Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Z546UcB2L1NJDLHRF7P9gV165eU.roa
File: Z546UcB2L1NJDLHRF7P9gV165eU.roa (raw, json)
Hash identifier: d2Bz7l07GTZehdqdGa/7Xd0lU+PXT+qXTRXFL11qaNs=
Subject key identifier: 67:9E:3A:51:C0:76:2F:53:49:0C:B1:D1:17:B3:FD:81:5D:7A:E5:E5
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01857079B59B2E3E19AE0B22F9D595EDBC33
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Z546UcB2L1NJDLHRF7P9gV165eU.roa
Signing time: Mon 02 Jan 2023 03:15:02 +0000
ROA not before: Mon 02 Jan 2023 03:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61315
IP address blocks: 93.101.80.0/20 maxlen: 24
93.101.96.0/20 maxlen: 24
93.101.112.0/20 maxlen: 24
93.101.16.0/20 maxlen: 24
93.101.240.0/20 maxlen: 24
93.101.32.0/20 maxlen: 24
93.101.48.0/20 maxlen: 24
93.101.64.0/20 maxlen: 24
93.101.176.0/20 maxlen: 24
93.101.192.0/20 maxlen: 24
93.101.208.0/20 maxlen: 24
93.101.224.0/20 maxlen: 24
93.101.128.0/20 maxlen: 24
93.101.144.0/20 maxlen: 24
93.101.160.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:b5:9b:2e:3e:19:ae:0b:22:f9:d5:95:ed:bc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 2 03:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=679e3a51c0762f53490cb1d117b3fd815d7ae5e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:59:42:22:0a:2a:7b:33:c0:20:71:df:c7:53:
89:9d:e5:ab:99:bc:ca:26:c4:76:52:7c:c1:91:d6:
fe:1b:ee:d4:19:3e:c5:66:36:e1:b9:75:5e:6f:2b:
2f:1e:f0:a2:2d:94:56:52:1d:8f:a7:8d:c6:a6:14:
15:c0:67:5e:88:45:cc:91:9a:86:4d:cc:c5:56:b5:
38:2d:c6:f1:5c:f9:b5:52:f5:5f:bf:86:ac:18:91:
de:22:cf:36:82:1e:fd:1e:13:96:9c:05:0e:7d:4b:
48:95:27:47:80:d9:91:a9:c0:30:95:67:3a:db:48:
bd:0c:4a:00:38:f2:18:6d:c8:cb:df:19:44:de:42:
03:4b:e6:dd:f9:fc:09:27:62:94:0c:1a:c6:09:f4:
0c:ff:22:13:a7:09:a7:f7:e7:79:62:09:8d:47:38:
e1:19:4f:b2:e8:6b:e7:17:96:ae:5d:cf:b3:d3:e3:
73:be:9c:49:b6:3e:b5:b3:5c:cf:bf:50:6b:3b:de:
12:13:0f:7e:e1:7a:61:90:ab:bb:8b:a7:2f:c9:82:
fc:8e:86:35:53:c0:34:8f:96:bf:e1:a0:13:ea:0a:
03:93:ed:77:98:4c:59:0d:d5:ec:b0:79:b7:b6:77:
39:03:13:53:5c:70:e3:ce:b6:93:1e:ea:05:ca:55:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9E:3A:51:C0:76:2F:53:49:0C:B1:D1:17:B3:FD:81:5D:7A:E5:E5
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/Z546UcB2L1NJDLHRF7P9gV165eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.16.0-93.101.255.255
Signature Algorithm: sha256WithRSAEncryption
a0:7f:cb:a5:49:39:e0:32:b8:61:b1:43:60:e8:7a:5c:ad:53:
60:56:1e:29:28:d4:9b:22:a5:c7:6c:a6:30:fd:9c:41:51:f8:
37:7e:b6:be:db:e9:7d:ec:84:3f:30:2d:f1:cd:8b:03:2f:c9:
25:a3:4a:0d:ef:4d:91:7a:27:d4:84:3c:aa:f4:3e:1a:ff:63:
9f:a1:9d:7e:96:48:e1:b1:62:c8:77:50:57:b9:a6:98:9c:f5:
c6:f1:4d:07:b1:d1:0c:e5:92:06:97:f2:95:0d:80:bb:9a:b9:
43:46:7d:e5:b0:25:e9:99:ad:7d:78:7e:ba:ea:a9:54:37:7c:
cf:1a:a2:be:f2:d2:2f:00:9c:15:a1:73:30:a4:a8:b7:e8:86:
93:60:14:fe:67:66:99:8d:90:7f:7d:e2:1e:11:df:be:37:81:
53:81:65:04:73:ed:78:43:d2:ad:47:90:6d:8b:f7:df:23:b7:
24:88:d4:c2:5b:d8:80:e1:9b:58:5e:79:b2:b2:62:7e:96:c5:
c4:f1:48:b0:14:02:5f:e0:e7:9b:74:68:8f:40:13:d7:01:fd:
a2:10:3e:cd:be:32:c5:29:7b:f5:61:b7:0f:c8:22:00:9b:5c:
56:28:b3:e9:b1:66:e0:76:ad:7f:2e:2b:7b:8e:81:dd:50:e0:
c0:32:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:00:22 2025 by rpki-client