Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/Zn0dQms26SAUHSNxagDx2cyVI68.roa
File: Zn0dQms26SAUHSNxagDx2cyVI68.roa (raw, json)
Hash identifier: xqN7ahxBIEMl1NUG0l5Grkd6L4lu207vTdtVQUObJts=
Subject key identifier: 66:7D:1D:42:6B:36:E9:20:14:1D:23:71:6A:00:F1:D9:CC:95:23:AF
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 01856D4A9C21CC2DAB9DA7B4D9D9EC0EDDA6
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/Zn0dQms26SAUHSNxagDx2cyVI68.roa
Signing time: Sun 01 Jan 2023 12:24:44 +0000
ROA not before: Sun 01 Jan 2023 12:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1715
IP address blocks: 140.93.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:9c:21:cc:2d:ab:9d:a7:b4:d9:d9:ec:0e:dd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Jan 1 12:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=667d1d426b36e920141d23716a00f1d9cc9523af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:d1:38:ca:1e:22:c7:ad:6d:87:2a:e9:3d:
3f:59:bb:19:ea:03:80:93:2c:ca:0c:52:35:55:e3:
89:7e:74:8a:fe:1c:43:ed:fb:d7:8f:62:7d:4c:1e:
89:f6:74:7c:31:b6:7a:77:96:e7:47:47:63:d6:9e:
37:66:65:f2:70:df:e0:95:52:61:42:27:4c:27:89:
f8:58:8e:cd:66:6a:a9:7a:0f:f9:ae:17:e1:6d:d4:
ca:a2:3a:14:61:1a:5c:ed:9f:11:17:24:cb:d1:3e:
b6:ba:49:82:fa:e1:32:16:4b:9e:c0:cc:37:c8:9e:
02:2e:e6:9c:e6:65:7a:c4:7e:bb:58:99:46:e5:d0:
88:dc:eb:1d:cf:0e:34:d0:1b:9e:86:53:d7:35:fc:
9d:a8:b7:8a:bc:9c:c3:ee:64:84:ac:22:b7:cd:c5:
3a:81:0d:ac:99:4d:b8:7f:6b:9d:fd:86:52:3a:45:
05:b3:3a:bb:fd:74:d7:5b:d2:33:56:a9:58:df:d2:
c8:20:ae:d6:ee:a4:93:bd:7b:de:c3:76:73:4f:af:
5c:d8:1e:29:4a:42:c3:4d:29:39:e9:8e:ec:44:6f:
f2:5c:69:31:39:bf:e2:99:03:63:35:df:bb:f5:c2:
46:a5:52:13:1c:0e:b6:71:ff:bd:39:5b:06:60:a9:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7D:1D:42:6B:36:E9:20:14:1D:23:71:6A:00:F1:D9:CC:95:23:AF
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/Zn0dQms26SAUHSNxagDx2cyVI68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:53:86:3e:25:f1:03:a8:11:bf:3e:3f:d8:63:12:25:9b:03:
20:5b:44:e8:19:d6:13:51:39:88:38:96:a2:30:0e:4c:1f:9c:
d3:e8:fb:fc:1e:38:b3:9e:e9:d4:c4:1d:a0:aa:e5:ed:01:63:
22:4b:42:a9:04:22:8c:5c:be:90:30:69:8b:db:40:26:ad:e7:
b4:a8:f9:f2:48:e9:b0:6d:60:7c:bc:af:40:60:b2:80:46:95:
8b:a0:ba:18:cb:b4:46:b6:c5:78:32:15:65:fc:0e:ce:a3:7e:
b8:a3:d6:a2:c8:82:8a:63:5a:3f:23:16:5a:f8:22:19:d3:57:
ad:13:9b:92:bd:6e:ba:6a:b9:3a:4b:d3:bd:7a:03:07:57:ec:
e4:3c:e9:82:4b:fd:69:97:db:6a:02:7d:b9:d1:46:7a:13:fb:
ce:1f:b5:0a:00:0a:2a:5f:21:00:7e:6e:e2:e7:4c:e1:fa:f9:
c5:ac:ab:0e:cb:8e:02:82:5b:37:97:e3:34:8a:64:c7:1f:38:
57:64:36:83:1c:29:f3:e5:ba:bc:a6:52:bd:37:68:25:df:ae:
76:72:0c:f5:55:64:97:3b:5e:72:61:af:f6:8e:76:17:9a:f0:
c4:32:9f:32:a0:77:af:69:ff:4f:f9:73:42:c7:66:fe:d3:8c:
45:19:16:cd
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVtSpwhzC2rnae02dnsDt2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTRhMzY5MTA2NDgwM2Q4NjMwNjAyMzBhNjYwZjIzMDVl
ZWMyZTcwHhcNMjMwMTAxMTIyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjdkMWQ0MjZiMzZlOTIwMTQxZDIzNzE2YTAwZjFkOWNjOTUyM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqLROMoeIsetbYcq6T0/WbsZ6gOA
kyzKDFI1VeOJfnSK/hxD7fvXj2J9TB6J9nR8MbZ6d5bnR0dj1p43ZmXycN/glVJh
QidMJ4n4WI7NZmqpeg/5rhfhbdTKojoUYRpc7Z8RFyTL0T62ukmC+uEyFkuewMw3
yJ4CLuac5mV6xH67WJlG5dCI3Osdzw400BuehlPXNfydqLeKvJzD7mSErCK3zcU6
gQ2smU24f2ud/YZSOkUFszq7/XTXW9IzVqlY39LIIK7W7qSTvXvew3ZzT69c2B4p
SkLDTSk56Y7sRG/yXGkxOb/imQNjNd+79cJGpVITHA62cf+9OVsGYKmqhQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFGZ9HUJrNukgFB0jcWoA8dnMlSOvMB8GA1UdIwQY
MBaAFKyUo2kQZIA9hjBgIwpmDyMF7sLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAt
ZGJlNmM5MTBiYmE2LzEvWm4wZFFtczI2U0FVSFNOeGFnRHgyY3lWSTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zMDI1NmMtZjIwMS00ZjQ4LWFjYTAtZGJlNmM5MTBiYmE2
LzEvckpTamFSQmtnRDJHTUdBakNtWVBJd1h1d3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjF0wDQYJ
KoZIhvcNAQELBQADggEBAD9Thj4l8QOoEb8+P9hjEiWbAyBbROgZ1hNROYg4lqIw
DkwfnNPo+/weOLOe6dTEHaCq5e0BYyJLQqkEIoxcvpAwaYvbQCat57So+fJI6bBt
YHy8r0BgsoBGlYuguhjLtEa2xXgyFWX8Ds6jfrij1qLIgopjWj8jFlr4IhnTV60T
m5K9brpquTpL0716AwdX7OQ86YJL/WmX22oCfbnRRnoT+84ftQoACipfIQB+buLn
TOH6+cWsqw7LjgKCWzeX4zSKZMcfOFdkNoMcKfPlurymUr03aCXfrnZyDPVVZJc7
XnJhr/aOdhea8MQynzKgd69p/0/5c0LHZv7TjEUZFs0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:11 2025 by rpki-client