Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/ZFOneumZ_5WAyvzB7zEJTLvS5Zc.roa
File: ZFOneumZ_5WAyvzB7zEJTLvS5Zc.roa (raw, json)
Hash identifier: EI2HOklRazFO3n9hvMulCTfpeUiS957ihq1++JuGhnQ=
Subject key identifier: 64:53:A7:7A:E9:99:FF:95:80:CA:FC:C1:EF:31:09:4C:BB:D2:E5:97
Certificate issuer: /CN=79730b9ea010d832f940efb589c51889132f4c94
Certificate serial: 0ED4CEA4
Authority key identifier: 79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/ZFOneumZ_5WAyvzB7zEJTLvS5Zc.roa
Signing time: Sat 01 Jan 2022 01:52:18 +0000
ROA not before: Sat 01 Jan 2022 01:52:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41955
IP address blocks: 194.26.188.0/22 maxlen: 24
185.199.216.0/22 maxlen: 24
2a0a:a3c0::/32 maxlen: 32
2a0a:a3c0::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 248827556 (0xed4cea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79730b9ea010d832f940efb589c51889132f4c94
Validity
Not Before: Jan 1 01:52:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6453a77ae999ff9580cafcc1ef31094cbbd2e597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:23:85:ed:d5:cd:4a:cf:ac:80:66:00:ed:
fb:ad:38:56:b0:bc:05:32:78:c1:b8:4f:1c:3a:06:
ab:b4:67:c7:d1:46:13:46:d8:aa:a0:c9:a0:69:79:
1f:0e:0c:ea:5c:79:0e:c1:3d:c8:87:8f:ac:d3:a1:
7e:af:87:5c:6d:ba:31:6f:8e:d0:93:90:4a:1a:15:
03:a2:ae:c0:3c:21:5a:a3:d2:72:c2:90:d2:de:9f:
e8:03:17:19:d4:0b:36:77:8a:de:26:d4:50:54:fd:
1c:7c:89:c4:d9:55:20:0c:c7:9f:4e:23:a5:7b:75:
87:a9:0d:2d:1d:03:61:d5:6a:0c:85:2a:7f:ca:e0:
b8:e4:5c:76:9d:7a:73:7c:a9:f6:bf:4b:9f:b4:e9:
4e:1b:96:c1:73:75:59:1c:47:bc:5b:81:1c:df:3a:
a6:74:75:db:60:4e:9f:e9:09:b4:2a:38:70:35:71:
76:2f:f2:e2:96:97:a9:d4:78:1f:4a:35:45:ad:bd:
f6:91:20:c4:a0:9d:56:7d:c3:be:74:a6:e4:4c:18:
79:16:6a:8e:fd:60:ac:4d:e8:70:ea:74:98:92:4d:
e6:67:b8:05:ba:1a:92:7c:d8:31:45:83:0d:19:2c:
c7:f0:5b:8f:50:77:d4:5d:7c:87:ef:26:4c:14:49:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:53:A7:7A:E9:99:FF:95:80:CA:FC:C1:EF:31:09:4C:BB:D2:E5:97
X509v3 Authority Key Identifier:
keyid:79:73:0B:9E:A0:10:D8:32:F9:40:EF:B5:89:C5:18:89:13:2F:4C:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/ZFOneumZ_5WAyvzB7zEJTLvS5Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a02cc6-1308-47e4-a087-39605f9081b7/1/eXMLnqAQ2DL5QO-1icUYiRMvTJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.216.0/22
194.26.188.0/22
IPv6:
2a0a:a3c0::/32
Signature Algorithm: sha256WithRSAEncryption
71:ae:c0:ed:5b:e2:7d:15:09:5e:35:42:c6:76:46:18:b7:d7:
