Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/zQcaLCEDPnJIXDsSZZ4W7b-je88.roa
File: zQcaLCEDPnJIXDsSZZ4W7b-je88.roa (raw, json)
Hash identifier: LjFVUeiSlkhZNrKuUxVhbxgtx7yepslxulEAec+v7hA=
Subject key identifier: CD:07:1A:2C:21:03:3E:72:48:5C:3B:12:65:9E:16:ED:BF:A3:7B:CF
Certificate issuer: /CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Certificate serial: 0187CE2C96E13032348C90346A09E5E736B0
Authority key identifier: 57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/zQcaLCEDPnJIXDsSZZ4W7b-je88.roa
Signing time: Sat 29 Apr 2023 18:00:41 +0000
ROA not before: Sat 29 Apr 2023 18:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61006
IP address blocks: 93.188.88.0/21 maxlen: 21
2a01:9b00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:2c:96:e1:30:32:34:8c:90:34:6a:09:e5:e7:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730a32f316246ce0b147bb895e8cdf0aed43ed6
Validity
Not Before: Apr 29 18:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd071a2c21033e72485c3b12659e16edbfa37bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:da:6c:9a:b8:56:fe:a6:86:98:6f:b1:05:
fb:5b:9b:00:be:62:c4:5d:30:2f:07:b0:ba:1f:0b:
72:b5:16:79:8f:de:a8:ad:2a:71:84:27:04:c6:a6:
41:ed:fe:32:93:88:cc:51:7f:ab:dc:27:9b:c5:40:
bc:fc:e8:c0:b7:26:b7:49:f0:f2:58:15:44:12:ac:
e2:c2:c8:ad:84:09:39:8c:47:a8:ab:35:7b:02:4a:
05:b4:9f:38:2a:1f:4b:d8:e8:71:57:a3:78:3d:97:
65:4e:f7:df:8f:27:6f:5d:0a:15:65:04:a4:6e:22:
86:6b:d4:0d:a6:58:5d:55:7a:a3:bd:d5:aa:f4:73:
3f:4c:56:23:e9:89:a3:15:2f:ae:fa:a2:b8:01:fa:
bb:b0:2d:86:4e:bd:88:fa:1b:c1:d3:8a:36:24:64:
dd:10:7b:51:e9:10:c7:a9:45:95:55:2a:84:c3:02:
c8:78:98:ac:72:75:86:65:80:00:26:6d:8e:26:86:
d9:6d:5e:35:25:d6:f9:ea:e0:41:db:45:01:01:e3:
f1:ac:6c:7c:49:04:7b:69:91:8f:c3:50:72:56:c2:
53:68:30:78:c0:7a:7e:4d:08:db:ea:84:9c:bd:87:
f6:93:f3:8f:30:2a:d6:01:f6:28:87:41:94:c4:b0:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:1A:2C:21:03:3E:72:48:5C:3B:12:65:9E:16:ED:BF:A3:7B:CF
X509v3 Authority Key Identifier:
keyid:57:30:A3:2F:31:62:46:CE:0B:14:7B:B8:95:E8:CD:F0:AE:D4:3E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzCjLzFiRs4LFHu4lejN8K7UPtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/zQcaLCEDPnJIXDsSZZ4W7b-je88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f3c3b2-b64a-49e1-9a48-c93989cc9b67/1/VzCjLzFiRs4LFHu4lejN8K7UPtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.88.0/21
IPv6:
2a01:9b00::/32
Signature Algorithm: sha256WithRSAEncryption
12:ed:7e:6b:68:29:d6:61:77:6d:ac:4b:77:65:e1:75:64:ea:
08:5a:37:90:77:fe:de:6c:a3:b8:88:6a:d3:be:cc:1d:a5:bd:
7d:c7:ec:fd:a6:28:11:11:0f:91:94:0b:5b:ed:f0:29:f5:e0:
fb:8f:db:2e:c8:65:c9:62:9a:20:3c:40:0e:1f:cf:05:05:ee:
e0:55:19:94:5f:87:0a:12:9f:94:15:56:69:25:2e:da:f2:df:
bb:89:45:ec:d0:91:ee:76:00:fe:c1:cb:ef:f7:15:35:02:0e:
28:27:5e:cf:1d:25:e9:ff:b4:dd:93:32:04:87:24:c9:5e:7e:
bb:55:c2:c4:d5:f4:59:a4:7e:db:ce:b2:16:39:35:c0:5f:21:
b2:42:ff:58:31:2b:a1:2f:ea:a7:14:ce:62:2b:dd:78:e0:dd:
14:5e:6d:60:66:23:89:c2:c4:25:e2:fb:ff:c7:b0:41:41:97:
4b:d9:10:bd:1e:66:3c:89:c7:c1:e5:b5:21:cd:fe:6a:ec:19:
e2:9a:c6:77:0a:76:4b:d9:b6:39:aa:ef:d8:73:27:fb:12:3b:
68:11:87:ed:ef:1f:17:40:65:66:ee:56:0f:f3:ba:2b:fa:43:
ca:f0:16:38:36:c0:b8:3c:cc:ae:6a:53:b7:9b:64:2b:f1:c9:
b9:95:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:00:48 2025 by rpki-client