Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zA4oSeA8SxImx-ltBfYSKPaJOZM.roa
File: zA4oSeA8SxImx-ltBfYSKPaJOZM.roa (raw, json)
Hash identifier: /DAygeRjXSnLORaHcvBsjrEw1kV7UFHfQGXCAkKZ0rg=
Subject key identifier: CC:0E:28:49:E0:3C:4B:12:26:C7:E9:6D:05:F6:12:28:F6:89:39:93
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01868321A128C7BE9C4738341C7932225E0D
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zA4oSeA8SxImx-ltBfYSKPaJOZM.roa
Signing time: Fri 24 Feb 2023 11:14:24 +0000
ROA not before: Fri 24 Feb 2023 11:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212422
IP address blocks: 193.59.95.0/24 maxlen: 24
193.59.98.0/24 maxlen: 24
193.59.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:21:a1:28:c7:be:9c:47:38:34:1c:79:32:22:5e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Feb 24 11:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc0e2849e03c4b1226c7e96d05f61228f6893993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:aa:94:ab:7b:52:b4:a1:f5:98:8b:f1:b7:a9:
47:05:12:03:b8:7d:59:b0:e6:e6:50:61:22:b6:58:
bd:d5:ed:66:86:3a:6b:b6:92:5f:b5:ac:a7:98:8a:
7f:91:27:8f:5b:48:55:f4:27:ca:25:b5:f2:16:a8:
32:46:c5:90:f3:47:ae:9d:f7:41:bd:09:df:b5:11:
3c:f3:4e:90:0c:5d:7e:1c:68:e4:63:dc:86:6e:e4:
62:1c:87:85:c3:2b:70:58:1d:62:78:9e:67:37:58:
b1:95:f0:a2:68:8b:8e:e0:79:f0:0b:d5:0c:fc:d1:
1c:f6:de:65:24:e7:43:84:00:cd:af:c6:f2:fc:42:
91:ac:86:57:ec:ac:d9:0a:59:81:c2:bb:6a:b5:ac:
ff:57:9b:8a:51:6e:f0:52:a7:d5:87:96:d2:c8:7f:
43:23:d1:2c:34:ce:2c:15:ee:3c:f2:6d:bf:a3:c2:
ed:c1:0c:c7:d7:6b:5e:d2:62:a5:50:f3:e6:de:af:
98:23:8e:61:1e:4b:36:4a:87:a7:77:da:69:0f:25:
8e:f9:6e:f7:b2:37:78:cc:8d:cb:16:6e:60:38:fc:
be:c8:8f:4e:ec:fa:17:0b:91:94:79:05:36:cd:dd:
16:1f:71:d5:70:44:49:f8:c8:2f:25:07:59:cd:0c:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0E:28:49:E0:3C:4B:12:26:C7:E9:6D:05:F6:12:28:F6:89:39:93
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/zA4oSeA8SxImx-ltBfYSKPaJOZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.94.0/23
193.59.98.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:fe:4a:38:51:32:76:d7:9e:19:92:16:06:05:e9:ed:70:8f:
20:ee:f7:3b:d2:8b:cc:71:c9:2e:14:65:2b:65:67:ad:f7:88:
09:43:8f:d1:fc:9d:5a:4e:69:02:99:1b:de:37:e2:28:b8:42:
9c:7f:36:3e:97:17:93:31:80:84:a5:a9:aa:59:51:61:fd:62:
82:17:6f:c7:ae:fc:83:e6:b8:24:90:ab:00:77:6c:c0:e6:db:
a1:b0:02:77:ab:ba:1d:5f:d9:4c:d9:3a:33:d0:df:97:aa:75:
c2:77:fe:c8:81:1f:05:2a:ce:12:33:22:76:a1:df:d9:17:4d:
35:f4:7f:89:7a:2d:62:30:e8:32:2e:65:7d:0c:c5:9a:e3:53:
c3:c5:2f:bd:5c:f6:a6:8c:53:43:0b:2d:2b:c0:6f:f1:aa:fb:
bc:20:88:6d:6a:24:1d:ff:85:82:e0:84:cc:ef:87:94:0d:cc:
1d:f3:25:4e:63:0b:da:bf:cf:0b:1b:4e:c5:ee:0c:f3:ca:bf:
c6:4c:e7:11:cd:f8:7c:c1:02:c1:53:43:e8:c3:6e:4a:4e:33:
50:d2:5f:f5:02:e1:95:32:c7:58:3d:79:14:42:e2:1c:e2:01:
8d:c7:5d:07:f3:bc:f6:b8:68:ea:f9:ed:4e:d2:17:70:55:dd:
46:5e:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:53:37 2025 by rpki-client