Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/zoRPnCSjy4PFaciiXk2brhBN7DM.roa
File: zoRPnCSjy4PFaciiXk2brhBN7DM.roa (raw, json)
Hash identifier: Cn1OMl4oO2iCjHC/RCQSbF7BtA0g70QDgjmN6msZOaE=
Subject key identifier: CE:84:4F:9C:24:A3:CB:83:C5:69:C8:A2:5E:4D:9B:AE:10:4D:EC:33
Certificate issuer: /CN=5324defbaade93e998e13a942029dd593b8b2ea3
Certificate serial: 1A2F3D74
Authority key identifier: 53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/zoRPnCSjy4PFaciiXk2brhBN7DM.roa
Signing time: Sat 01 Jan 2022 12:55:17 +0000
ROA not before: Sat 01 Jan 2022 12:55:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197328
IP address blocks: 167.160.11.0/24 maxlen: 24
162.222.88.0/24 maxlen: 24
167.160.13.0/24 maxlen: 24
5.255.57.0/24 maxlen: 24
5.255.62.0/24 maxlen: 24
5.255.61.0/24 maxlen: 24
5.255.63.0/24 maxlen: 24
185.150.2.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
185.165.47.0/24 maxlen: 24
91.92.112.0/23 maxlen: 23
185.4.224.0/23 maxlen: 23
185.4.227.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
185.212.172.0/24 maxlen: 24
185.212.173.0/24 maxlen: 24
23.252.66.0/24 maxlen: 24
185.162.72.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439303540 (0x1a2f3d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5324defbaade93e998e13a942029dd593b8b2ea3
Validity
Not Before: Jan 1 12:55:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce844f9c24a3cb83c569c8a25e4d9bae104dec33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:82:0c:1a:22:68:44:9b:17:b4:8e:ee:e5:
19:65:14:03:73:5e:f6:24:21:b6:aa:ca:69:0c:f9:
7a:07:2f:ce:dd:cd:1a:e9:48:f0:6b:c5:be:6d:e1:
e3:1d:e9:b7:85:7e:74:19:c8:45:9d:7d:ca:e9:c6:
1f:76:98:a3:eb:e3:3c:10:fe:37:be:01:5d:8e:70:
a6:22:40:df:8c:c8:39:45:64:85:51:57:10:0f:ab:
6e:06:df:7b:83:84:c0:ef:0e:01:29:ce:1c:38:f1:
63:74:d9:03:76:92:49:a8:91:01:bc:23:5d:fe:ee:
a1:10:11:24:e2:64:a4:6b:97:1f:a8:4b:1d:a1:d0:
a1:35:f6:b0:70:44:dc:89:fe:72:c9:7a:84:41:cc:
77:bd:ba:f2:02:31:59:b2:e0:c2:37:e0:17:dd:53:
a3:a5:cb:b5:3f:30:de:e5:69:72:4c:6b:c8:1b:a4:
9d:f1:77:43:f3:3f:70:95:e7:de:21:9b:e9:c0:47:
a8:eb:f3:9f:e0:0b:b6:5c:a6:ed:0f:5a:5d:68:92:
38:69:0b:d4:7a:d6:4d:90:07:0e:1a:a9:8e:1b:df:
65:9c:85:06:17:d8:e3:43:a2:7b:a1:53:26:11:86:
b8:7f:97:b8:1c:0c:1f:69:37:67:d6:31:c2:37:e3:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:84:4F:9C:24:A3:CB:83:C5:69:C8:A2:5E:4D:9B:AE:10:4D:EC:33
X509v3 Authority Key Identifier:
keyid:53:24:DE:FB:AA:DE:93:E9:98:E1:3A:94:20:29:DD:59:3B:8B:2E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UyTe-6rek-mY4TqUICndWTuLLqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/zoRPnCSjy4PFaciiXk2brhBN7DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/294e84-cfc5-45a4-a5cd-33b7459975e0/1/UyTe-6rek-mY4TqUICndWTuLLqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.57.0/24
5.255.61.0-5.255.63.255
23.252.66.0/24
91.92.112.0/23
107.150.177.0/24
162.222.88.0/24
167.160.11.0/24
167.160.13.0/24
167.160.27.0/24
185.4.224.0/23
185.4.227.0/24
185.150.2.0/24
185.162.72.0/23
185.165.47.0/24
185.212.172.0/23
Signature Algorithm: sha256WithRSAEncryption
85:d4:1f:23:d1:d5:4f:3f:2c:3c:6c:6e:d1:ba:26:95:8e:ff:
8f:5a:42:b2:ff:fe:1c:6a:a9:8c:45:63:8d:29:51:4f:aa:b1:
f6:dc:28:9d:69:0b:c3:50:a2:64:74:5a:72:49:c1:81:70:4e:
3a:1c:07:f6:6e:ae:6f:e1:3c:71:9d:98:50:4c:aa:23:e3:34:
62:3b:02:d0:1a:36:fb:36:00:62:cb:ca:45:bc:bc:99:12:9c:
1d:8a:98:a1:93:d3:ed:fa:b5:2b:89:70:b9:95:40:e1:c9:6b:
5c:82:be:1f:b0:57:5c:51:b1:9d:de:06:1b:f3:9c:f4:22:f8:
eb:ba:28:bc:77:3b:86:03:b1:5f:10:06:1e:b3:4e:bb:a9:b2:
b7:0d:70:d2:55:90:bc:f5:db:98:50:78:58:9c:16:ca:fe:1f:
3a:b2:8c:e2:34:b7:e0:6f:2b:77:76:a8:d8:87:94:b4:93:91:
35:02:57:74:3b:61:d0:c8:1e:cd:11:20:ca:f9:8a:f1:f4:55:
f3:6c:f0:6b:83:64:ec:bd:72:45:4d:3d:c2:6d:42:09:32:ba:
89:65:b4:e3:34:f0:f0:29:d1:fd:4f:13:43:58:a8:ed:55:d3:
1a:b9:d7:ae:9d:27:77:7d:3b:a3:f8:55:c1:71:17:bd:ba:01:
7f:e3:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org