41:91:fd:01:55:92:a8:68:0a:be:30:dd:d9:1a:ca:90:c0:f9:
01:d7:7a:3d:ce:16:95:a2:ee:46:e9:1d:a7:5c:fd:89:5f:37:
1e:6d:40:2e:90:11:9a:7f:c8:20:fc:ad:9d:c5:3c:da:3c:c2:
02:b0:9f:aa:48:93:6e:7e:da:42:84:78:38:26:56:8d:65:e4:
0f:5e:2d:6c:9a:4c:88:16:d7:af:c1:4c:e2:6f:08:c7:72:08:
5d:66:74:ef:56:45:a7:9e:7f:b9:07:8a:92:9c:aa:ed:fa:24:
53:6f:fd:72:90:ed:87:a3:43:64:3d:e7:0f:4a:13:55:b2:84:
72:8b:71:11:8d:b2:18:4a:c6:86:40:f6:cf:6b:f1:36:6a:13:
55:8c:19:ea:92:6f:30:85:93:ef:f8:e8:6b:da:5d:79:8c:ae:
8b:7a:6c:44:56:a0:d3:fc:6f:56:5e:33:90:4e:5f:d3:2c:a5:
02:6b:e1:88:b1:2f:a3:a5:33:08:ba:7a:d8:08:4d:a9:83:cd:
b4:ef:0b:43:ff:be:ee:19:9f:a2:69:2f:0b:5a:d3:58:58:78:
e3:ce:8a:b7:a7:c0:7d:90:25:a2:93:94:c6:ea:d5:80:f8:a4:
f7:38:73:55
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDtTOpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
OTczMGI5ZWEwMTBkODMyZjk0MGVmYjU4OWM1MTg4OTEzMmY0Yzk0MB4XDTIyMDEw
MTAxNTIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjQ1M2E3N2FlOTk5
ZmY5NTgwY2FmY2MxZWYzMTA5NGNiYmQyZTU5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALSfI4Xt1c1Kz6yAZgDt+604VrC8BTJ4wbhPHDoGq7Rnx9FG
E0bYqqDJoGl5Hw4M6lx5DsE9yIePrNOhfq+HXG26MW+O0JOQShoVA6KuwDwhWqPS
csKQ0t6f6AMXGdQLNneK3ibUUFT9HHyJxNlVIAzHn04jpXt1h6kNLR0DYdVqDIUq
f8rguORcdp16c3yp9r9Ln7TpThuWwXN1WRxHvFuBHN86pnR122BOn+kJtCo4cDVx
di/y4paXqdR4H0o1Ra299pEgxKCdVn3DvnSm5EwYeRZqjv1grE3ocOp0mJJN5me4
BboaknzYMUWDDRksx/Bbj1B31F18h+8mTBRJE50CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRkU6d66Zn/lYDK/MHvMQlMu9LllzAfBgNVHSMEGDAWgBR5cwueoBDYMvlA
77WJxRiJEy9MlDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VYTUxucUFRMkRMNVFPLTFpY1VZaVJNdlRKUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTEvYTAyY2M2LTEzMDgtNDdlNC1hMDg3LTM5NjA1ZjkwODFiNy8x
L1pGT25ldW1aXzVXQXl2ekI3ekVKVEx2UzVaYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTEv
YTAyY2M2LTEzMDgtNDdlNC1hMDg3LTM5NjA1ZjkwODFiNy8xL2VYTUxucUFRMkRM
NVFPLTFpY1VZaVJNdlRKUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArnH2AMEAsIavDANBAIAAjAHAwUA
KgqjwDANBgkqhkiG9w0BAQsFAAOCAQEAca7A7VvifRUJXjVCxnZGGLfXQZH9AVWS
qGgKvjDd2RrKkMD5Add6Pc4WlaLuRukdp1z9iV83Hm1ALpARmn/IIPytncU82jzC
ArCfqkiTbn7aQoR4OCZWjWXkD14tbJpMiBbXr8FM4m8Ix3IIXWZ071ZFp55/uQeK
kpyq7fokU2/9cpDth6NDZD3nD0oTVbKEcotxEY2yGErGhkD2z2vxNmoTVYwZ6pJv
MIWT7/joa9pdeYyui3psRFag0/xvVl4zkE5f0yylAmvhiLEvo6UzCLp62AhNqYPN
tO8LQ/++7hmfomkvC1rTWFh4486Kt6fAfZAlopOUxurVgPik9zhzVQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:51 2024 by rpki-client on console-ams.rpki-client.org