Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZHJj0Qkseb5_ZM3TZpU0kf0DslA.roa
File: ZHJj0Qkseb5_ZM3TZpU0kf0DslA.roa (raw, json)
Hash identifier: TdFZ3bNlSg6XHvogU5YkQD7/mJXsW0vIsB/ORL0+w6w=
Subject key identifier: 64:72:63:D1:09:2C:79:BE:7F:64:CD:D3:66:95:34:91:FD:03:B2:50
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 1BD9BEDC
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZHJj0Qkseb5_ZM3TZpU0kf0DslA.roa
Signing time: Sat 01 Jan 2022 11:56:49 +0000
ROA not before: Sat 01 Jan 2022 11:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57033
IP address blocks: 89.185.16.0/21 maxlen: 21
185.30.203.0/24 maxlen: 24
5.56.24.0/23 maxlen: 23
5.56.28.0/23 maxlen: 23
5.56.30.0/23 maxlen: 23
5.56.26.0/23 maxlen: 23
89.185.0.0/22 maxlen: 22
93.185.218.0/23 maxlen: 23
93.185.216.0/23 maxlen: 23
89.185.4.0/24 maxlen: 24
89.185.4.0/22 maxlen: 22
93.185.222.0/23 maxlen: 23
93.185.220.0/23 maxlen: 23
89.185.7.0/24 maxlen: 24
89.185.5.0/24 maxlen: 24
89.185.8.0/21 maxlen: 21
89.185.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 467255004 (0x1bd9bedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Jan 1 11:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=647263d1092c79be7f64cdd366953491fd03b250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:ec:27:a9:1a:0c:27:ee:32:c8:c9:04:7e:
d5:d2:f8:a7:57:4c:2a:a2:f4:76:af:60:0b:13:6b:
38:81:fd:64:2e:78:6f:46:dd:e2:d7:94:27:f0:fc:
d4:da:8b:74:ee:0b:36:8d:f9:dd:ee:51:a6:70:2a:
42:e9:41:24:80:2b:25:70:c7:37:c2:16:1f:e7:cd:
dd:00:8c:85:ee:7d:d6:7f:1d:23:c3:d5:79:1d:28:
f8:16:65:5f:90:39:d1:25:26:6f:9c:19:7b:df:1d:
1d:5a:9d:20:b2:0b:31:6e:bc:92:c9:08:8b:a5:ae:
ef:af:cb:f5:d3:4a:74:fb:19:8b:94:2d:ce:f1:cb:
d5:ef:50:cb:4d:a4:b3:d7:6f:77:60:20:bf:e8:1c:
dc:a4:c5:7e:60:4b:b8:ab:98:f1:d8:52:a8:a8:a0:
52:93:dc:a4:19:2d:e6:e3:a6:41:4b:33:eb:b2:61:
39:e2:8e:82:c4:12:f4:73:92:17:aa:b3:77:42:c7:
bc:2e:9f:30:b4:7d:d7:22:88:01:9e:d4:2d:ac:eb:
e1:de:e7:bd:2a:7c:fc:b4:1a:b6:2d:2c:09:58:33:
f3:59:5d:72:a9:fd:46:f7:13:a2:c1:51:ae:d4:e0:
ca:1b:bc:1e:b6:33:ab:22:13:eb:cb:82:b0:92:e4:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:72:63:D1:09:2C:79:BE:7F:64:CD:D3:66:95:34:91:FD:03:B2:50
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/ZHJj0Qkseb5_ZM3TZpU0kf0DslA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.24.0/21
89.185.0.0-89.185.23.255
93.185.216.0/21
185.30.203.0/24
Signature Algorithm: sha256WithRSAEncryption
45:a2:8b:b0:27:54:c9:f0:94:e8:a0:b1:59:c4:c5:46:07:3f:
3b:23:a7:7c:fc:6b:9b:bf:6c:2b:03:ff:a2:e4:28:a1:e1:2b:
52:a4:64:18:7c:58:50:4b:83:b9:4e:b9:dc:a9:5d:55:c9:f0:
81:72:57:a6:e6:68:2f:6c:f1:d4:38:f6:fe:12:16:6e:07:ee:
94:45:27:5e:24:c3:25:1c:b1:d3:30:24:50:17:f3:69:aa:44:
5d:54:7f:d9:60:dd:4c:00:f3:92:65:b8:50:b0:e1:b3:76:aa:
99:6d:5b:78:1f:67:27:42:c1:4c:65:ac:2a:20:f0:5e:3b:5e:
9e:d6:15:c9:b2:ed:d9:3c:bd:60:22:08:17:3c:86:b5:cb:65:
52:71:3d:42:2e:42:2a:bd:39:af:90:bf:02:90:25:8d:91:15:
b2:5d:da:7f:11:9f:44:2f:70:36:a4:55:f9:2b:b0:b7:24:86:
29:3c:18:5d:51:13:d3:c1:1f:2e:ad:c7:c2:4f:d3:c8:97:3f:
fd:ea:8c:2e:79:52:95:70:db:70:96:b3:13:b7:5c:fa:8b:49:
05:eb:85:7c:8b:af:e3:cb:c9:8f:c7:fe:dd:22:4a:79:b4:0d:
d2:75:81:ff:9a:ac:f1:65:61:bf:09:32:bd:c8:0c:48:79:a3:
a9:68:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org