Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/zymSlk9usI1TtkIkBrvzFKutcx8.roa
File: zymSlk9usI1TtkIkBrvzFKutcx8.roa (raw, json)
Hash identifier: p3mwWyDrPYbtkkc1hWNgWa0/gdmRshnYJF/aAnLVpd8=
Subject key identifier: CF:29:92:96:4F:6E:B0:8D:53:B6:42:24:06:BB:F3:14:AB:AD:73:1F
Certificate issuer: /CN=2928db241541d6b6a6490004060aa71ad6ec189c
Certificate serial: 05692C04
Authority key identifier: 29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/zymSlk9usI1TtkIkBrvzFKutcx8.roa
Signing time: Wed 06 Apr 2022 12:59:22 +0000
ROA not before: Wed 06 Apr 2022 12:59:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60283
IP address blocks: 185.243.84.0/22 maxlen: 22
185.243.84.0/23 maxlen: 23
185.243.86.0/23 maxlen: 23
185.243.86.0/24 maxlen: 24
185.243.87.0/24 maxlen: 24
193.200.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90778628 (0x5692c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2928db241541d6b6a6490004060aa71ad6ec189c
Validity
Not Before: Apr 6 12:59:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf2992964f6eb08d53b6422406bbf314abad731f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:cb:22:33:9d:68:45:76:62:5b:f6:90:2f:
cc:fa:0e:98:43:1c:90:0a:e9:59:b5:72:5e:b8:c0:
aa:7b:bd:45:f8:16:d8:32:60:ea:03:0c:81:03:f1:
c6:3a:9e:af:14:17:c0:e8:28:f4:4a:7f:c3:af:a9:
8d:63:78:f2:76:fa:28:ec:94:4d:37:e9:07:e7:a2:
9a:23:01:8c:59:96:76:8c:39:8d:1c:a6:71:a8:84:
77:34:9a:d6:88:21:13:18:cb:e6:54:b1:f8:cd:b9:
ea:25:e3:cd:bc:ad:b6:bc:e1:23:0b:e4:ec:5e:6d:
85:40:b9:ac:a6:78:84:7c:91:9c:29:d6:27:10:17:
4a:31:13:53:87:0e:6d:4d:6c:a0:dc:2f:8d:ab:d6:
c3:c5:1c:8f:5c:22:09:2d:c8:e3:12:1a:18:21:1d:
59:65:50:ff:d4:3d:de:1f:01:90:2c:01:6e:45:4b:
85:05:ca:37:7b:db:28:18:83:48:32:98:32:ac:fc:
fd:38:fa:cd:9f:b1:c4:c7:c5:5f:5e:96:bd:c3:d8:
fa:aa:8c:33:10:42:c4:0c:c1:9a:a9:77:c8:72:13:
0e:22:73:3c:e8:52:12:a2:15:b7:2e:9a:ff:3e:39:
06:7e:a5:5b:f2:1f:5d:19:72:ac:2a:47:92:f7:bd:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:29:92:96:4F:6E:B0:8D:53:B6:42:24:06:BB:F3:14:AB:AD:73:1F
X509v3 Authority Key Identifier:
keyid:29:28:DB:24:15:41:D6:B6:A6:49:00:04:06:0A:A7:1A:D6:EC:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSjbJBVB1ramSQAEBgqnGtbsGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/zymSlk9usI1TtkIkBrvzFKutcx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a47475-179b-477f-b554-29356341c5fd/1/KSjbJBVB1ramSQAEBgqnGtbsGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.84.0/22
193.200.250.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4e:a4:d4:3c:fc:76:61:2c:40:00:a2:32:1b:8a:bb:24:48:
