Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/kzbjS4tLvxQChB6Udcxvfzqmxdw.roa
File: kzbjS4tLvxQChB6Udcxvfzqmxdw.roa (raw, json)
Hash identifier: cBnGSQJ7RuZ1oklTNwYF9TmiYctGipRrnjkXNRSBf2k=
Subject key identifier: 93:36:E3:4B:8B:4B:BF:14:02:84:1E:94:75:CC:6F:7F:3A:A6:C5:DC
Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial: 0181FC298B6A07C1BCD39BCA6BF7184C96AD
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/kzbjS4tLvxQChB6Udcxvfzqmxdw.roa
Signing time: Thu 14 Jul 2022 10:03:09 +0000
ROA not before: Thu 14 Jul 2022 10:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204318
IP address blocks: 2a13:4c00::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:29:8b:6a:07:c1:bc:d3:9b:ca:6b:f7:18:4c:96:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Validity
Not Before: Jul 14 10:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9336e34b8b4bbf1402841e9475cc6f7f3aa6c5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:5b:13:6d:f4:c6:b2:40:bb:5d:29:8d:78:
51:12:e3:43:6d:a3:9d:d3:1e:16:55:df:84:a7:a2:
c4:96:e0:bd:ed:65:d9:50:1c:54:2d:26:b2:8e:d2:
d0:0e:99:31:e0:6d:c0:b4:c7:20:3a:14:5f:5a:52:
a6:bd:57:c2:74:77:e6:2f:22:fb:84:e9:0d:0a:d7:
f8:b9:ca:0a:d8:e4:2b:7a:13:4e:c1:7e:45:b2:d5:
e4:3d:bb:df:63:f0:56:d4:c7:b4:fd:1a:18:ee:d3:
4d:48:e7:52:c0:4b:a4:19:e7:22:bc:a4:2e:d9:16:
99:05:e5:64:d6:67:97:21:c6:9f:48:5f:5d:59:f6:
a3:b8:59:9a:b2:21:3f:1e:ea:e7:7d:01:64:20:17:
f3:ca:c5:b9:33:3d:21:a5:3a:22:ba:54:a7:56:51:
dd:37:67:96:d1:fc:24:6d:96:07:74:dd:f0:a1:85:
be:70:8f:fb:6f:61:11:40:86:22:00:46:5b:a0:f7:
6c:fb:63:fd:89:ef:dd:0d:e9:87:35:37:29:d4:73:
9a:43:17:a0:e5:06:ad:21:84:6c:78:08:51:63:d5:
51:ad:67:6b:08:82:af:42:00:7a:ac:e6:c1:b4:cb:
50:d5:28:a4:5e:f6:f8:19:5b:33:51:ac:cd:57:6e:
11:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:E3:4B:8B:4B:BF:14:02:84:1E:94:75:CC:6F:7F:3A:A6:C5:DC
X509v3 Authority Key Identifier:
keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/kzbjS4tLvxQChB6Udcxvfzqmxdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4c00::/34
Signature Algorithm: sha256WithRSAEncryption
92:34:cf:f9:75:b1:50:11:bb:b8:3e:ee:f3:dd:20:e3:a2:df:
35:7b:5b:90:db:62:f9:cf:58:f9:49:df:bc:75:0c:57:af:b4:
c5:cb:bb:db:a0:ac:90:89:66:77:3d:c7:5b:49:51:97:65:f0:
5c:8a:45:81:d0:28:67:29:df:50:73:6e:7c:d6:fb:33:21:fd:
fe:77:24:c7:e9:7f:53:af:19:3b:37:d2:ac:e1:e0:83:4b:23:
fa:18:cb:59:d7:09:d2:ed:48:34:39:c0:09:ad:4b:fa:5d:7a:
39:a7:1c:ef:0b:9c:50:81:be:b7:b2:f7:9c:03:60:07:5b:26:
6c:cf:da:e1:c9:ce:f9:b6:a5:55:d3:f1:81:c2:6d:47:88:3b:
74:8d:6f:71:ad:77:71:f5:35:c3:22:67:b4:73:48:08:97:4f:
64:e8:44:a1:45:3c:54:c6:5f:7e:e3:e1:22:ed:76:0f:20:8a:
c6:c8:d2:42:f2:f7:e5:02:55:11:06:b2:ba:f2:d3:90:e4:4a:
5a:26:1a:a2:01:bf:2e:cd:f3:8d:da:8a:ab:b9:fb:16:82:9d:
45:b9:7f:e9:fc:36:9b:be:80:5f:1d:57:be:2e:61:0b:d6:6f:
27:0e:3c:3b:6f:b0:8a:4d:e1:f3:50:1c:a6:8b:28:f1:3c:6f:
4d:63:b8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:21:41 2025 by rpki-client