Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/Z8chIU-qjekwzOA6Z3CiquBQWaM.roa
File: Z8chIU-qjekwzOA6Z3CiquBQWaM.roa (raw, json)
Hash identifier: Xm+W8zJUgnB+I0QyNH8lXIJUYepoc70vr7EtNBRYsrg=
Subject key identifier: 67:C7:21:21:4F:AA:8D:E9:30:CC:E0:3A:67:70:A2:AA:E0:50:59:A3
Certificate issuer: /CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Certificate serial: 0187226153BD587A9DA32A2C5652F506E6F4
Authority key identifier: 5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/Z8chIU-qjekwzOA6Z3CiquBQWaM.roa
Signing time: Mon 27 Mar 2023 09:23:36 +0000
ROA not before: Mon 27 Mar 2023 09:23:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51468
IP address blocks: 141.138.172.0/22 maxlen: 22
2a03:3c00:c000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:61:53:bd:58:7a:9d:a3:2a:2c:56:52:f5:06:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f5980132d193e270ed1efe0ad2849fe8ab0d76c
Validity
Not Before: Mar 27 09:23:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67c721214faa8de930cce03a6770a2aae05059a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:97:01:d9:04:81:d2:10:71:90:33:a9:09:
c7:67:62:51:a5:ca:ef:a9:04:22:11:6a:3e:a8:88:
cb:24:3b:8a:4f:c2:e0:50:64:e0:93:0f:01:83:65:
81:e7:05:63:b9:fd:c4:83:19:92:bc:30:53:20:c7:
3a:46:cf:57:76:df:ab:62:49:9c:53:50:ba:71:85:
5d:11:47:64:b0:a3:96:fd:45:4f:7e:e3:0b:6b:d4:
48:de:8c:9d:e2:f3:4d:e4:bc:ef:07:07:71:bc:84:
9a:5e:a0:60:92:a3:95:d3:69:f0:c3:db:a6:fc:10:
0d:e3:ca:53:91:d1:83:34:50:c2:96:e9:a6:78:f7:
db:25:36:de:b8:e8:4c:e2:5a:6e:42:95:59:ca:9f:
5f:56:d4:2a:51:6a:86:25:1a:d4:d0:ee:8a:23:7c:
20:6f:a9:80:41:02:cc:c5:9d:b4:2c:12:aa:a3:26:
03:bf:64:31:ad:cd:95:c4:83:08:2a:eb:8d:7f:6a:
dd:f1:15:39:56:91:ee:51:49:9b:86:7b:5d:59:57:
45:de:eb:97:5e:0b:1a:66:e4:41:24:2b:fb:76:fc:
2f:9d:09:9a:cd:51:97:e3:df:84:6d:29:9b:29:55:
76:df:1e:4c:84:c3:cb:e8:c8:97:66:89:f2:7b:d5:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C7:21:21:4F:AA:8D:E9:30:CC:E0:3A:67:70:A2:AA:E0:50:59:A3
X509v3 Authority Key Identifier:
keyid:5F:59:80:13:2D:19:3E:27:0E:D1:EF:E0:AD:28:49:FE:8A:B0:D7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1mAEy0ZPicO0e_grShJ_oqw12w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/Z8chIU-qjekwzOA6Z3CiquBQWaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/aa8ac8-13b8-4197-be56-1e1de91a987c/1/X1mAEy0ZPicO0e_grShJ_oqw12w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.172.0/22
IPv6:
2a03:3c00:c000::/34
Signature Algorithm: sha256WithRSAEncryption
c2:ba:40:8e:fc:0e:e2:56:8b:2c:5e:16:99:b2:eb:a7:36:11:
8e:76:a5:5a:12:13:8a:2f:4d:f9:0a:5e:27:8d:43:5d:67:38:
29:c3:e6:d4:9f:0d:f2:da:16:10:5b:67:dc:f2:60:af:0f:36:
57:67:0e:79:a1:8c:29:ea:08:60:67:96:aa:ce:3e:57:cd:84:
47:d7:49:c9:5d:2f:7f:12:70:a1:72:e6:ec:a6:7a:ee:1b:9c:
4a:d7:5e:d4:cd:79:44:15:a8:9d:91:cc:c8:cc:0c:d5:24:b6:
45:7e:2a:ef:02:4e:5c:f3:8f:d2:9c:0f:b6:8d:3d:d6:c3:f4:
c3:c4:62:bf:1c:49:1f:0b:3c:80:d0:d5:7b:50:7d:fe:87:18:
ef:ae:df:7e:46:e4:3c:1f:72:b3:73:7c:f1:5d:35:a9:24:56:
c9:97:54:ce:8b:0f:60:e6:03:3a:70:fa:4c:c2:0b:d3:fc:21:
07:86:97:ba:ae:0b:37:64:d0:e1:67:e4:97:35:20:c3:c3:e5:
1b:aa:a6:3a:fe:b8:90:97:65:12:cb:0d:93:7f:9f:af:b1:7a:
3b:26:08:1d:96:b4:a6:c0:00:0d:2b:0f:de:bd:85:01:2c:6d:
b7:35:3a:72:d9:28:3c:cc:c7:5b:ff:18:0f:ca:41:29:d3:7a:
2d:aa:74:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:30:30 2025 by rpki-client