25:70:7e:04:ec:ac:83:7b:05:07:57:a4:c0:84:12:05:79:65:
bd:d0:53:73:50:02:00:ed:8f:4c:c9:03:b4:4f:de:3b:e6:fb:
00:6a:94:73:c4:89:de:97:71:a1:ac:3f:16:d7:5e:95:70:b8:
27:1f:96:8c:41:d7:14:f8:87:45:2d:77:50:f2:73:63:c5:1e:
81:95:90:1c:a5:2f:e6:86:b9:2b:43:4f:b8:ad:b1:85:34:36:
80:a2:9a:e5:6c:e8:1a:41:69:54:aa:4e:e3:0a:96:a3:ed:8e:
4e:24:63:f5:5c:b7:3e:9f:fb:bf:00:14:3b:da:e9:73:2d:28:
fd:7a:b7:8a:ae:1a:6c:fb:f5:56:e2:6e:42:c2:af:ec:bb:21:
3f:cc:38:23:8d:97:5d:5e:37:90:54:1b:50:97:1b:62:3d:34:
8c:3b:b6:c8:fc:b5:54:fa:26:bf:64:ac:b7:58:bf:25:8e:da:
4e:44:d4:4c:33:0d:b3:31:f3:cb:a7:09:f7:12:44:bf:c9:62:
5e:51:39:27:a7:11:ad:d1:7e:a2:34:4f:10:31:82:dc:bd:e2:
30:e0:88:63:fd:dd:3e:01:81:ef:bf:73:99:a8:a8:57:4c:b9:
2b:ed:81:88
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBWksBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
OTI4ZGIyNDE1NDFkNmI2YTY0OTAwMDQwNjBhYTcxYWQ2ZWMxODljMB4XDTIyMDQw
NjEyNTkyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2YyOTkyOTY0ZjZl
YjA4ZDUzYjY0MjI0MDZiYmYzMTRhYmFkNzMxZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMS6yyIznWhFdmJb9pAvzPoOmEMckArpWbVyXrjAqnu9RfgW
2DJg6gMMgQPxxjqerxQXwOgo9Ep/w6+pjWN48nb6KOyUTTfpB+eimiMBjFmWdow5
jRymcaiEdzSa1oghExjL5lSx+M256iXjzbyttrzhIwvk7F5thUC5rKZ4hHyRnCnW
JxAXSjETU4cObU1soNwvjavWw8Ucj1wiCS3I4xIaGCEdWWVQ/9Q93h8BkCwBbkVL
hQXKN3vbKBiDSDKYMqz8/Tj6zZ+xxMfFX16WvcPY+qqMMxBCxAzBmql3yHITDiJz
POhSEqIVty6a/z45Bn6lW/IfXRlyrCpHkve9So0CAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBTPKZKWT26wjVO2QiQGu/MUq61zHzAfBgNVHSMEGDAWgBQpKNskFUHWtqZJ
AAQGCqca1uwYnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tTamJKQlZCMXJhbVNRQUVCZ3FuR3Ric0dKdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjAvYTQ3NDc1LTE3OWItNDc3Zi1iNTU0LTI5MzU2MzQxYzVmZC8x
L3p5bVNsazl1c0kxVHRrSWtCcnZ6Rkt1dGN4OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjAv
YTQ3NDc1LTE3OWItNDc3Zi1iNTU0LTI5MzU2MzQxYzVmZC8xL0tTamJKQlZCMXJh
bVNRQUVCZ3FuR3Ric0dKdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArnzVAMEAMHI+jANBgkqhkiG9w0B
AQsFAAOCAQEAQE6k1Dz8dmEsQACiMhuKuyRIJXB+BOysg3sFB1ekwIQSBXllvdBT
c1ACAO2PTMkDtE/eO+b7AGqUc8SJ3pdxoaw/FtdelXC4Jx+WjEHXFPiHRS13UPJz
Y8UegZWQHKUv5oa5K0NPuK2xhTQ2gKKa5WzoGkFpVKpO4wqWo+2OTiRj9Vy3Pp/7
vwAUO9rpcy0o/Xq3iq4abPv1VuJuQsKv7LshP8w4I42XXV43kFQbUJcbYj00jDu2
yPy1VPomv2Sst1i/JY7aTkTUTDMNszHzy6cJ9xJEv8liXlE5J6cRrdF+ojRPEDGC
3L3iMOCIY/3dPgGB779zmaioV0y5K+2BiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:44 2024 by rpki-client on console-ams.rpki-client.org