Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zt0q8upskCzCsEoj13JiLUt4xUY.roa
File: Zt0q8upskCzCsEoj13JiLUt4xUY.roa (raw, json)
Hash identifier: iH25Tt3rTjloD4k4mUiNb3+Wty8OHoJNUmKkHUFAIBo=
Subject key identifier: 66:DD:2A:F2:EA:6C:90:2C:C2:B0:4A:23:D7:72:62:2D:4B:78:C5:46
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0FE991F0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zt0q8upskCzCsEoj13JiLUt4xUY.roa
Signing time: Mon 16 May 2022 14:31:46 +0000
ROA not before: Mon 16 May 2022 14:31:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
212.193.0.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.89.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/23 maxlen: 24
194.87.166.0/24 maxlen: 24
192.124.173.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.188.0/22 maxlen: 22
194.87.179.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266965488 (0xfe991f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 16 14:31:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66dd2af2ea6c902cc2b04a23d772622d4b78c546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:c0:8a:9a:e4:18:6b:28:50:b8:dc:bf:1a:
65:8e:6f:67:2b:e1:4a:08:b6:dc:c2:b4:04:af:ae:
e5:cf:86:72:3c:af:b9:83:f1:77:9c:d8:95:b7:75:
9e:4d:c9:4d:95:b5:93:e4:f2:08:c3:cd:f0:79:2d:
02:7b:8b:b2:37:72:ca:5b:2a:61:9d:05:b4:57:34:
15:72:42:cd:8f:e5:ee:54:94:c9:b3:b0:78:03:39:
20:8b:6c:90:e2:d7:d8:fe:49:b0:69:b7:68:29:ee:
81:50:ba:ad:bc:4a:f8:95:42:10:01:4b:f8:1a:9d:
64:31:28:e7:76:c2:de:47:47:9d:dd:75:02:79:07:
60:67:ed:3d:d0:ad:84:0b:2f:cc:87:c1:ca:f6:d2:
14:bc:93:89:2f:11:87:8c:e5:99:e1:e7:73:7c:8c:
8f:16:da:e3:99:4c:a7:a4:55:da:bc:e2:99:b8:32:
4f:fc:1d:e2:fb:2a:0e:e7:78:f7:93:0c:21:ee:cd:
dc:52:6f:91:37:22:20:85:07:67:1b:17:17:35:c0:
28:fd:8b:d4:58:b2:96:59:83:99:de:41:d7:99:ef:
1e:70:17:3d:3f:cb:42:f2:38:92:01:bc:77:7c:23:
d0:88:db:a1:fd:f3:af:2e:df:32:af:63:11:e7:5a:
54:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:2A:F2:EA:6C:90:2C:C2:B0:4A:23:D7:72:62:2D:4B:78:C5:46
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zt0q8upskCzCsEoj13JiLUt4xUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
192.124.173.0/24
192.124.178.0/24
192.124.180.0/22
192.124.188.0/22
192.124.209.0/24
193.124.4.0/24
193.124.89.0/24
193.124.91.0/24
193.124.93.0/24
193.124.95.0/24
193.124.202.0/23
193.124.205.0/24
193.124.207.0/24
194.58.60.0/24
194.87.22.0/24
194.87.64.0/24
194.87.104.0/24
194.87.166.0/24
194.87.172.0/24
194.87.179.0/24
194.87.200.0/24
194.87.226.0/24
194.135.23.0/24
195.58.35.0/24
195.58.50.0/24
195.58.52.0/24
195.133.81.0/24
212.192.10.0/23
212.193.0.0/22
Signature Algorithm: sha256WithRSAEncryption
82:8f:5c:74:3b:23:ed:5d:80:69:4d:a1:3b:d2:f6:1c:eb:64:
42:94:da:72:33:54:d0:ca:a5:99:e0:38:69:1c:32:9d:31:81:
82:04:d9:ff:c7:9d:ae:fa:c7:88:b9:0d:66:30:04:80:a7:7b:
9a:81:b6:27:ba:0f:6e:dc:2d:af:59:15:34:e0:d9:6f:14:42:
2a:50:5d:b7:8b:88:8d:c3:91:06:70:d9:c1:9f:03:50:75:33:
2e:45:73:d3:f1:f5:bd:5c:c4:b2:bb:b9:bf:b6:00:d9:60:60:
a8:bb:b3:1e:34:bb:e8:e7:95:ae:8a:a2:03:bd:69:4e:56:f0:
1a:79:21:0c:a1:c1:8d:42:f6:6b:b9:64:36:66:ab:b1:51:be:
c5:45:5c:2f:65:52:bb:42:90:86:0c:d4:1d:f9:5f:70:0c:68:
44:2d:f1:43:b5:8d:b9:bb:70:ff:d4:73:9d:be:b7:8b:ef:7f:
e0:d1:94:7d:d9:12:24:cb:97:aa:9e:fb:dc:94:0c:58:77:1c:
57:4a:48:95:9c:4a:9b:b2:8f:a1:83:b1:26:1e:fc:0f:7c:05:
a1:46:98:46:2f:68:44:2e:cd:a2:7a:2c:8f:cc:01:6e:1a:9f:
84:37:f8:4e:11:2b:29:79:16:32:4d:2d:8b:da:37:ec:c1:93:
64:e6:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org