Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZJMMd4sTubmThelYdY8jKVmWdF8.roa
File: ZJMMd4sTubmThelYdY8jKVmWdF8.roa (raw, json)
Hash identifier: n1s6QuhVrVcDlahKenSMapF5UCnmOM+ANoHdxRIcPNw=
Subject key identifier: 64:93:0C:77:8B:13:B9:B9:93:85:E9:58:75:8F:23:29:59:96:74:5F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 107AD106
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZJMMd4sTubmThelYdY8jKVmWdF8.roa
Signing time: Tue 21 Jun 2022 10:52:45 +0000
ROA not before: Tue 21 Jun 2022 10:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
212.192.11.0/24 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
193.124.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276484358 (0x107ad106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 21 10:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64930c778b13b9b99385e958758f23295996745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9e:69:11:99:ff:0c:f0:fe:b9:4b:df:51:d1:
a5:77:67:bc:dd:3d:3f:f5:80:85:ac:a5:2b:c9:ad:
37:dc:ba:b2:8e:e9:18:27:6b:0a:fd:23:a6:9f:44:
1b:aa:7d:41:e1:cb:c1:72:61:89:0c:b5:fc:8a:0d:
b4:57:0f:9d:84:4b:2a:9b:df:8d:d3:b6:0e:27:06:
68:ed:eb:4b:1f:e1:cf:54:76:f3:2d:ea:81:63:af:
bb:8b:ed:56:ba:a0:0b:8f:cf:72:e5:6e:24:43:33:
de:99:7c:ca:45:87:a0:ec:0c:0a:eb:16:de:67:1a:
fb:55:1f:ba:65:9f:c3:2e:e6:db:bc:46:98:bc:d0:
7f:3a:22:56:40:9d:68:82:0d:4c:a6:97:e9:f6:18:
42:49:07:68:28:6d:d2:f2:77:df:ef:d0:f5:0c:e4:
17:16:ae:34:15:b4:e2:96:82:e7:83:e6:7c:1d:6e:
5b:9f:7a:90:f1:f1:30:32:bb:82:68:84:bb:92:6b:
de:86:b2:80:69:91:5c:a4:87:cb:c9:3d:70:9f:bd:
c0:ab:d5:5a:82:3f:d5:80:54:26:1b:ce:78:2f:bf:
98:cc:f5:bd:55:78:1c:57:36:11:a4:39:a3:5f:8f:
96:97:f7:d5:9f:2d:22:88:5a:f8:2c:8b:cd:46:57:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:93:0C:77:8B:13:B9:B9:93:85:E9:58:75:8F:23:29:59:96:74:5F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZJMMd4sTubmThelYdY8jKVmWdF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.85.248.0/24
194.85.250.0/24
195.133.15.0/24
195.133.39.0/24
212.192.11.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1e:85:50:aa:1b:c9:bb:81:a4:54:3a:57:e3:db:dc:0e:f3:
37:84:32:71:4a:3b:2d:2a:49:fd:78:f1:b1:6d:a3:cd:33:5b:
9c:3c:ca:b7:d3:5c:6e:b9:13:76:5e:43:76:ad:49:40:8c:d9:
a8:97:e5:15:81:23:13:32:74:8b:60:09:32:99:41:fd:a1:c8:
f2:d9:b7:13:f0:88:7b:20:58:07:1a:36:93:8b:2a:ec:92:ad:
b4:d3:70:c5:a5:1b:16:2d:f8:32:79:1d:f6:d4:58:fe:51:05:
cf:91:f7:4f:ee:90:87:16:83:86:8c:23:f9:29:d4:bb:07:3f:
e2:95:00:dc:68:1e:34:4b:78:1b:9f:3d:f1:77:f2:76:de:4f:
13:78:3e:f4:ce:89:53:f8:54:06:f2:00:6e:1a:1a:a5:f1:c3:
60:6b:cf:52:c5:91:8d:c5:c9:31:bb:47:c6:1f:2f:34:e9:1c:
fd:88:22:4e:92:1a:27:4b:7e:25:11:58:37:1f:f2:56:ef:fe:
43:00:70:4c:af:75:72:37:88:e2:a5:4e:d4:04:2d:70:77:d3:
d7:9a:98:12:86:62:09:56:29:fa:7b:f5:71:18:12:73:35:39:
59:ad:09:a5:bc:12:4d:77:6e:6c:0a:d7:df:5b:6d:82:77:42:
89:ea:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:19 2024 by rpki-client on console-fra.rpki-client.org