Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZEtRidb-FQAiag3IizxSOs4Arn0.roa
File: ZEtRidb-FQAiag3IizxSOs4Arn0.roa (raw, json)
Hash identifier: 05F7V3zs59VplnV3tCW4Mh7ZPZXEbC6ezGU7CCcFaio=
Subject key identifier: 64:4B:51:89:D6:FE:15:00:22:6A:0D:C8:8B:3C:52:3A:CE:00:AE:7D
Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial: 01847576FF56FF1D32D319E30D14714142F9
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZEtRidb-FQAiag3IizxSOs4Arn0.roa
Signing time: Mon 14 Nov 2022 09:27:23 +0000
ROA not before: Mon 14 Nov 2022 09:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51188
IP address blocks: 194.28.0.0/22 maxlen: 22
185.166.28.0/22 maxlen: 24
193.93.132.0/22 maxlen: 22
193.28.203.0/24 maxlen: 24
2001:67c:25c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:76:ff:56:ff:1d:32:d3:19:e3:0d:14:71:41:42:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Validity
Not Before: Nov 14 09:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644b5189d6fe1500226a0dc88b3c523ace00ae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:0c:46:9f:7d:f7:ab:f6:26:2c:e8:d4:0f:
91:44:bf:ab:0c:27:01:14:d9:8b:0b:35:2e:ff:ef:
3f:49:b7:5c:51:5c:52:83:4a:41:66:75:29:b0:f1:
cb:c0:40:59:a8:03:d9:3c:7d:e2:62:2d:d0:37:cb:
05:af:6e:81:6d:38:ee:75:9e:f0:2b:96:25:6b:2a:
a7:d9:57:78:7f:e0:00:d7:f2:08:0b:65:cb:7d:e6:
6f:9c:d0:0c:5c:dd:ee:8e:95:92:f4:41:c0:fa:54:
e9:48:0c:ad:80:a6:e7:43:53:35:6a:23:c6:67:78:
df:bf:e0:75:cd:b9:00:07:74:d4:65:dd:2f:ce:0b:
d5:1f:87:2f:dc:22:e3:35:8b:69:ba:3b:53:df:9b:
a4:34:65:a4:33:92:d7:c6:e2:15:d2:bb:6e:48:aa:
24:20:e8:89:6d:4f:bb:06:8c:b6:25:a0:3c:1a:99:
2a:52:37:1b:3f:83:7c:da:c4:db:99:fc:21:4a:e3:
67:de:55:0b:ad:f8:33:65:43:c9:10:fe:13:e8:2c:
f3:96:54:14:94:af:64:11:a1:77:48:f0:83:ce:f8:
c4:56:23:8c:b5:4e:62:c6:08:81:20:c4:20:c9:de:
cc:5b:79:21:92:c7:20:3a:8e:bc:44:b1:ce:7e:bf:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:51:89:D6:FE:15:00:22:6A:0D:C8:8B:3C:52:3A:CE:00:AE:7D
X509v3 Authority Key Identifier:
keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/ZEtRidb-FQAiag3IizxSOs4Arn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.28.0/22
193.28.203.0/24
193.93.132.0/22
194.28.0.0/22
IPv6:
2001:67c:25c::/48
Signature Algorithm: sha256WithRSAEncryption
27:f5:5e:99:92:ea:40:a6:87:d1:51:6f:a4:87:f5:7d:e0:aa:
77:ab:a2:1e:ed:c7:34:7b:c3:ea:0c:97:fc:e3:c4:7e:84:77:
da:7b:da:ec:f8:1e:d7:43:bf:0c:2d:cf:51:1a:ae:99:87:7d:
53:38:2e:4c:f5:b2:03:31:95:40:d6:a9:fe:c6:6f:e9:6a:4e:
e7:3e:10:7e:56:58:7d:b9:0e:28:d9:6e:f5:03:ca:4b:b9:8c:
01:82:37:9f:9a:8c:c8:82:8d:68:0a:0f:32:77:94:5d:b6:7c:
c3:41:6d:af:a0:69:88:36:78:60:66:a1:15:0f:b4:2d:6b:ed:
47:50:40:14:b7:82:7c:51:4c:d1:a8:80:1e:2c:0d:e7:ad:e7:
af:58:b4:6c:32:ec:b2:a2:94:9e:36:59:d7:07:5a:f8:98:49:
47:ea:75:69:99:4b:94:a7:60:c1:51:e7:24:28:79:a5:68:a8:
ac:3a:a1:c7:8f:22:d5:0d:02:4a:65:81:d4:5b:ad:38:7a:c8:
b8:62:11:76:e1:9d:0f:30:02:fb:84:dd:f4:e9:b4:c1:06:f6:
b3:4a:53:f0:4c:59:46:84:c0:fe:c1:4d:e1:0e:26:40:ac:6a:
df:1e:45:1e:06:ad:34:3d:c5:26:90:4c:fe:35:eb:70:46:f9:
de:ad:2c:2f
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYR1dv9W/x0y0xnjDRRxQUL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz
MTczNjIwHhcNMjIxMTE0MDkyNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDRiNTE4OWQ2ZmUxNTAwMjI2YTBkYzg4YjNjNTIzYWNlMDBhZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt0MRp9996v2Jizo1A+RRL+rDCcB
FNmLCzUu/+8/SbdcUVxSg0pBZnUpsPHLwEBZqAPZPH3iYi3QN8sFr26BbTjudZ7w
K5Ylayqn2Vd4f+AA1/IIC2XLfeZvnNAMXN3ujpWS9EHA+lTpSAytgKbnQ1M1aiPG
Z3jfv+B1zbkAB3TUZd0vzgvVH4cv3CLjNYtpujtT35ukNGWkM5LXxuIV0rtuSKok
IOiJbU+7Boy2JaA8GpkqUjcbP4N82sTbmfwhSuNn3lULrfgzZUPJEP4T6CzzllQU
lK9kEaF3SPCDzvjEViOMtU5ixgiBIMQgyd7MW3khkscgOo68RLHOfr9R8QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFGRLUYnW/hUAImoNyIs8UjrOAK59MB8GA1UdIwQY
MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt
OWU3MWY2YTg0ODAxLzEvWkV0UmlkYi1GUUFpYWczSWl6eFNPczRBcm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx
LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCuaYcAwQA
wRzLAwQCwV2EAwQCwhwAMA8EAgACMAkDBwAgAQZ8AlwwDQYJKoZIhvcNAQELBQAD
ggEBACf1XpmS6kCmh9FRb6SH9X3gqneroh7txzR7w+oMl/zjxH6Ed9p72uz4HtdD
vwwtz1EarpmHfVM4Lkz1sgMxlUDWqf7Gb+lqTuc+EH5WWH25DijZbvUDyku5jAGC
N5+ajMiCjWgKDzJ3lF22fMNBba+gaYg2eGBmoRUPtC1r7UdQQBS3gnxRTNGogB4s
Deet569YtGwy7LKilJ42WdcHWviYSUfqdWmZS5SnYMFR5yQoeaVoqKw6ocePItUN
AkplgdRbrTh6yLhiEXbhnQ8wAvuE3fTptMEG9rNKU/BMWUaEwP7BTeEOJkCsat8e
RR4GrTQ9xSaQTP4163BG+d6tLC8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:32 2024 by rpki-client on console-ams.rpki-client.org