Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/rz4-Z1gS54JUQEvUxrZdIH4II5Y.roa
File: rz4-Z1gS54JUQEvUxrZdIH4II5Y.roa (raw, json)
Hash identifier: ZVubi0Zy3qxgHsTfrpDVwuVu2UoxAbNStnDom4nnTMM=
Subject key identifier: AF:3E:3E:67:58:12:E7:82:54:40:4B:D4:C6:B6:5D:20:7E:08:23:96
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 01880434CD865C1EC65A24AE23965358DFF2
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/rz4-Z1gS54JUQEvUxrZdIH4II5Y.roa
Signing time: Wed 10 May 2023 05:49:09 +0000
ROA not before: Wed 10 May 2023 05:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43766
IP address blocks: 2a00:5400:f000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:34:cd:86:5c:1e:c6:5a:24:ae:23:96:53:58:df:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: May 10 05:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af3e3e675812e78254404bd4c6b65d207e082396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:1d:55:26:c9:5b:ec:69:2b:c6:cf:63:98:
7e:7f:a1:48:e1:16:9c:f2:2c:9a:67:6a:cb:1e:e1:
98:fe:e2:44:0c:ac:80:94:de:1b:a1:bb:99:2a:1f:
0b:e0:f7:33:09:db:ca:70:0d:e5:25:84:7c:13:a2:
ca:2a:96:fd:99:9b:e9:4b:4c:0d:df:fd:b2:84:5b:
b1:34:e0:70:54:7c:99:7b:06:81:6a:cb:7c:e8:6b:
1c:6a:03:b6:2f:e5:09:61:be:6b:dd:11:83:24:8a:
f3:d4:12:16:18:18:e8:1c:d4:d5:5b:22:8e:89:ac:
5c:20:bf:f4:77:f7:dc:be:07:4c:22:0a:60:2e:ba:
4f:11:6f:83:28:b8:b6:29:eb:43:23:67:66:39:dc:
9f:8a:29:7b:87:18:66:a5:18:d6:3e:a5:8b:6a:6d:
db:b8:a5:33:b2:72:72:b5:14:1c:b7:97:ad:cb:40:
f4:05:fb:c5:4b:f2:90:74:44:5a:5b:f6:e3:54:2e:
9b:94:70:8e:1c:e4:e1:16:96:12:ac:90:33:53:71:
26:b8:98:77:de:5b:2f:a2:bc:29:9f:4d:4a:c5:3d:
ee:df:d6:e8:ae:a9:c1:a1:97:e2:cc:13:f4:30:07:
55:e9:8e:a0:cd:da:76:9c:6b:78:80:ea:4c:98:2a:
b0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3E:3E:67:58:12:E7:82:54:40:4B:D4:C6:B6:5D:20:7E:08:23:96
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/rz4-Z1gS54JUQEvUxrZdIH4II5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:5400:f000::/48
Signature Algorithm: sha256WithRSAEncryption
de:d9:24:26:5f:4c:56:e1:1a:79:ee:a4:0e:e2:78:1f:c5:23:
b3:93:d7:ac:0b:77:b6:cc:fb:d6:63:6e:1a:bb:d2:20:19:10:
09:49:7a:f1:d6:99:10:b9:e2:0f:c1:8e:64:7e:f8:ab:b9:99:
53:dd:d4:b4:4f:b6:88:f9:d0:e1:ae:ba:ca:5e:03:c7:57:2e:
12:02:b1:33:62:ff:96:10:5a:2e:c9:03:fe:96:da:24:7e:85:
56:00:21:1f:78:f2:6d:29:66:40:de:7a:85:c0:02:28:5c:ee:
f6:31:af:4b:f7:85:5c:06:62:80:6d:25:23:25:cf:0a:8e:d4:
19:a8:49:d2:b3:a3:48:1c:4f:6c:cf:fc:a3:6e:c5:a1:d9:91:
56:8a:b8:5b:00:f6:fb:c8:fa:bf:1f:59:b2:6c:06:c4:ad:7f:
ce:69:05:59:90:9b:da:50:cb:f8:21:52:3b:90:80:67:42:66:
f7:29:a4:18:39:0d:bf:41:95:1e:e3:01:d9:e6:78:b0:f7:e0:
d8:8a:2e:81:e4:49:ec:86:cf:74:84:8a:3a:f9:da:47:ee:5c:
13:54:e7:4d:f2:45:cd:ad:76:0f:7a:2a:df:cd:7b:aa:90:9c:
dc:9c:09:74:0d:df:2e:cd:53:24:d3:b0:7b:eb:00:6b:9f:ed:
dc:d8:dc:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYgENM2GXB7GWiSuI5ZTWN/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj
OGVhYTIwHhcNMjMwNTEwMDU0OTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjNlM2U2NzU4MTJlNzgyNTQ0MDRiZDRjNmI2NWQyMDdlMDgyMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0MdVSbJW+xpK8bPY5h+f6FI4Rac
8iyaZ2rLHuGY/uJEDKyAlN4bobuZKh8L4PczCdvKcA3lJYR8E6LKKpb9mZvpS0wN
3/2yhFuxNOBwVHyZewaBast86GscagO2L+UJYb5r3RGDJIrz1BIWGBjoHNTVWyKO
iaxcIL/0d/fcvgdMIgpgLrpPEW+DKLi2KetDI2dmOdyfiil7hxhmpRjWPqWLam3b
uKUzsnJytRQct5ety0D0BfvFS/KQdERaW/bjVC6blHCOHOThFpYSrJAzU3EmuJh3
3lsvorwpn01KxT3u39borqnBoZfizBP0MAdV6Y6gzdp2nGt4gOpMmCqwRQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFK8+PmdYEueCVEBL1Ma2XSB+CCOWMB8GA1UdIwQY
MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt
ZWUxYmQzNDRmMDE1LzEvcno0LVoxZ1M1NEpVUUV2VXhyWmRJSDRJSTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1
LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgBUAPAA
MA0GCSqGSIb3DQEBCwUAA4IBAQDe2SQmX0xW4Rp57qQO4ngfxSOzk9esC3e2zPvW
Y24au9IgGRAJSXrx1pkQueIPwY5kfviruZlT3dS0T7aI+dDhrrrKXgPHVy4SArEz
Yv+WEFouyQP+ltokfoVWACEfePJtKWZA3nqFwAIoXO72Ma9L94VcBmKAbSUjJc8K
jtQZqEnSs6NIHE9sz/yjbsWh2ZFWirhbAPb7yPq/H1mybAbErX/OaQVZkJvaUMv4
IVI7kIBnQmb3KaQYOQ2/QZUe4wHZ5niw9+DYii6B5Enshs90hIo6+dpH7lwTVOdN
8kXNrXYPeirfzXuqkJzcnAl0Dd8uzVMk07B76wBrn+3c2NyZ
-----END CERTIFICATE-----
Generated at Tue May 13 02:23:43 2025 by rpki-client