Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/ZQRJ3x93RaDDyeU0MI2R9CMLFwo.roa
File: ZQRJ3x93RaDDyeU0MI2R9CMLFwo.roa (raw, json)
Hash identifier: W2RPfnRWHnbuU3V0biaEMTp15M6b4llU13AyjRfTOoA=
Subject key identifier: 65:04:49:DF:1F:77:45:A0:C3:C9:E5:34:30:8D:91:F4:23:0B:17:0A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 01857139BB346D0D79154CA8F2FA8BB0BE36
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/ZQRJ3x93RaDDyeU0MI2R9CMLFwo.roa
Signing time: Mon 02 Jan 2023 06:44:46 +0000
ROA not before: Mon 02 Jan 2023 06:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2001:678:f8c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bb:34:6d:0d:79:15:4c:a8:f2:fa:8b:b0:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Jan 2 06:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=650449df1f7745a0c3c9e534308d91f4230b170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:04:57:48:bd:fe:5a:96:84:2a:30:57:6a:
5a:92:02:fb:a0:13:8e:22:13:e6:5a:be:da:d0:03:
f9:27:34:cd:8e:91:a3:be:23:59:e3:47:e6:53:f8:
a2:72:a1:42:74:a4:dc:97:ab:6a:ec:56:05:52:5a:
31:3d:86:8e:b6:f1:06:4b:72:67:c2:1e:23:ff:33:
d7:49:1f:3c:c2:f4:4f:2a:f8:31:8e:63:38:66:94:
41:6b:4e:47:f8:6f:28:6f:e7:f0:98:71:42:a4:35:
8d:d3:45:70:51:c4:65:ab:6c:03:92:38:62:d8:51:
30:ea:2a:a3:49:ab:52:83:c1:fd:6f:ae:93:86:75:
a3:11:ad:15:4b:35:25:7f:4d:ed:12:f0:b0:09:1a:
b5:c1:42:4f:73:49:ec:de:dd:eb:94:29:0b:09:4e:
0f:41:5d:ce:ba:48:09:b2:66:1f:42:84:9c:08:b5:
d8:c1:b9:77:79:25:92:4b:f3:f9:9f:dd:8c:20:17:
84:b6:48:ab:99:1b:07:67:78:08:00:c7:0d:41:d8:
a5:c5:78:3e:a4:42:cc:03:a2:6c:a6:37:b1:da:43:
0c:b4:8f:75:fb:50:dd:8f:e4:a7:58:7d:04:e2:43:
9e:0a:ec:64:69:a6:01:c0:fc:3e:69:9f:b6:c5:13:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:04:49:DF:1F:77:45:A0:C3:C9:E5:34:30:8D:91:F4:23:0B:17:0A
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/ZQRJ3x93RaDDyeU0MI2R9CMLFwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f8c::/48
Signature Algorithm: sha256WithRSAEncryption
87:24:9a:62:e7:15:b3:33:41:69:65:f3:55:66:66:06:ea:21:
8a:35:05:9a:42:f3:d1:08:33:33:16:78:64:24:0f:d9:79:33:
b3:21:62:a6:e6:da:86:68:52:49:7f:cc:a3:e1:fc:1d:c8:ba:
11:3c:13:06:fd:09:84:22:8c:81:de:c3:43:22:e3:48:1a:cb:
12:62:8a:b2:b0:5b:71:e0:eb:ed:b9:fa:da:b0:e7:c3:dd:45:
5e:2c:c5:42:50:01:b8:c8:f3:c9:4b:f2:af:5f:be:ab:06:d8:
86:f3:50:ae:39:ab:89:3f:cf:5c:d9:15:c9:34:01:90:d1:48:
84:28:b1:a0:05:06:4f:54:fb:b8:f1:96:e4:76:1d:96:f2:92:
8a:ab:ff:68:af:d3:59:e9:3f:4e:f0:41:8b:cb:85:68:94:a1:
74:42:0f:6f:e0:10:83:a8:e3:7c:62:6e:c4:ff:72:b6:e3:d5:
3f:52:f5:19:b1:40:58:fe:9e:1b:3d:85:4b:a6:25:1c:6b:b6:
97:89:af:0b:eb:8c:65:8a:7f:01:49:69:22:30:bc:78:35:63:
eb:ca:28:6e:72:69:de:8f:a4:04:b6:a2:45:ff:52:c5:17:39:
42:d9:29:8b:fd:01:d1:53:dd:62:44:50:45:d7:86:13:b0:bc:
93:dc:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:16 2025 by rpki-client