Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zsQ1fvK8jcayrhHhhwQUNeOxTrA.roa
File: zsQ1fvK8jcayrhHhhwQUNeOxTrA.roa (raw, json)
Hash identifier: H9sKG7wQWl/s8J+b08aNFVryppk8NFrqS0IFZXq1l98=
Subject key identifier: CE:C4:35:7E:F2:BC:8D:C6:B2:AE:11:E1:87:04:14:35:E3:B1:4E:B0
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 07697199
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zsQ1fvK8jcayrhHhhwQUNeOxTrA.roa
Signing time: Mon 31 Jan 2022 15:08:52 +0000
ROA not before: Mon 31 Jan 2022 15:08:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
45.10.16.0/22 maxlen: 22
45.95.40.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
193.57.94.0/23 maxlen: 23
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124350873 (0x7697199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 31 15:08:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cec4357ef2bc8dc6b2ae11e187041435e3b14eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:f5:02:0b:5c:5b:9f:5a:ab:10:34:ef:83:
c5:24:9d:69:48:89:46:cf:a6:2d:0e:48:ff:7e:a6:
39:6f:a8:d1:f8:1d:72:17:d2:bc:21:fb:3a:69:e9:
c4:b5:6e:54:29:45:df:38:d2:cb:96:1d:3e:f0:04:
d4:ff:17:8c:c3:fd:61:ad:c0:6c:0b:cf:6e:0d:84:
fc:c9:d3:6f:13:e1:e1:87:eb:7a:1b:18:ca:ca:75:
8d:69:51:95:f2:b2:bf:f6:fd:24:dc:4e:80:e1:4d:
ca:2d:64:10:28:d0:42:8d:44:e8:43:7e:57:32:c0:
e4:26:23:9c:10:a2:be:9a:2d:7a:23:e7:07:fc:17:
57:ed:c3:91:3c:9a:91:ad:4c:5d:c3:46:da:ec:c9:
c3:ba:98:39:4e:d3:fe:3b:a9:8d:c0:a7:ad:4a:91:
55:a1:69:6f:05:48:95:07:ba:72:46:fa:64:5e:3c:
f7:5c:bf:f8:15:3a:ea:82:b4:91:d0:e9:4e:6f:5f:
5b:2f:d5:3e:ae:a8:d6:e3:1d:20:ca:db:ee:36:05:
1b:37:ff:d2:aa:91:d2:96:28:39:1b:79:83:ed:8f:
62:b9:9b:69:e8:a3:a1:58:8a:95:a2:ff:07:71:20:
7c:f3:af:6b:ef:98:5e:7d:7e:af:30:ab:7d:c0:84:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C4:35:7E:F2:BC:8D:C6:B2:AE:11:E1:87:04:14:35:E3:B1:4E:B0
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zsQ1fvK8jcayrhHhhwQUNeOxTrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
95.178.107.0/24
188.191.48.0/22
193.57.94.0/23
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:96:6c:6f:e9:32:f3:27:f6:ba:27:8e:c6:51:b5:13:38:cc:
a0:65:42:d1:40:ff:60:c4:0b:fc:65:ab:f8:58:c2:cc:82:88:
4b:f0:12:9a:37:0f:fb:38:9e:68:69:89:bc:05:71:d6:77:d7:
21:ad:4f:5a:25:a3:c8:3d:e3:a3:31:7d:10:b8:3d:ad:a0:71:
c2:7a:a5:f6:bd:9c:12:81:66:a7:37:d5:3c:4a:f0:dd:43:a8:
c7:69:eb:bc:88:e2:a4:d6:fd:12:57:78:29:59:a1:5c:fe:5f:
ab:9e:46:fa:8e:25:f2:1d:78:4c:0e:8c:b8:15:2b:b9:f2:54:
4d:ba:c6:6b:f2:9e:84:b3:f8:8c:42:7a:1e:bf:9b:51:0b:39:
b3:7d:ed:2e:a1:02:bf:c0:ca:df:02:0e:d4:3f:e5:a9:fa:3a:
27:47:82:3e:27:26:31:06:f5:e4:1f:4c:d1:7c:1c:69:56:a8:
1b:88:0f:ab:8f:e6:5d:9d:21:da:1a:07:59:f7:53:f2:b8:44:
94:31:03:4c:a5:e3:3a:64:3b:ea:00:65:ef:b2:26:0e:f7:8a:
01:43:ac:64:37:a7:85:f9:fc:50:3b:0b:0f:e6:fe:34:06:8a:
f8:95:a1:a7:cb:33:47:b3:4b:a8:ab:c2:c1:b4:e0:bc:72:df:
db:3a:9b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org