Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/ZkWRaXdjOV1pzZyzZsjLsLIY3kY.roa
File: ZkWRaXdjOV1pzZyzZsjLsLIY3kY.roa (raw, json)
Hash identifier: L7tBgrBqf6inmWSQv10zOPXdnVJw5R/kAWpr8hGEEnY=
Subject key identifier: 66:45:91:69:77:63:39:5D:69:CD:9C:B3:66:C8:CB:B0:B2:18:DE:46
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 0182F3993FD436446EE3EBE4D965490EC144
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/ZkWRaXdjOV1pzZyzZsjLsLIY3kY.roa
Signing time: Wed 31 Aug 2022 11:11:22 +0000
ROA not before: Wed 31 Aug 2022 11:11:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196944
IP address blocks: 193.105.142.0/24 maxlen: 24
2001:678:fc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f3:99:3f:d4:36:44:6e:e3:eb:e4:d9:65:49:0e:c1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Aug 31 11:11:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=664591697763395d69cd9cb366c8cbb0b218de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:60:31:46:42:86:36:04:37:b9:fe:1e:62:
55:7d:60:6e:88:eb:4c:04:06:10:13:2e:50:e6:ec:
6e:6c:f9:ec:59:83:3a:93:2c:d4:f2:20:ac:3f:c6:
e9:00:ee:1d:7c:dd:13:a4:35:3c:50:70:8e:a0:ef:
77:46:d3:b3:7d:e1:68:a2:54:ca:d2:0a:83:76:a2:
db:e0:5b:db:2e:08:4f:ce:85:53:56:9a:2c:43:92:
63:d7:2a:2a:39:f5:9c:36:1d:97:27:88:41:8c:4b:
6f:f9:96:e5:5a:f1:91:52:64:83:4f:39:a2:75:78:
86:fe:ff:ae:e6:7b:dc:45:5c:34:b2:9f:d2:19:12:
94:d8:55:95:f4:b2:d6:7a:c0:06:8e:6d:09:bb:9b:
e2:46:21:65:08:bd:7d:ef:5e:3f:ac:61:05:e7:92:
bd:eb:a6:2d:63:35:90:cf:95:f3:86:41:04:6c:70:
4e:b2:71:c4:a3:2c:66:3a:62:f7:75:9f:23:7f:79:
19:a2:36:30:4f:45:7f:5a:6c:1d:9a:9e:db:85:8e:
80:7b:1e:89:f7:2c:7d:c7:b2:45:95:84:a1:b1:8a:
0c:4d:c9:2a:f1:25:bd:71:e5:e3:23:0c:d2:2c:d9:
2e:ff:05:96:ab:ae:83:76:06:59:e3:f5:df:72:80:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:91:69:77:63:39:5D:69:CD:9C:B3:66:C8:CB:B0:B2:18:DE:46
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/ZkWRaXdjOV1pzZyzZsjLsLIY3kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.142.0/24
IPv6:
2001:678:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:0c:e1:ac:b5:b0:58:fb:3a:18:ad:46:7b:76:31:9b:2d:f8:
a3:6a:bf:e1:3c:21:de:38:ea:95:9d:95:18:0c:d3:4a:ce:10:
2d:52:24:6d:66:8e:4a:18:85:40:f0:8a:59:1d:a1:e3:ff:04:
2f:2a:59:00:b5:53:6d:89:4a:f0:a8:97:76:3c:d6:d8:2a:ff:
e5:3f:f3:79:3c:05:60:5a:fe:e4:8f:d9:1c:ce:b6:b7:4c:6f:
38:ca:00:0a:77:40:19:56:2d:38:c8:52:a2:c6:b5:17:d7:a0:
50:91:ae:a3:7a:e8:39:36:43:26:8f:eb:28:56:5c:f0:2f:1f:
e9:de:fa:fe:c2:42:ce:57:45:07:b6:43:12:b7:80:e0:e8:f1:
d6:48:9a:42:84:07:c8:e5:49:b7:f4:20:f7:5b:5f:12:b3:2b:
63:52:f7:33:4a:af:41:db:78:97:01:10:e2:38:a1:fa:97:36:
b2:79:24:bd:42:d0:7a:cf:45:b2:55:ca:b0:d9:c3:a6:7b:b0:
41:2f:65:49:29:bc:fb:5c:8c:19:8e:3a:11:47:35:f3:d8:32:
f9:09:b2:f9:a1:23:7f:58:8f:3e:81:ca:d8:33:f7:68:2a:96:
ff:e7:b0:1d:53:e6:d2:78:d0:e3:f7:31:7f:93:36:98:29:48:
77:ea:5a:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLzmT/UNkRu4+vk2WVJDsFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjIwODMxMTExMTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjQ1OTE2OTc3NjMzOTVkNjljZDljYjM2NmM4Y2JiMGIyMThkZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aNgMUZChjYEN7n+HmJVfWBuiOtM
BAYQEy5Q5uxubPnsWYM6kyzU8iCsP8bpAO4dfN0TpDU8UHCOoO93RtOzfeFoolTK
0gqDdqLb4FvbLghPzoVTVposQ5Jj1yoqOfWcNh2XJ4hBjEtv+ZblWvGRUmSDTzmi
dXiG/v+u5nvcRVw0sp/SGRKU2FWV9LLWesAGjm0Ju5viRiFlCL19714/rGEF55K9
66YtYzWQz5XzhkEEbHBOsnHEoyxmOmL3dZ8jf3kZojYwT0V/Wmwdmp7bhY6Aex6J
9yx9x7JFlYShsYoMTckq8SW9ceXjIwzSLNku/wWWq66DdgZZ4/XfcoA6EQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGZFkWl3Yzldac2cs2bIy7CyGN5GMB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvWmtXUmFYZGpPVjFwelp5elpzakxzTElZM2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWmOMA8E
AgACMAkDBwAgAQZ4D8AwDQYJKoZIhvcNAQELBQADggEBAKEM4ay1sFj7OhitRnt2
MZst+KNqv+E8Id446pWdlRgM00rOEC1SJG1mjkoYhUDwilkdoeP/BC8qWQC1U22J
SvCol3Y81tgq/+U/83k8BWBa/uSP2RzOtrdMbzjKAAp3QBlWLTjIUqLGtRfXoFCR
rqN66Dk2QyaP6yhWXPAvH+ne+v7CQs5XRQe2QxK3gODo8dZImkKEB8jlSbf0IPdb
XxKzK2NS9zNKr0HbeJcBEOI4ofqXNrJ5JL1C0HrPRbJVyrDZw6Z7sEEvZUkpvPtc
jBmOOhFHNfPYMvkJsvmhI39Yjz6Bytgz92gqlv/nsB1T5tJ40OP3MX+TNpgpSHfq
WmA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:34 2024 by rpki-client on console-fra.rpki-client.org