Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Z_BRQu_0kjHlnvH30JypE7du2SY.roa
File: Z_BRQu_0kjHlnvH30JypE7du2SY.roa (raw, json)
Hash identifier: ugWwz4Fkug1tszSHpvW1HtX3hblmovBBQ11IUXklko8=
Subject key identifier: 67:F0:51:42:EF:F4:92:31:E5:9E:F1:F7:D0:9C:A9:13:B7:6E:D9:26
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 0E43746C
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Z_BRQu_0kjHlnvH30JypE7du2SY.roa
Signing time: Wed 20 Apr 2022 06:37:56 +0000
ROA not before: Wed 20 Apr 2022 06:37:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198974
IP address blocks: 109.236.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239301740 (0xe43746c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Apr 20 06:37:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67f05142eff49231e59ef1f7d09ca913b76ed926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:29:1e:92:9d:92:77:12:24:9f:e6:40:12:
be:b2:d4:88:26:b8:ee:60:fc:bb:51:e3:5a:90:ff:
d4:9f:b9:31:0c:0e:67:d9:03:db:4a:c6:13:8c:d0:
0f:a2:0f:7a:0e:9f:53:ed:06:dd:ce:9a:3b:ea:0e:
59:f7:1d:53:93:86:61:56:11:db:96:70:db:5a:10:
2a:22:c4:f4:9c:bf:3f:8c:8f:ad:21:52:03:75:20:
56:fa:c1:89:7a:2f:6b:ac:bc:ec:09:6b:76:98:3c:
60:84:44:5a:3b:d3:1e:e4:ac:af:b8:53:dc:86:45:
83:d1:a8:57:df:1a:9b:d9:de:0f:16:b7:27:fe:63:
26:4d:eb:73:4f:7f:c6:36:98:94:2d:28:63:81:c5:
1e:f2:e2:85:53:0b:87:e3:5c:fe:d9:13:d0:01:25:
2e:4b:c7:ae:5a:64:e5:11:19:40:eb:ef:ce:c2:ca:
c2:5d:d7:86:16:1d:39:f9:d3:95:3a:67:ee:4d:07:
e5:28:58:88:9c:f4:cd:4e:9c:04:6e:08:02:b2:41:
f5:52:6a:67:7b:07:1a:54:7f:6f:1b:74:17:c2:b2:
fb:1c:38:aa:58:84:4b:06:44:e2:21:ef:f2:22:bc:
32:f9:b1:55:bd:23:a1:e4:7e:b3:89:c1:9a:10:f7:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F0:51:42:EF:F4:92:31:E5:9E:F1:F7:D0:9C:A9:13:B7:6E:D9:26
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/Z_BRQu_0kjHlnvH30JypE7du2SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.236.245.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a6:b9:cd:2d:58:7f:1a:41:8d:80:ab:23:55:7d:26:f9:97:
a4:6a:1d:2e:ac:27:67:88:68:86:46:5f:9e:76:3f:ac:55:60:
05:11:b3:24:43:48:8f:e6:9f:f2:18:66:e0:e4:cb:8b:3b:9b:
05:31:03:da:34:78:10:89:91:ab:a5:f9:29:01:ce:dc:b3:7f:
97:50:23:95:08:b9:ee:cc:50:de:bf:57:f4:72:e5:db:36:e5:
98:53:e0:b7:1d:90:c0:10:8c:04:0e:99:55:5e:87:03:99:e2:
ca:57:eb:e2:a2:ea:46:99:77:8b:13:48:6f:49:3c:8d:fa:ba:
bf:17:76:7c:f5:fb:90:e6:c1:72:b2:0b:63:fb:ae:c6:e3:63:
50:fd:f7:8e:c6:83:cf:ce:1d:f0:a6:e9:99:c1:33:d3:c6:6f:
e9:b4:0f:1a:fb:f5:88:7a:73:67:66:0b:01:9b:ab:0e:26:a0:
80:df:fa:85:5d:70:ef:65:b3:f0:b3:96:1e:cf:40:1e:7e:6a:
a1:d8:3e:e1:d5:dc:fe:fd:2d:80:3e:83:14:5b:d4:e0:80:44:
47:e3:d7:88:69:b8:30:ce:0d:6f:4e:06:d9:a7:3c:31:0b:3e:
f9:f6:fe:dd:5c:18:ce:f0:9a:a9:8c:da:47:a2:e3:d4:56:8f:
63:15:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:50 2025 by rpki-client