Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cpZiZ17C7LF6KXV0JC2hZMQIR20.roa
File: cpZiZ17C7LF6KXV0JC2hZMQIR20.roa (raw, json)
Hash identifier: tdJMTfnbLS7Y76vLzW8YCmwRQ6z4LzgC8ZyoDrR8L/c=
Subject key identifier: 72:96:62:67:5E:C2:EC:B1:7A:29:75:74:24:2D:A1:64:C4:08:47:6D
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 13853D17
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cpZiZ17C7LF6KXV0JC2hZMQIR20.roa
Signing time: Sat 01 Jan 2022 05:56:16 +0000
ROA not before: Sat 01 Jan 2022 05:56:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62013
IP address blocks: 194.213.8.0/24 maxlen: 24
45.67.118.0/23 maxlen: 23
185.181.42.0/23 maxlen: 24
185.181.40.0/23 maxlen: 24
185.181.48.0/23 maxlen: 24
185.181.50.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327499031 (0x13853d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 05:56:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=729662675ec2ecb17a297574242da164c408476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:d7:31:56:00:b1:61:e2:06:f2:e5:49:61:
29:39:8d:60:89:93:5d:cb:35:15:d1:e1:c6:f7:ef:
33:bd:09:17:f1:34:aa:d0:fa:c7:1b:a1:a4:37:75:
71:4c:f9:c3:10:dd:32:ef:76:c7:19:88:0e:e9:a7:
66:79:98:d4:aa:33:70:c6:49:0d:2a:a9:57:fe:1a:
c1:40:8e:f5:90:41:51:04:d5:66:09:a0:0f:a3:8c:
99:ec:86:ca:6f:1b:b3:51:1f:a9:5e:f2:80:46:05:
f9:da:bd:86:59:5c:ff:0d:d7:3a:6e:92:bd:d0:16:
73:bb:02:d2:1b:4d:c6:d3:05:4c:39:57:25:3b:d0:
d3:bb:42:6b:51:3a:34:0d:de:30:ae:20:1f:e8:96:
dc:46:80:41:0b:a1:d6:03:4a:75:89:d1:00:19:6e:
f8:c5:11:3f:32:da:4f:12:46:e7:c2:f7:25:60:51:
05:95:e0:df:7e:00:8f:eb:52:82:0c:45:02:d1:ae:
a1:1c:10:06:87:be:33:5a:1e:f1:fe:69:23:59:da:
60:d4:4b:08:fd:b1:41:19:1c:36:fd:a3:cc:79:bf:
37:fe:60:03:12:76:eb:0d:a8:99:80:27:78:aa:61:
ea:92:23:0c:fa:dd:af:49:d6:30:c2:c8:f3:95:81:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:96:62:67:5E:C2:EC:B1:7A:29:75:74:24:2D:A1:64:C4:08:47:6D
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cpZiZ17C7LF6KXV0JC2hZMQIR20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.118.0/23
185.181.40.0/22
185.181.48.0/22
194.213.8.0/24
Signature Algorithm: sha256WithRSAEncryption
38:f1:49:32:d7:09:0e:fd:2e:5c:9b:bf:26:c4:af:6f:e5:89:
d4:fe:b5:a9:92:2b:ef:46:f0:01:c9:3b:7e:77:1a:7b:c8:c0:
5d:b3:ce:74:74:5b:6d:d0:d8:8e:e1:cd:75:2b:9c:6e:88:82:
59:74:ee:21:d1:e6:81:19:60:b1:0f:a9:3b:a3:2e:26:c4:fe:
71:a2:06:e7:90:10:12:bf:fa:51:c2:17:16:56:76:d4:1c:7a:
0f:4a:22:94:54:8b:7b:2c:e4:63:64:c6:7d:28:e4:0c:17:b6:
b5:10:2d:8c:23:8a:7e:2d:05:83:e6:fa:f3:82:b8:01:a3:30:
0e:bc:45:bd:ca:5c:64:c3:1c:03:bc:92:4f:4f:3b:b4:37:19:
56:64:0a:88:44:40:2b:f2:2c:44:df:19:48:6e:e2:61:3a:91:
72:53:5f:29:4a:1a:11:b1:94:df:c6:84:d0:7f:a5:ec:a0:60:
db:e4:4f:d5:d8:61:d4:09:e9:b4:92:b2:2b:95:9f:89:e0:32:
66:e0:15:5a:59:4c:ae:c1:18:32:f2:c3:3a:9f:b3:53:fb:fb:
b5:46:f7:54:e7:c4:2c:f3:7f:b2:90:ea:d5:03:3a:63:50:2c:
28:b4:2a:6f:d6:97:7e:86:2e:fb:fa:eb:ef:6d:4f:cd:d0:e8:
a7:14:70:d0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEE4U9FzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
YmFiMzA2ODM4NTllYzdlMDIwNmZlOTI2NTM2M2U4ZTM5NzFhOWE4MB4XDTIyMDEw
MTA1NTYxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzI5NjYyNjc1ZWMy
ZWNiMTdhMjk3NTc0MjQyZGExNjRjNDA4NDc2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMEC1zFWALFh4gby5UlhKTmNYImTXcs1FdHhxvfvM70JF/E0
qtD6xxuhpDd1cUz5wxDdMu92xxmIDumnZnmY1KozcMZJDSqpV/4awUCO9ZBBUQTV
ZgmgD6OMmeyGym8bs1EfqV7ygEYF+dq9hllc/w3XOm6SvdAWc7sC0htNxtMFTDlX
JTvQ07tCa1E6NA3eMK4gH+iW3EaAQQuh1gNKdYnRABlu+MURPzLaTxJG58L3JWBR
BZXg334Aj+tSggxFAtGuoRwQBoe+M1oe8f5pI1naYNRLCP2xQRkcNv2jzHm/N/5g
AxJ26w2omYAneKph6pIjDPrdr0nWMMLI85WB4oMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRylmJnXsLssXopdXQkLaFkxAhHbTAfBgNVHSMEGDAWgBSLqzBoOFnsfgIG
/pJlNj6OOXGpqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8x
L2NwWmlaMTdDN0xGNktYVjBKQzJoWk1RSVIyMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIv
ODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4OS8xL2k2c3dhRGhaN0g0
Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAS1DdgMEArm1KAMEArm1MAMEAMLV
CDANBgkqhkiG9w0BAQsFAAOCAQEAOPFJMtcJDv0uXJu/JsSvb+WJ1P61qZIr70bw
Ack7fncae8jAXbPOdHRbbdDYjuHNdSucboiCWXTuIdHmgRlgsQ+pO6MuJsT+caIG
55AQEr/6UcIXFlZ21Bx6D0oilFSLeyzkY2TGfSjkDBe2tRAtjCOKfi0Fg+b684K4
AaMwDrxFvcpcZMMcA7yST087tDcZVmQKiERAK/IsRN8ZSG7iYTqRclNfKUoaEbGU
38aE0H+l7KBg2+RP1dhh1AnptJKyK5WfieAyZuAVWllMrsEYMvLDOp+zU/v7tUb3
VOfELPN/spDq1QM6Y1AsKLQqb9aXfoYu+/rr721PzdDopxRw0A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org