Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mzZB_cPb4JoAEydDxhEoHbmdg4o.roa
File: mzZB_cPb4JoAEydDxhEoHbmdg4o.roa (raw, json)
Hash identifier: qQavgpTlDOteM7afI6TNzXdZOxDuRhUKd4sIHMaHO9w=
Subject key identifier: 9B:36:41:FD:C3:DB:E0:9A:00:13:27:43:C6:11:28:1D:B9:9D:83:8A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01847F994DF330F8718F60799B0E4FB87EE3
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mzZB_cPb4JoAEydDxhEoHbmdg4o.roa
Signing time: Wed 16 Nov 2022 08:41:04 +0000
ROA not before: Wed 16 Nov 2022 08:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24964
IP address blocks: 82.103.126.0/24 maxlen: 24
212.91.186.0/24 maxlen: 24
212.91.184.0/24 maxlen: 24
82.103.127.0/24 maxlen: 24
212.91.185.0/24 maxlen: 24
195.34.123.0/24 maxlen: 24
212.91.187.0/24 maxlen: 24
88.203.132.0/24 maxlen: 24
89.253.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7f:99:4d:f3:30:f8:71:8f:60:79:9b:0e:4f:b8:7e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Nov 16 08:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b3641fdc3dbe09a00132743c611281db99d838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:d3:c9:a4:b7:81:03:8c:a3:f9:55:ee:29:
e8:e9:b4:8e:52:01:ae:f3:36:0e:60:6a:2d:4b:3a:
30:bd:75:c0:64:df:2b:aa:20:78:e2:4d:0f:e1:0e:
36:db:c9:ae:7c:b9:c3:f5:99:a9:d6:7b:4a:9f:d7:
cc:9f:c0:a2:75:9f:4a:6f:c6:a4:2e:74:01:e6:6b:
20:aa:f0:0d:af:88:33:16:72:8d:cd:f9:51:67:4e:
d2:f7:9a:25:a5:fb:fd:82:28:32:77:5c:74:7b:eb:
d7:dc:4d:43:79:72:9d:a6:f6:5a:ef:b4:0c:ac:27:
66:4c:6d:08:7b:c1:d6:8b:ea:ae:13:9d:6b:bc:77:
e0:10:35:d6:b9:d1:01:da:c6:19:3d:5e:51:c9:47:
ae:29:4e:0d:60:19:02:0b:89:70:ef:15:68:38:6c:
9f:c5:6b:0f:69:c4:0a:bb:4d:d6:2d:50:36:be:13:
d4:f2:e4:21:34:98:bb:49:9e:6e:82:00:41:19:28:
ad:ff:77:65:55:c2:ab:93:96:48:07:03:07:64:57:
6c:d1:76:ee:d0:fd:be:23:fb:2e:31:66:42:c2:8d:
85:5c:ae:fb:21:6c:4a:ef:80:c8:c7:2b:2d:e5:cc:
84:4d:a0:1d:5f:e8:81:14:89:76:06:e7:10:ef:9d:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:36:41:FD:C3:DB:E0:9A:00:13:27:43:C6:11:28:1D:B9:9D:83:8A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mzZB_cPb4JoAEydDxhEoHbmdg4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.126.0/23
88.203.132.0/24
89.253.163.0/24
195.34.123.0/24
212.91.184.0/22
Signature Algorithm: sha256WithRSAEncryption
90:bc:c2:06:a2:75:2b:31:59:cb:a6:15:5b:bc:52:80:05:e3:
28:42:f6:a5:fa:f0:56:2f:ca:a4:18:7d:ee:ce:c6:99:9c:c4:
7e:0e:9d:96:de:4c:21:59:3f:41:1f:cd:66:ee:c9:a5:ad:96:
6b:28:2e:dd:1e:dc:c6:22:82:9b:54:f8:3f:05:39:e8:e8:bb:
90:c1:bc:2c:a3:91:16:bb:7b:eb:52:e4:fe:df:17:42:23:30:
de:0d:52:dd:9a:60:8e:35:0b:af:5c:c6:08:d9:27:fc:63:37:
8d:43:ee:71:71:b9:cd:dd:98:89:a2:b6:d6:64:77:09:a1:1d:
9d:be:80:82:09:d6:6a:4f:84:2c:3d:24:ac:60:58:05:9d:04:
54:df:8d:25:8a:98:f6:68:3e:8e:be:c9:6b:92:b3:dc:53:96:
01:a1:5b:e5:2a:7f:07:0c:4a:c2:d8:9f:71:bc:3f:ed:8b:10:
f1:f0:7a:c2:e1:e7:b4:b6:f6:8a:84:a9:ba:d0:2c:51:8d:31:
8e:a2:63:05:24:ef:07:f1:dd:55:e7:27:12:db:f5:5e:11:ed:
ab:58:59:55:14:ae:2f:62:65:1c:e0:7a:df:7c:95:47:2c:51:
d0:27:d5:4a:10:e8:a5:54:a3:54:75:18:1c:18:b3:72:5d:91:
3f:c3:53:7c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYR/mU3zMPhxj2B5mw5PuH7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjIxMTE2MDg0MTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjM2NDFmZGMzZGJlMDlhMDAxMzI3NDNjNjExMjgxZGI5OWQ4MzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRXTyaS3gQOMo/lV7ino6bSOUgGu
8zYOYGotSzowvXXAZN8rqiB44k0P4Q4228mufLnD9Zmp1ntKn9fMn8CidZ9Kb8ak
LnQB5msgqvANr4gzFnKNzflRZ07S95olpfv9gigyd1x0e+vX3E1DeXKdpvZa77QM
rCdmTG0Ie8HWi+quE51rvHfgEDXWudEB2sYZPV5RyUeuKU4NYBkCC4lw7xVoOGyf
xWsPacQKu03WLVA2vhPU8uQhNJi7SZ5uggBBGSit/3dlVcKrk5ZIBwMHZFds0Xbu
0P2+I/suMWZCwo2FXK77IWxK74DIxyst5cyETaAdX+iBFIl2BucQ751dcQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJs2Qf3D2+CaABMnQ8YRKB25nYOKMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvbXpaQl9jUGI0Sm9BRXlkRHhoRW9IYm1kZzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUmd+AwQA
WMuEAwQAWf2jAwQAwyJ7AwQC1Fu4MA0GCSqGSIb3DQEBCwUAA4IBAQCQvMIGonUr
MVnLphVbvFKABeMoQval+vBWL8qkGH3uzsaZnMR+Dp2W3kwhWT9BH81m7smlrZZr
KC7dHtzGIoKbVPg/BTno6LuQwbwso5EWu3vrUuT+3xdCIzDeDVLdmmCONQuvXMYI
2Sf8YzeNQ+5xcbnN3ZiJorbWZHcJoR2dvoCCCdZqT4QsPSSsYFgFnQRU340lipj2
aD6OvslrkrPcU5YBoVvlKn8HDErC2J9xvD/tixDx8HrC4ee0tvaKhKm60CxRjTGO
omMFJO8H8d1V5ycS2/VeEe2rWFlVFK4vYmUc4HrffJVHLFHQJ9VKEOilVKNUdRgc
GLNyXZE/w1N8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-ams.rpki-client.org