Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/zLmX-vlD5YnI_-0A-agWHAYsV2E.roa
File: zLmX-vlD5YnI_-0A-agWHAYsV2E.roa (raw, json)
Hash identifier: qf4L2zWEVJZo4Ylg/TfLeGMT01LdVnqApOq4YzZeKoU=
Subject key identifier: CC:B9:97:FA:F9:43:E5:89:C8:FF:ED:00:F9:A8:16:1C:06:2C:57:61
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 0A3090ED
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/zLmX-vlD5YnI_-0A-agWHAYsV2E.roa
Signing time: Sat 01 Jan 2022 06:56:39 +0000
ROA not before: Sat 01 Jan 2022 06:56:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202771
IP address blocks: 185.155.28.0/22 maxlen: 24
2a07:90c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170954989 (0xa3090ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Jan 1 06:56:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccb997faf943e589c8ffed00f9a8161c062c5761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:6b:a0:bf:7f:01:50:d9:56:76:20:1d:5b:
36:95:98:01:73:75:07:7f:86:2c:b0:75:d2:c7:e7:
24:bb:4f:5b:ce:22:43:32:0b:a7:35:b0:68:64:27:
cd:61:4b:ca:f6:ca:45:43:60:a2:62:a5:8b:0e:94:
e6:5a:ed:80:5c:99:0f:45:9a:69:9d:97:52:a9:cd:
ca:9b:d6:d2:4d:65:1d:85:8c:ec:8a:6f:d1:1a:0b:
58:90:11:6d:92:db:e9:7a:3c:97:5e:82:a9:bd:ea:
6e:b0:69:7d:c3:6b:c4:c3:19:d1:ac:24:b2:33:c4:
a9:19:e8:78:3e:71:37:fe:41:d2:ee:3a:61:ff:8c:
0a:38:d9:46:cf:fc:82:02:39:29:20:2f:2a:4f:83:
d6:d3:0e:10:c1:e7:a6:16:38:e4:fc:14:f2:88:a1:
94:fb:dc:95:1f:04:82:27:56:23:97:d3:45:25:f2:
4d:55:38:13:72:3f:bb:ca:20:90:58:4e:66:f0:ea:
81:36:20:90:aa:99:4b:90:4d:3e:5a:24:5f:d8:8c:
75:fe:f3:6b:74:9e:e4:51:42:d6:e8:e9:0e:79:9a:
48:07:3c:ff:54:70:1e:ff:4f:6c:95:d9:7d:e4:89:
50:72:d6:84:f1:6f:6f:9b:fe:d8:23:7f:e1:01:34:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B9:97:FA:F9:43:E5:89:C8:FF:ED:00:F9:A8:16:1C:06:2C:57:61
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/zLmX-vlD5YnI_-0A-agWHAYsV2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.28.0/22
IPv6:
2a07:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
97:e2:75:71:20:8c:8c:f4:a2:b4:4f:f8:b3:a4:91:c1:6e:b2:
8a:f5:9b:69:e3:99:e4:d3:fb:e8:0d:62:4d:5a:f3:6e:98:52:
ac:24:5e:7a:54:32:c5:9a:8c:62:19:2c:b4:91:4b:a6:14:9e:
e9:d9:c4:d3:a1:1f:d6:db:25:0c:e9:f5:1f:24:50:ac:b6:81:
a2:39:22:c3:d8:ed:98:ed:84:69:c6:e8:57:57:7d:56:a1:1c:
81:f2:85:a4:73:27:d3:cf:4f:8b:1d:32:48:b0:c9:05:e3:eb:
5f:8d:23:50:21:bf:75:16:10:91:c6:4e:62:10:ed:2f:e1:42:
8f:6d:9a:d9:80:22:04:cd:54:da:15:cb:fe:9b:2b:3e:98:ab:
fb:ce:51:fa:74:a8:1f:34:97:64:da:7f:9e:21:e0:65:00:50:
66:88:8d:25:95:b6:69:06:c3:d7:2c:6c:6e:f6:61:ef:db:0d:
44:b8:8c:a6:f6:c8:24:81:77:cf:8a:3f:fc:bd:c6:3a:6f:66:
3f:b3:7e:61:ac:c1:e0:c5:b7:61:70:dd:36:64:0e:02:f1:1a:
eb:3e:2e:6d:c6:02:38:04:40:12:2d:37:db:3f:2c:50:ee:22:
9b:c9:dc:06:69:1d:1b:0e:5a:a0:5f:c4:25:5b:81:a5:14:98:
55:6e:36:06
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECjCQ7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
N2U4OThiZjQyMDkyNGY5NzZiNWFlNDUxMTA4YjllNmEwMWZjN2RjMB4XDTIyMDEw
MTA2NTYzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2NiOTk3ZmFmOTQz
ZTU4OWM4ZmZlZDAwZjlhODE2MWMwNjJjNTc2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJrpa6C/fwFQ2VZ2IB1bNpWYAXN1B3+GLLB10sfnJLtPW84i
QzILpzWwaGQnzWFLyvbKRUNgomKliw6U5lrtgFyZD0WaaZ2XUqnNypvW0k1lHYWM
7Ipv0RoLWJARbZLb6Xo8l16Cqb3qbrBpfcNrxMMZ0awksjPEqRnoeD5xN/5B0u46
Yf+MCjjZRs/8ggI5KSAvKk+D1tMOEMHnphY45PwU8oihlPvclR8EgidWI5fTRSXy
TVU4E3I/u8ogkFhOZvDqgTYgkKqZS5BNPlokX9iMdf7za3Se5FFC1ujpDnmaSAc8
/1RwHv9PbJXZfeSJUHLWhPFvb5v+2CN/4QE0eJUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTMuZf6+UPlicj/7QD5qBYcBixXYTAfBgNVHSMEGDAWgBRX6Ji/Qgkk+Xa1
rkURCLnmoB/H3DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1YtaVl2MElKSlBsMnRhNUZFUWk1NXFBZng5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTUvYzUxNGNkLTc5NTQtNDRjZS1iZDdmLTcxM2I0MTY4ODcwNi8x
L3pMbVgtdmxENVluSV8tMEEtYWdXSEFZc1YyRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTUv
YzUxNGNkLTc5NTQtNDRjZS1iZDdmLTcxM2I0MTY4ODcwNi8xL1YtaVl2MElKSlBs
MnRhNUZFUWk1NXFBZng5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmbHDANBAIAAjAHAwUDKgeQwDAN
BgkqhkiG9w0BAQsFAAOCAQEAl+J1cSCMjPSitE/4s6SRwW6yivWbaeOZ5NP76A1i
TVrzbphSrCReelQyxZqMYhkstJFLphSe6dnE06Ef1tslDOn1HyRQrLaBojkiw9jt
mO2EacboV1d9VqEcgfKFpHMn089Pix0ySLDJBePrX40jUCG/dRYQkcZOYhDtL+FC
j22a2YAiBM1U2hXL/psrPpir+85R+nSoHzSXZNp/niHgZQBQZoiNJZW2aQbD1yxs
bvZh79sNRLiMpvbIJIF3z4o//L3GOm9mP7N+YazB4MW3YXDdNmQOAvEa6z4ubcYC
OARAEi032z8sUO4im8ncBmkdGw5aoF/EJVuBpRSYVW42Bg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:09 2024 by rpki-client on console-ams.rpki-client.org