Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/zPXj4Cm9HU2r7r443buaCOLQQNg.roa
File: zPXj4Cm9HU2r7r443buaCOLQQNg.roa (raw, json)
Hash identifier: CenRMd0WGxnZ33bXuLbl7cwJxRfCv1oMZX9UAI7+Zj0=
Subject key identifier: CC:F5:E3:E0:29:BD:1D:4D:AB:EE:BE:38:DD:BB:9A:08:E2:D0:40:D8
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 17EF35BA
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/zPXj4Cm9HU2r7r443buaCOLQQNg.roa
Signing time: Sat 01 Jan 2022 03:59:57 +0000
ROA not before: Sat 01 Jan 2022 03:59:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39163
IP address blocks: 213.91.197.0/24 maxlen: 24
95.43.201.0/24 maxlen: 24
62.176.120.0/24 maxlen: 24
95.43.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401552826 (0x17ef35ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 03:59:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccf5e3e029bd1d4dabeebe38ddbb9a08e2d040d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:b3:c8:ad:68:cc:ca:2b:1f:0b:34:df:ed:
32:ce:fd:43:b0:42:da:3d:0f:a8:82:1b:b4:e7:2f:
20:44:11:a4:c2:03:08:3d:9e:ef:7e:a0:0c:99:68:
47:43:56:a8:36:15:ee:0a:0a:c7:58:10:71:88:26:
f6:43:0c:23:7a:10:3b:0f:ea:d1:d3:f2:c0:e2:29:
f0:53:31:d7:2f:a0:6c:88:ed:4d:d1:1e:23:3c:d7:
a9:c4:bd:0b:6f:24:48:3b:8c:ba:c8:ff:a0:46:93:
43:ee:6b:9b:00:2f:5d:1d:54:71:9c:8e:87:81:30:
3f:dd:8b:8e:1c:d3:56:ad:b4:64:f9:4e:57:be:22:
0f:58:a1:80:c4:ca:aa:c1:ef:f9:85:2e:7d:4e:7e:
e4:ed:0b:8d:9a:d8:f5:4b:a7:d6:45:f5:c3:c1:c5:
d6:3c:ad:fc:e2:57:51:e4:73:45:57:e4:31:78:46:
0b:a0:21:59:07:7f:84:74:f6:a3:78:a8:77:17:d7:
be:a0:d7:50:17:e8:20:8e:5b:80:3a:97:25:aa:bc:
27:9a:8f:00:b0:61:93:0f:72:04:bb:74:76:ed:83:
ae:66:a6:42:11:10:33:cc:fe:be:94:57:9b:d6:68:
49:5d:9d:7f:3d:3a:30:55:2a:2f:dd:56:b4:a2:17:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:E3:E0:29:BD:1D:4D:AB:EE:BE:38:DD:BB:9A:08:E2:D0:40:D8
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/zPXj4Cm9HU2r7r443buaCOLQQNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.120.0/24
95.43.201.0/24
95.43.251.0/24
213.91.197.0/24
Signature Algorithm: sha256WithRSAEncryption
87:eb:3e:1c:cc:14:08:84:d7:06:f1:b4:30:6b:24:ba:c3:88:
cc:d1:5e:a3:fa:69:56:1a:b0:4b:12:32:63:fa:84:50:fe:fc:
75:59:99:f6:6a:bc:af:ce:61:a8:d4:68:9e:f4:20:60:8a:12:
a5:f1:d2:14:f4:47:71:79:28:a2:bd:02:a9:5d:9b:76:53:0c:
df:fb:43:43:c0:00:9e:ea:e0:9b:6b:6b:40:e8:1b:18:84:fe:
7c:47:87:ee:16:56:38:0e:ea:78:de:a8:eb:d3:98:36:c8:22:
cc:80:40:d3:3e:57:43:d9:33:d4:f3:00:21:8b:c6:bc:7a:34:
23:f3:bc:44:35:be:00:f5:09:91:6d:57:03:d0:4e:79:a2:4c:
d4:6c:eb:b0:b9:f3:5c:a7:37:2e:92:42:57:d6:ee:19:a7:f0:
c1:42:17:50:c5:eb:15:8d:6c:79:c5:20:9d:90:eb:cc:44:4a:
09:e0:81:a8:b6:a2:29:7c:6a:75:72:7d:82:03:6c:8f:72:08:
b0:d8:b0:a0:a8:72:30:b6:44:85:c8:50:53:86:b6:41:03:33:
bc:94:d9:df:2b:84:b3:28:ae:bc:a9:11:8a:3e:7f:1e:ef:f6:
16:ce:cb:32:ff:f3:84:7c:6e:2d:b7:a9:09:8e:83:07:98:29:
07:25:6c:c4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEF+81ujANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NGIyZjRmYTUxNjNhZjk2MTY4ZTg4ZmJmOWNiNGVkMWVkOGZiNGM0MB4XDTIyMDEw
MTAzNTk1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NmNWUzZTAyOWJk
MWQ0ZGFiZWViZTM4ZGRiYjlhMDhlMmQwNDBkODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANqns8itaMzKKx8LNN/tMs79Q7BC2j0PqIIbtOcvIEQRpMID
CD2e736gDJloR0NWqDYV7goKx1gQcYgm9kMMI3oQOw/q0dPywOIp8FMx1y+gbIjt
TdEeIzzXqcS9C28kSDuMusj/oEaTQ+5rmwAvXR1UcZyOh4EwP92LjhzTVq20ZPlO
V74iD1ihgMTKqsHv+YUufU5+5O0LjZrY9Uun1kX1w8HF1jyt/OJXUeRzRVfkMXhG
C6AhWQd/hHT2o3iodxfXvqDXUBfoII5bgDqXJaq8J5qPALBhkw9yBLt0du2Drmam
QhEQM8z+vpRXm9ZoSV2dfz06MFUqL91WtKIXGL0CAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTM9ePgKb0dTavuvjjdu5oI4tBA2DAfBgNVHSMEGDAWgBSEsvT6UWOvlhaO
iPv5y07R7Y+0xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hMTDAtbEZqcjVZV2pvajctY3RPMGUyUHRNUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvNGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8x
L3pQWGo0Q205SFUycjdyNDQzYnVhQ09MUVFOZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
NGFhNzg5LTg3OGItNDcyYi1iODQ3LTg3MmJhMmQ5ZjQ0Yy8xL2hMTDAtbEZqcjVZ
V2pvajctY3RPMGUyUHRNUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAD6weAMEAF8ryQMEAF8r+wMEANVb
xTANBgkqhkiG9w0BAQsFAAOCAQEAh+s+HMwUCITXBvG0MGskusOIzNFeo/ppVhqw
SxIyY/qEUP78dVmZ9mq8r85hqNRonvQgYIoSpfHSFPRHcXkoor0CqV2bdlMM3/tD
Q8AAnurgm2trQOgbGIT+fEeH7hZWOA7qeN6o69OYNsgizIBA0z5XQ9kz1PMAIYvG
vHo0I/O8RDW+APUJkW1XA9BOeaJM1GzrsLnzXKc3LpJCV9buGafwwUIXUMXrFY1s
ecUgnZDrzERKCeCBqLaiKXxqdXJ9ggNsj3IIsNiwoKhyMLZEhchQU4a2QQMzvJTZ
3yuEsyiuvKkRij5/Hu/2Fs7LMv/zhHxuLbepCY6DB5gpByVsxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org