Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/zambjJs8RtOZmCxXKASHBQvNYFk.roa
File: zambjJs8RtOZmCxXKASHBQvNYFk.roa (raw, json)
Hash identifier: l55lezKY3iBR/YYM1mFakkJ690ii0wZL9Uz76aHJ5eM=
Subject key identifier: CD:A9:9B:8C:9B:3C:46:D3:99:98:2C:57:28:04:87:05:0B:CD:60:59
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 1AFA296F
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/zambjJs8RtOZmCxXKASHBQvNYFk.roa
Signing time: Mon 07 Mar 2022 14:37:34 +0000
ROA not before: Mon 07 Mar 2022 14:37:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48544
IP address blocks: 83.174.144.0/22 maxlen: 24
194.145.248.0/22 maxlen: 23
78.159.144.0/22 maxlen: 24
93.189.136.0/21 maxlen: 24
91.231.172.0/23 maxlen: 24
185.29.145.0/24 maxlen: 24
185.29.144.0/24 maxlen: 24
185.29.146.0/24 maxlen: 24
87.252.106.0/23 maxlen: 24
188.116.11.0/24 maxlen: 24
188.116.10.0/24 maxlen: 24
188.116.8.0/23 maxlen: 23
188.116.32.0/23 maxlen: 24
185.164.185.0/24 maxlen: 24
185.164.186.0/23 maxlen: 24
46.102.112.0/24 maxlen: 24
46.102.114.0/24 maxlen: 24
46.102.113.0/24 maxlen: 24
46.102.115.0/24 maxlen: 24
89.36.206.0/24 maxlen: 24
89.36.205.0/24 maxlen: 24
89.36.204.0/24 maxlen: 24
89.36.207.0/24 maxlen: 24
185.39.24.0/23 maxlen: 24
185.39.27.0/24 maxlen: 24
185.39.26.0/24 maxlen: 24
188.116.56.0/23 maxlen: 24
188.116.60.0/23 maxlen: 23
188.116.63.0/24 maxlen: 24
188.116.62.0/24 maxlen: 24
185.84.84.0/22 maxlen: 24
45.10.72.0/22 maxlen: 22
217.20.250.0/23 maxlen: 24
217.20.248.0/23 maxlen: 24
212.69.137.0/24 maxlen: 24
212.69.136.0/24 maxlen: 24
212.69.139.0/24 maxlen: 24
212.69.138.0/24 maxlen: 24
212.69.143.0/24 maxlen: 24
212.69.142.0/24 maxlen: 24
212.69.141.0/24 maxlen: 24
212.69.140.0/24 maxlen: 24
89.32.159.0/24 maxlen: 24
89.32.158.0/24 maxlen: 24
89.32.157.0/24 maxlen: 24
89.32.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 452602223 (0x1afa296f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Mar 7 14:37:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cda99b8c9b3c46d399982c57280487050bcd6059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:2e:0e:ec:18:a8:07:88:b4:25:8a:a8:8d:
49:09:29:ca:5c:4e:5e:e3:9c:a9:3e:90:e7:4b:75:
09:16:36:24:78:f8:78:62:ff:49:1b:ed:4e:01:81:
7d:43:7b:5b:bf:ac:1d:e5:8a:2d:ad:bf:36:c7:40:
0b:1d:61:b3:ec:0e:6f:bb:d8:9a:c2:19:cb:cf:8d:
1b:e4:8d:6d:9f:da:42:c7:e8:8d:5f:50:b7:ae:70:
95:4b:af:47:41:22:b9:3b:ae:8e:2c:a7:b1:41:73:
91:e3:84:56:12:19:fe:21:10:fe:2c:4d:34:7b:e0:
23:1d:92:f8:e4:d4:65:23:ff:7b:92:3b:25:ae:a0:
d5:a0:15:e7:4f:c0:52:f5:84:19:de:82:69:9e:e0:
ae:69:c9:e0:49:a6:0d:d0:4f:ed:68:87:5a:c7:b2:
73:37:a2:de:8f:7c:1e:0a:3b:d4:87:30:43:6a:84:
5f:20:69:ee:31:ce:b7:ec:4b:1e:94:e0:a1:de:81:
8c:e3:0a:7d:92:29:9b:4a:d9:cc:da:69:d4:bc:96:
e5:b4:18:2b:8e:67:21:e3:9e:4e:34:2b:8f:97:ec:
68:6c:7f:50:87:63:ec:f4:12:bb:11:3d:36:a3:5f:
33:c5:35:f0:17:e6:9f:28:d3:89:e5:52:a3:fb:e0:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:9B:8C:9B:3C:46:D3:99:98:2C:57:28:04:87:05:0B:CD:60:59
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/zambjJs8RtOZmCxXKASHBQvNYFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.72.0/22
