Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zm1n04vDRjlUHzYID3CxLt-yeG0.roa
File: zm1n04vDRjlUHzYID3CxLt-yeG0.roa (raw, json)
Hash identifier: Cxk3JmJ1txDEZI1hXDoye1Fl185QTOK9y8hJ02g3L7Q=
Subject key identifier: CE:6D:67:D3:8B:C3:46:39:54:1F:36:08:0F:70:B1:2E:DF:B2:78:6D
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 071EB981
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zm1n04vDRjlUHzYID3CxLt-yeG0.roa
Signing time: Sat 01 Jan 2022 12:55:55 +0000
ROA not before: Sat 01 Jan 2022 12:55:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
45.10.16.0/22 maxlen: 22
45.95.40.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
193.57.94.0/23 maxlen: 23
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119454081 (0x71eb981)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 12:55:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce6d67d38bc34639541f36080f70b12edfb2786d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:9e:79:74:a8:c7:62:56:a9:46:b1:dd:ea:
ab:58:a3:19:76:78:a0:ae:17:5f:82:03:da:ce:7b:
e2:37:df:d5:1a:24:f1:d7:04:84:98:d9:24:f7:6f:
35:46:a9:db:0c:c3:31:73:09:7c:40:ce:b7:de:d1:
96:8b:d4:6f:de:cb:ae:27:bd:63:37:32:40:c8:a0:
cc:5b:58:98:59:68:14:ec:3b:8a:6b:36:27:ac:47:
64:e2:82:fc:46:a6:cd:c0:c4:aa:e5:79:1b:9b:f9:
b9:6c:46:64:9b:eb:b6:7c:11:32:72:30:b6:9c:a7:
20:b1:c1:9d:03:5e:91:84:94:56:25:80:59:4f:23:
35:0b:6c:91:18:43:4a:e8:50:9e:cd:69:5a:58:a5:
cc:37:7f:30:d9:e5:b1:bd:c5:52:06:66:18:26:d6:
a3:f7:eb:95:ce:a6:f3:af:d0:53:68:3c:c7:b8:37:
a5:70:b7:f9:2c:1b:d6:79:4e:fe:19:90:6b:a1:91:
b6:77:23:d4:13:f4:08:71:b2:58:52:e1:61:9b:5d:
d6:ed:11:50:a6:d1:39:4b:8d:bf:45:fa:87:e1:a9:
22:13:42:2f:f5:2e:58:a5:6b:70:64:8b:82:bd:eb:
4e:47:50:c2:6f:fe:e1:3c:14:57:d0:49:7c:a7:20:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:67:D3:8B:C3:46:39:54:1F:36:08:0F:70:B1:2E:DF:B2:78:6D
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zm1n04vDRjlUHzYID3CxLt-yeG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.6.255
45.95.40.0/22
45.130.100.0/22
95.178.107.0/24
188.191.48.0/22
193.57.94.0/23
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:b7:58:6e:5d:f9:74:c8:0a:23:44:93:4d:12:fe:6e:8a:63:
fb:74:ed:cb:33:6a:45:34:4b:eb:dd:10:e9:00:c0:08:fb:4d:
6a:e2:4a:b5:9b:4c:25:af:8d:80:be:20:cb:c9:9d:f1:c6:0b:
6e:f0:20:e8:53:97:66:fd:c3:29:50:f3:c7:44:17:64:7d:68:
21:82:d0:20:78:ba:5b:8e:bf:b9:f1:82:c4:4a:56:34:20:1b:
b3:94:09:63:d4:c0:5f:d0:b9:fe:e4:f2:e2:a1:c0:85:c9:cc:
14:8f:5b:54:6a:2d:d4:c8:85:c4:22:c5:82:fe:8c:1f:fa:e4:
d6:23:90:e9:66:0e:5d:08:e3:30:aa:6d:b8:be:97:57:fc:cd:
80:ef:14:55:be:b4:f8:93:12:5d:56:a4:96:46:8e:ae:d7:f3:
5f:61:35:9e:6f:43:fc:a2:ca:c7:ad:bc:9a:78:c8:0e:77:c6:
6e:b5:a5:c7:16:13:d5:ff:48:22:1c:92:c2:6f:df:5a:33:c2:
87:50:4c:31:d9:b8:dd:84:ba:36:16:39:21:9a:3a:2e:47:86:
0a:52:cf:6c:99:e4:3c:15:83:10:a8:82:31:dd:fb:21:ea:82:
fa:5f:bd:21:a9:d1:e7:f1:5e:61:9d:bc:32:87:1f:51:59:0f:
62:16:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org