Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zauco_QRvami4LVn55-e8Yp5ihE.roa
File: zauco_QRvami4LVn55-e8Yp5ihE.roa (raw, json)
Hash identifier: zuwqRsEs0pLToTMQ/NyQogf9AnPZoL4Uxp4VOT6OeGI=
Subject key identifier: CD:AB:9C:A3:F4:11:BD:A9:A2:E0:B5:67:E7:9F:9E:F1:8A:79:8A:11
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01841D640E505950CEF9D425D9B54B20521F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zauco_QRvami4LVn55-e8Yp5ihE.roa
Signing time: Fri 28 Oct 2022 07:00:07 +0000
ROA not before: Fri 28 Oct 2022 07:00:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 195.133.86.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:64:0e:50:59:50:ce:f9:d4:25:d9:b5:4b:20:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 28 07:00:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdab9ca3f411bda9a2e0b567e79f9ef18a798a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:e9:43:c7:62:9d:ae:21:0e:76:9d:fe:86:
2b:a9:b1:7c:90:7f:e3:fa:32:e6:2b:f7:7e:6b:01:
a5:cb:ec:f2:40:74:9c:7a:3d:bb:53:ae:b0:60:6e:
0f:bb:f3:dd:da:17:8f:c2:dd:52:5e:14:99:ea:a5:
a3:55:e7:31:7d:60:21:f5:97:75:8a:56:d9:b2:23:
c9:52:93:76:13:b8:d4:5c:1a:c9:d8:89:36:84:4d:
09:82:0e:bd:a6:7a:8d:de:80:e5:1b:03:0b:ab:76:
e4:e1:06:7b:97:33:49:95:74:5a:db:7d:9e:91:60:
42:97:c4:7c:2a:9c:91:30:7f:d5:46:10:2b:2a:21:
7a:cb:d7:a2:b3:39:03:d9:f9:82:06:f3:45:e9:ff:
ed:0d:63:86:d5:b5:b0:7a:ab:c7:75:90:63:db:8e:
82:8d:3d:bc:1d:52:73:d8:fa:58:44:2d:31:62:b9:
ec:76:9c:3b:b8:e2:bb:ba:a8:3e:28:bb:c9:76:76:
dd:23:35:17:c6:6d:0c:98:74:27:25:0d:f9:c6:84:
b6:e4:f3:57:20:d1:32:4d:d0:f7:91:43:b7:3d:c2:
9a:6b:1b:04:d2:a4:d2:e5:b2:98:e2:d4:60:cf:36:
00:3b:79:a3:3d:96:bd:90:34:b4:8e:0e:e0:c8:2a:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:9C:A3:F4:11:BD:A9:A2:E0:B5:67:E7:9F:9E:F1:8A:79:8A:11
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zauco_QRvami4LVn55-e8Yp5ihE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.73.0/24
194.87.130.0/23
194.87.168.0/24
194.135.23.0/24
195.58.35.0/24
195.133.0.0/24
195.133.86.0/24
212.192.31.0/24
212.193.1.0/24
212.193.3.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f6:bf:49:4c:ae:1f:24:18:a1:ad:ad:78:f8:f9:f8:57:37:
0c:98:9f:1d:81:70:d7:95:3f:b9:4a:52:02:a8:e9:8e:a9:93:
d6:06:f0:9c:a8:48:5c:cd:f3:90:22:7f:b2:00:4e:5f:be:7b:
47:59:8b:24:68:1f:43:b0:5b:69:e3:e2:07:66:4d:14:3b:71:
92:c9:8a:a0:7f:bf:8b:b0:ca:db:d6:0d:d6:98:ac:42:2f:e2:
70:44:10:70:ee:a5:42:17:15:21:b1:f4:37:8e:7d:ef:ee:e0:
6b:57:db:ab:25:6a:41:12:74:3f:1a:8c:cf:89:e4:80:bf:79:
30:5e:c8:49:eb:31:00:41:68:76:2a:99:ee:a7:f1:6f:10:99:
32:cf:a2:d6:f8:20:1f:2e:9a:a0:7c:4c:70:ea:5a:90:80:c8:
07:47:1a:d2:26:11:0f:80:0f:ab:ec:80:04:0d:b6:06:50:29:
14:f9:56:58:0f:e6:b4:16:3c:86:a7:5f:89:57:84:9a:13:17:
70:72:6f:62:e8:70:63:26:77:a6:1f:ab:31:73:b2:8e:42:a4:
e3:c8:fd:b8:e2:e4:07:b9:57:73:be:a3:45:53:a2:f2:7d:cf:
1f:3d:a1:4a:89:18:ee:de:84:f1:ea:0a:d8:85:59:66:a7:27:
80:16:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:15 2023 by rpki-client on console-fra.rpki-client.org