46.102.112.0/22
78.159.144.0/22
83.174.144.0/22
87.252.106.0/23
89.32.156.0/22
89.36.204.0/22
91.231.172.0/23
93.189.136.0/21
185.29.144.0-185.29.146.255
185.39.24.0/22
185.84.84.0/22
185.164.185.0-185.164.187.255
188.116.8.0/22
188.116.32.0/23
188.116.56.0/23
188.116.60.0/22
194.145.248.0/22
212.69.136.0/21
217.20.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:b4:1a:6a:d3:1f:7a:1c:09:0d:a0:5d:d8:30:17:47:01:00:
98:95:e5:35:93:00:14:d3:6d:4f:05:03:28:c2:05:9b:13:c5:
16:d2:3c:d5:1a:d9:78:2d:d8:bf:8c:9c:0f:04:db:d5:7c:d2:
f3:57:e9:98:5d:f2:45:d6:da:e8:cb:35:cb:b4:6f:65:e8:40:
9f:79:ca:c7:32:b8:e0:86:e1:bb:e8:d5:72:d1:1f:33:af:99:
7a:7c:95:db:7f:40:2d:58:7e:5e:44:a3:a7:00:39:b4:d0:ad:
78:9e:ff:c1:cb:8d:36:bd:f2:8c:18:c3:25:57:3a:1c:9f:87:
cf:b3:64:f1:0c:ce:4d:de:ac:99:06:85:7d:58:27:fa:8a:c0:
9f:c4:16:16:38:14:1e:25:5a:d3:77:0a:6d:1a:69:a8:01:94:
bb:a8:7b:3d:cf:b3:c5:9c:97:c1:e2:6e:c5:54:0b:6a:c2:2a:
cf:a5:43:40:99:3b:bc:f6:6a:c6:37:b8:8f:fd:6d:8f:bc:41:
fd:72:42:e7:4b:53:db:3d:cc:b6:3b:71:f7:42:b1:b0:a4:a8:
04:23:3d:d6:c5:04:35:b4:f5:f7:18:98:47:81:7b:c9:40:aa:
20:51:a9:12:cf:b6:f3:b4:70:2d:83:35:b1:2c:c1:5b:a3:60:
a3:72:88:b4
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIEGvopbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTM3ZDM0ODY5YmM2MGI3ZDllNzgzMzVmNGEzMjM4MWZiNzIxMGU1MB4XDTIyMDMw
NzE0MzczNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2RhOTliOGM5YjNj
NDZkMzk5OTgyYzU3MjgwNDg3MDUwYmNkNjA1OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVrLg7sGKgHiLQliqiNSQkpylxOXuOcqT6Q50t1CRY2JHj4
eGL/SRvtTgGBfUN7W7+sHeWKLa2/NsdACx1hs+wOb7vYmsIZy8+NG+SNbZ/aQsfo
jV9Qt65wlUuvR0EiuTuujiynsUFzkeOEVhIZ/iEQ/ixNNHvgIx2S+OTUZSP/e5I7
Ja6g1aAV50/AUvWEGd6CaZ7grmnJ4EmmDdBP7WiHWseyczei3o98Hgo71IcwQ2qE
XyBp7jHOt+xLHpTgod6BjOMKfZIpm0rZzNpp1LyW5bQYK45nIeOeTjQrj5fsaGx/
UIdj7PQSuxE9NqNfM8U18BfmnyjTieVSo/vgysECAwEAAaOCApAwggKMMB0GA1Ud
DgQWBBTNqZuMmzxG05mYLFcoBIcFC81gWTAfBgNVHSMEGDAWgBTuN9NIabxgt9nn
gzX0oyOB+3IQ5TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdqZlRTR204WUxmWjU0TTE5S01qZ2Z0eUVPVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzIvYzhjNWU0LTIyNWEtNDg5ZS05MTAwLWFiMmNlOTRjMTQyMy8x
L3phbWJqSnM4UnRPWm1DeFhLQVNIQlF2TllGay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIv
YzhjNWU0LTIyNWEtNDg5ZS05MTAwLWFiMmNlOTRjMTQyMy8xLzdqZlRTR204WUxm
WjU0TTE5S01qZ2Z0eUVPVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
pQYIKwYBBQUHAQcBAf8EgZUwgZIwgY8EAgABMIGIAwQCLQpIAwQCLmZwAwQCTp+Q
AwQCU66QAwQBV/xqAwQCWSCcAwQCWSTMAwQBW+esAwQDXb2IMAwDBAS5HZADBAC5
HZIDBAK5JxgDBAK5VFQwDAMEALmkuQMEArmkuAMEArx0CAMEAbx0IAMEAbx0OAME
Arx0PAMEAsKR+AMEA9RFiAMEAtkU+DANBgkqhkiG9w0BAQsFAAOCAQEASrQaatMf
ehwJDaBd2DAXRwEAmJXlNZMAFNNtTwUDKMIFmxPFFtI81RrZeC3Yv4ycDwTb1XzS
81fpmF3yRdba6Ms1y7RvZehAn3nKxzK44Ibhu+jVctEfM6+ZenyV239ALVh+XkSj
pwA5tNCteJ7/wcuNNr3yjBjDJVc6HJ+Hz7Nk8QzOTd6smQaFfVgn+orAn8QWFjgU
HiVa03cKbRppqAGUu6h7Pc+zxZyXweJuxVQLasIqz6VDQJk7vPZqxje4j/1tj7xB
/XJC50tT2z3Mtjtx90KxsKSoBCM91sUENbT19xiYR4F7yUCqIFGpEs+287RwLYM1
sSzBW6Ngo3KItA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:59 2024 by rpki-client on console-ams.rpki-client.org