Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZxAVUnYzL4z7G1nKlubhhnKaM8k.roa
File: ZxAVUnYzL4z7G1nKlubhhnKaM8k.roa (raw, json)
Hash identifier: gMFuFakilju6QM8as/QGparHfRdaPIM/LGUage5kQe0=
Subject key identifier: 67:10:15:52:76:33:2F:8C:FB:1B:59:CA:96:E6:E1:86:72:9A:33:C9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 1066942D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZxAVUnYzL4z7G1nKlubhhnKaM8k.roa
Signing time: Fri 17 Jun 2022 12:37:44 +0000
ROA not before: Fri 17 Jun 2022 12:37:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 194.87.216.0/24 maxlen: 24
194.87.218.0/24 maxlen: 24
194.87.225.0/24 maxlen: 24
194.87.31.0/24 maxlen: 24
194.87.36.0/22 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
212.192.14.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.25.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
193.108.112.0/24 maxlen: 24
194.135.104.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275158061 (0x1066942d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 17 12:37:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6710155276332f8cfb1b59ca96e6e186729a33c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:f6:60:80:40:2d:af:11:9d:2f:ff:2d:c1:
08:5a:62:ba:19:d2:83:61:67:07:6f:67:70:4e:cf:
1c:a9:e4:e1:44:c3:58:be:35:9e:54:7f:d8:a5:2a:
33:62:bf:fe:f0:43:dd:13:f1:c5:58:7c:ab:88:5f:
f8:ef:35:7f:34:68:5b:d0:4a:45:e2:36:61:91:01:
d8:ab:78:2b:95:4f:3e:c3:b6:2b:5c:ed:ea:97:65:
dc:e8:7e:17:98:be:b6:41:92:6c:57:0e:02:9e:e1:
4a:47:e5:61:38:89:b3:48:64:14:4d:83:06:09:8c:
be:eb:f3:91:5d:db:98:fe:08:21:c1:e4:57:24:c5:
67:da:9b:cc:1f:8e:47:ba:7d:ab:f0:2d:f5:02:6a:
0b:86:9b:1d:40:72:81:1f:4c:51:de:42:8d:b9:0f:
61:8f:81:b9:72:eb:18:19:9e:1c:70:1d:04:ca:2a:
57:6c:d1:bc:d0:74:d9:21:cc:70:a2:a3:e4:42:f6:
e6:a6:3d:84:dd:3a:cd:e5:3c:0a:28:10:25:5c:18:
e4:cb:74:f4:fe:84:0e:2a:4f:28:0c:c8:3c:94:43:
40:0c:56:29:b1:af:cb:26:1e:b8:c9:71:42:e1:db:
88:95:44:bc:5c:f3:29:5e:19:00:20:f3:66:8c:f4:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:15:52:76:33:2F:8C:FB:1B:59:CA:96:E6:E1:86:72:9A:33:C9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZxAVUnYzL4z7G1nKlubhhnKaM8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.112.0/24
194.87.31.0/24
194.87.36.0/22
194.87.216.0/24
194.87.218.0/24
194.87.225.0/24
194.135.32.0/24
194.135.38.0/24
194.135.104.0/24
195.133.9.0/24
195.133.21.0/24
195.133.25.0-195.133.27.255
195.133.55.0/24
195.133.59.0/24
212.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e9:24:d0:15:ff:ac:86:c8:8f:d0:9a:20:e8:81:d2:e6:0c:
d2:cd:f2:8c:ac:b4:e8:f9:c3:5c:df:db:e6:45:88:3e:ec:5d:
a0:a4:fb:e3:ba:be:88:79:20:76:8a:41:df:d8:16:d3:ba:8f:
ed:3b:10:34:5e:7e:d1:7b:9f:e1:67:dc:af:87:ee:6d:ee:04:
de:0b:44:15:db:b6:3a:e4:06:4b:1b:2c:46:36:00:c9:76:01:
3d:44:f3:37:29:19:58:2b:9b:b7:ca:47:b8:23:62:31:61:72:
82:53:27:0f:a8:32:f6:fe:e4:19:37:a7:b4:7c:42:d4:bb:aa:
d9:bd:ea:5d:86:5a:71:d6:05:b8:b3:98:03:1e:e4:cc:4c:f7:
2c:d1:69:2b:82:5c:f7:83:9a:65:19:ab:87:ed:1b:81:1b:d3:
d9:f8:d4:52:22:63:ef:ec:b3:eb:25:12:7a:20:6f:88:b6:f1:
40:c6:3a:91:67:62:05:d3:69:18:ed:ab:8d:d0:11:60:bd:19:
0f:f8:5e:42:92:47:79:e0:bd:de:85:50:c6:42:a7:c4:4d:7a:
06:d8:2e:27:f5:f3:f4:a4:7d:2b:ea:84:d1:df:50:0e:46:ad:
69:c3:1f:7a:28:a1:a9:d6:42:0f:3b:e2:8a:58:11:51:62:42:
ad:df:8d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:20 2024 by rpki-client on console-fra.rpki-client.org