Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/z1DD0zJ5SEQQdGrreJaZG5eSRhE.roa
File: z1DD0zJ5SEQQdGrreJaZG5eSRhE.roa (raw, json)
Hash identifier: 2tToBKIp9P2oj6ww38cCKE6LWl5UovcsHW+KCIF/tSU=
Subject key identifier: CF:50:C3:D3:32:79:48:44:10:74:6A:EB:78:96:99:1B:97:92:46:11
Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial: 0185704BD4ABF4181801F1EDFF8B0B49498C
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/z1DD0zJ5SEQQdGrreJaZG5eSRhE.roa
Signing time: Mon 02 Jan 2023 02:24:55 +0000
ROA not before: Mon 02 Jan 2023 02:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 2.59.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:d4:ab:f4:18:18:01:f1:ed:ff:8b:0b:49:49:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Validity
Not Before: Jan 2 02:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf50c3d33279484410746aeb7896991b97924611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:45:c6:0d:86:5c:4c:5a:c1:49:3a:84:31:
93:b8:11:79:51:01:2f:52:8f:e0:e5:3d:66:78:01:
bf:3a:6b:b7:aa:85:c3:e9:67:ba:98:70:5a:59:8f:
55:33:08:d6:1a:af:8e:c7:d8:e1:cf:63:23:75:ba:
54:32:a5:7e:5c:e1:22:e5:98:40:e2:a9:e5:e1:3e:
f7:88:a8:ba:6f:cd:bb:de:e6:97:8d:0a:75:2c:03:
54:b8:54:0f:f2:24:08:65:7e:b9:0a:80:a5:21:78:
87:52:38:39:fc:7b:48:50:c8:31:da:37:fd:c9:05:
6b:e3:6c:4c:fb:06:63:ea:46:16:02:75:57:41:00:
93:85:5e:dd:4b:74:f2:db:a7:76:bd:27:e4:a5:b7:
b1:1b:91:19:af:ec:53:d5:c2:9d:5b:ce:b4:f8:40:
1c:c1:41:bd:6b:fd:e1:e7:f6:01:37:9b:a4:c4:bb:
26:ae:56:6f:7f:58:79:ed:b1:d1:4e:4c:2b:01:69:
55:9f:e8:bb:0c:cc:40:6e:e4:b7:5b:2c:f1:dd:19:
9d:90:24:18:fc:8e:7e:11:49:75:4a:a3:50:f6:1f:
1a:bd:f4:99:b0:06:bb:30:dc:16:b8:40:76:65:04:
3d:32:87:48:07:62:f0:3b:0e:bd:77:8e:85:3e:ce:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:50:C3:D3:32:79:48:44:10:74:6A:EB:78:96:99:1B:97:92:46:11
X509v3 Authority Key Identifier:
keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/z1DD0zJ5SEQQdGrreJaZG5eSRhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:13:b8:2b:95:0e:42:0c:68:aa:f0:b8:e8:b0:e3:54:ca:5e:
0e:1f:83:5f:af:f6:94:94:5d:36:6b:5d:2d:c6:2a:af:81:88:
5c:8f:1c:b4:ae:05:ab:c8:51:0d:1c:24:89:e9:34:85:73:ad:
5c:d7:d8:64:87:d3:aa:e4:6a:61:7d:5b:5c:71:8e:13:a5:e9:
7e:35:40:42:7a:2f:69:2c:c7:88:48:6c:91:c7:0a:40:3a:3c:
c0:53:06:0d:fa:84:d8:8c:a5:da:82:19:83:90:ba:42:f4:ea:
90:c8:4e:81:0f:21:b1:16:b2:88:77:af:55:0a:e9:82:3a:86:
ce:5f:13:3f:44:55:14:a7:62:5e:bb:56:47:8e:30:f5:4a:62:
df:dd:74:8e:55:a5:b9:c0:98:be:f6:1e:e0:8f:06:67:2e:b3:
86:dc:aa:4b:ba:e9:7d:80:ce:52:e6:6d:a6:2f:8f:4e:70:bf:
55:0e:68:15:cd:63:82:a2:95:35:f0:a1:63:f9:73:a2:1b:9e:
5e:79:1f:d5:4c:13:0a:77:eb:07:3b:83:ca:21:d1:b9:b6:19:
e5:4a:ca:47:2e:74:88:80:d2:42:40:34:ea:11:d4:46:db:11:
06:33:bd:e8:d9:dd:c0:88:cb:a3:29:94:48:2b:9f:cb:c2:3a:
20:4c:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:12 2025 by rpki-client