c=
Subject key identifier: 64:FB:F4:9D:2B:3D:A0:8E:65:23:68:54:70:7C:C0:B0:0F:E8:59:30
Certificate issuer: /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial: 0182204055041B5473813A9FC7AB19DB2A52
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ZPv0nSs9oI5lI2hUcHzAsA_oWTA.roa
Signing time: Thu 21 Jul 2022 10:14:23 +0000
ROA not before: Thu 21 Jul 2022 10:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8447
IP address blocks: 157.247.0.0/16 maxlen: 16
192.102.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:40:55:04:1b:54:73:81:3a:9f:c7:ab:19:db:2a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Validity
Not Before: Jul 21 10:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64fbf49d2b3da08e65236854707cc0b00fe85930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:3c:95:2b:b2:75:cb:fb:20:57:9f:80:df:
f1:2b:52:35:da:b6:99:6e:76:bd:f4:64:49:24:aa:
62:07:1b:b4:a6:8d:a0:25:9a:9a:7c:e6:d7:4c:d9:
1f:7c:9c:df:3a:18:12:2c:47:35:62:fd:4c:35:a0:
b6:0e:93:7c:b1:7d:9a:3d:bf:ce:9e:73:f5:5a:89:
3f:ff:e0:c1:86:23:9c:cb:b6:44:cd:41:65:03:b5:
80:d2:1d:cc:06:2f:c9:6b:95:55:ed:80:bb:15:f6:
3b:25:67:86:5b:15:36:4b:60:e6:86:1b:10:73:8e:
55:e0:f9:a4:c6:4e:65:f3:cc:82:d8:65:60:bc:a1:
95:c8:7c:75:6d:67:b0:28:42:c0:f5:a5:b9:15:29:
a4:b2:ba:20:79:a0:3f:a7:5e:a3:23:1a:99:79:93:
5f:76:a8:a0:fe:01:76:d9:0a:33:a9:64:9e:04:36:
ae:02:13:a3:5e:e8:ae:a5:76:7b:af:8c:31:c9:81:
99:36:37:84:c9:69:fd:7f:d8:a5:4a:d8:27:4e:9c:
89:d9:04:8b:40:12:34:19:52:61:2e:b7:10:a7:99:
3f:61:b9:22:9c:04:c5:9d:8c:25:00:f3:a5:a4:49:
b5:e3:0f:ee:db:e5:17:04:19:76:a3:51:34:3d:98:
34:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FB:F4:9D:2B:3D:A0:8E:65:23:68:54:70:7C:C0:B0:0F:E8:59:30
X509v3 Authority Key Identifier:
keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/ZPv0nSs9oI5lI2hUcHzAsA_oWTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.247.0.0/16
192.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:f3:ec:dd:d6:09:9e:36:ee:ca:1b:04:e9:0b:d8:94:27:
c5:39:5b:f7:ae:f2:ff:b8:76:39:af:2a:3d:fd:fb:c7:bb:83:
99:65:8f:ca:a8:8e:8c:a5:9b:2a:da:c8:e5:ef:b3:51:2a:03:
46:53:10:c8:d7:05:e2:70:20:dd:f8:45:ce:78:09:29:1c:b4:
1d:de:f0:af:f9:de:1e:f2:a1:25:69:cc:c4:ee:43:d4:1d:85:
12:fa:51:bd:50:28:88:88:9c:b9:ec:e9:33:e4:10:d1:3f:a7:
d5:42:97:e6:75:4c:49:6a:c4:4e:8b:c8:9e:82:4c:e3:06:12:
ee:67:28:fd:16:2e:8d:93:a4:02:23:e1:34:08:a8:db:c5:3c:
76:ed:aa:5c:92:29:0e:c6:e1:ac:dd:28:5f:7b:a8:e8:f8:e5:
9a:39:85:bd:46:a9:21:83:d8:42:ff:c4:57:51:2e:77:93:40:
9f:a7:f6:a5:90:22:81:a8:85:7a:9f:07:32:46:90:39:c5:d4:
e9:89:2c:57:13:c9:67:69:80:e7:bc:ba:89:1b:85:46:ed:d8:
7d:ba:28:72:a2:9c:5d:b8:33:8f:7a:58:70:cc:93:ef:b1:5f:
80:fe:74:8b:dc:c9:a3:cb:db:01:d6:5b:89:37:5f:0f:a8:30:
26:00:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:45 2025 by rpki-client