Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/ZpaMYwVx70eSdisfET6jJfxEnBI.roa
File: ZpaMYwVx70eSdisfET6jJfxEnBI.roa (raw, json)
Hash identifier: jj3Yd1kpk2JuhN6sBdQMBalRVbvQWqtrpLOp1rA/4yA=
Subject key identifier: 66:96:8C:63:05:71:EF:47:92:76:2B:1F:11:3E:A3:25:FC:44:9C:12
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 32D4B8E8
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/ZpaMYwVx70eSdisfET6jJfxEnBI.roa
Signing time: Mon 10 Jan 2022 13:43:46 +0000
ROA not before: Mon 10 Jan 2022 13:43:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 5.226.179.0/24 maxlen: 24
5.226.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852801768 (0x32d4b8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 10 13:43:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66968c630571ef4792762b1f113ea325fc449c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:be:18:ff:1a:90:c5:1d:48:81:f3:85:ea:
ff:70:ca:fc:9c:61:c6:76:f0:18:00:72:cb:ff:d7:
66:f0:b1:55:c6:df:05:1f:25:67:55:49:4e:33:cb:
2a:7d:92:c2:18:17:e0:79:23:ad:a6:77:46:ed:74:
5a:6d:8e:d6:a4:c0:55:ca:a0:72:05:f9:37:d4:f5:
9a:3c:75:31:34:ca:68:3c:17:a1:90:7b:99:42:00:
04:6b:d1:8a:ea:be:3e:fd:0f:da:8d:f0:87:67:60:
38:7a:11:8a:0f:95:92:44:95:b7:b7:2b:55:31:1a:
52:1e:7b:4a:79:24:af:86:d3:ac:bc:74:ff:c2:b7:
b8:ef:c6:b2:17:82:af:0c:1c:8e:02:9b:0d:85:99:
ee:d4:a1:3c:2b:72:22:36:7a:72:1d:fb:e9:78:f4:
d4:e1:87:8d:0b:69:5b:73:b0:b5:62:33:d0:fb:08:
8b:2b:f2:e7:03:cf:34:cc:5c:3a:b1:78:db:3c:e9:
33:57:79:b0:f0:37:a2:40:c1:51:76:4a:55:87:21:
e3:ce:61:b4:f2:c3:fa:d6:5c:2c:8d:de:30:c2:7f:
0b:da:84:2b:24:38:08:23:3c:60:9f:46:e4:65:e5:
8d:89:b7:4b:e5:00:55:35:7f:d2:b9:7d:cd:18:47:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:8C:63:05:71:EF:47:92:76:2B:1F:11:3E:A3:25:FC:44:9C:12
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/ZpaMYwVx70eSdisfET6jJfxEnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.179.0/24
5.226.181.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4f:04:7b:9f:40:f1:c8:84:10:70:d0:58:cd:39:9e:c9:10:
7d:61:0f:01:58:b9:e0:7f:3b:2c:23:c5:39:b6:3a:23:d5:24:
42:a9:60:6d:46:fa:b8:86:be:09:09:71:99:3d:d0:21:40:ab:
b3:80:aa:ec:6a:73:3d:23:d9:0d:ed:55:ac:21:12:64:77:57:
27:39:5e:5c:8a:8e:68:59:66:e0:f0:5b:67:83:73:75:d9:e2:
75:ec:5d:ce:e4:76:1d:6e:d6:20:55:90:75:8d:56:11:54:24:
1e:a0:36:35:a7:64:7a:c0:94:dd:f8:2e:4f:1e:ef:d0:38:04:
52:b2:0d:a3:72:4c:2b:69:4e:1f:6f:70:0b:ed:ef:ea:1d:41:
d1:bf:6c:b6:33:e9:88:3f:30:94:66:64:ca:5a:f4:0d:91:24:
2d:3e:a1:f2:69:12:4b:f1:c6:9f:e6:07:8f:db:d0:e9:69:02:
dd:87:0c:4e:ca:8c:2a:ac:b5:a1:8e:c0:eb:da:b0:d4:35:40:
0e:92:89:a2:fc:fc:d7:4c:40:e0:9e:a1:eb:f2:0e:4d:06:85:
d4:2b:fe:14:fd:30:9a:c5:30:3f:01:60:0d:cf:45:31:aa:0b:
00:1c:69:a7:88:98:7d:b7:be:09:1c:14:c7:bd:1b:55:07:87:
a8:2f:0e:80
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEMtS46DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZWI2NmVjNWU4ZjI0MDVmNmY4ZDQ4NmU3M2ZiODJiOGRlMGRlZTBmMB4XDTIyMDEx
MDEzNDM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjY5NjhjNjMwNTcx
ZWY0NzkyNzYyYjFmMTEzZWEzMjVmYzQ0OWMxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMbFvhj/GpDFHUiB84Xq/3DK/JxhxnbwGAByy//XZvCxVcbf
BR8lZ1VJTjPLKn2SwhgX4HkjraZ3Ru10Wm2O1qTAVcqgcgX5N9T1mjx1MTTKaDwX
oZB7mUIABGvRiuq+Pv0P2o3wh2dgOHoRig+VkkSVt7crVTEaUh57Snkkr4bTrLx0
/8K3uO/GsheCrwwcjgKbDYWZ7tShPCtyIjZ6ch376Xj01OGHjQtpW3OwtWIz0PsI
iyvy5wPPNMxcOrF42zzpM1d5sPA3okDBUXZKVYch485htPLD+tZcLI3eMMJ/C9qE
KyQ4CCM8YJ9G5GXljYm3S+UAVTV/0rl9zRhHhpUCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBRmloxjBXHvR5J2Kx8RPqMl/EScEjAfBgNVHSMEGDAWgBSutm7F6PJAX2+N
SG5z+4K43g3uDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JyWnV4ZWp5UUY5dmpVaHVjX3VDdU40TjdnOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvMTUzNzg4LTE0YjctNDU1MS05YWRlLTZhZWE5MDU3YzgwMC8x
L1pwYU1Zd1Z4NzBlU2Rpc2ZFVDZqSmZ4RW5CSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
MTUzNzg4LTE0YjctNDU1MS05YWRlLTZhZWE5MDU3YzgwMC8xL3JyWnV4ZWp5UUY5
dmpVaHVjX3VDdU40TjdnOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAAXiswMEAAXitTANBgkqhkiG9w0B
AQsFAAOCAQEAN08Ee59A8ciEEHDQWM05nskQfWEPAVi54H87LCPFObY6I9UkQqlg
bUb6uIa+CQlxmT3QIUCrs4Cq7GpzPSPZDe1VrCESZHdXJzleXIqOaFlm4PBbZ4Nz
ddnidexdzuR2HW7WIFWQdY1WEVQkHqA2NadkesCU3fguTx7v0DgEUrINo3JMK2lO
H29wC+3v6h1B0b9stjPpiD8wlGZkylr0DZEkLT6h8mkSS/HGn+YHj9vQ6WkC3YcM
TsqMKqy1oY7A69qw1DVADpKJovz810xA4J6h6/IOTQaF1Cv+FP0wmsUwPwFgDc9F
MaoLABxpp4iYfbe+CRwUx70bVQeHqC8OgA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:58 2023 by rpki-client on console-ams.rpki-client.org