Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/zNcyo6tkgTTssz9Hrp8Y0vMGIbY.roa
File: zNcyo6tkgTTssz9Hrp8Y0vMGIbY.roa (raw, json)
Hash identifier: PZ+/VMQgZjiczn6av284mHanaVanYcLfu5Vw7c+CpVo=
Subject key identifier: CC:D7:32:A3:AB:64:81:34:EC:B3:3F:47:AE:9F:18:D2:F3:06:21:B6
Certificate issuer: /CN=1746948856a2b0adf304a16d0d3ad66857f7fd39
Certificate serial: 069975EF
Authority key identifier: 17:46:94:88:56:A2:B0:AD:F3:04:A1:6D:0D:3A:D6:68:57:F7:FD:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/zNcyo6tkgTTssz9Hrp8Y0vMGIbY.roa
Signing time: Sat 01 Jan 2022 01:56:29 +0000
ROA not before: Sat 01 Jan 2022 01:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15699
IP address blocks: 87.236.216.0/21 maxlen: 32
88.151.212.0/23 maxlen: 32
88.151.208.0/22 maxlen: 32
88.151.214.0/23 maxlen: 32
185.11.200.0/22 maxlen: 32
94.24.114.0/24 maxlen: 32
94.24.112.0/20 maxlen: 32
212.36.64.0/19 maxlen: 32
109.235.128.0/21 maxlen: 32
2a01:1c8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110720495 (0x69975ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1746948856a2b0adf304a16d0d3ad66857f7fd39
Validity
Not Before: Jan 1 01:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccd732a3ab648134ecb33f47ae9f18d2f30621b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:52:ea:7d:67:69:9a:69:04:4f:f0:72:19:
60:be:de:99:a1:26:89:ec:1a:75:d3:2e:d8:1e:ed:
0b:0b:28:c8:5a:9f:cf:4e:c2:0b:02:c6:a5:42:41:
47:28:c4:fe:b2:4b:d5:76:f2:9b:f7:df:e1:bb:49:
0e:53:3d:bf:7c:12:24:09:ce:d6:f7:cb:e9:0f:fb:
40:4a:14:b6:76:3f:9a:0d:7d:ae:3c:5e:2b:3a:cc:
ff:c2:50:14:6d:cb:f4:d0:44:3d:7b:68:e1:f2:37:
09:e0:83:49:d1:3f:a3:29:fb:e4:3c:3e:99:b8:c6:
dd:55:df:84:c5:d6:5d:a2:2b:90:7c:c8:cc:2e:5b:
12:ac:a9:d0:bf:fc:12:f2:ed:22:c1:d3:62:9e:24:
5d:89:17:fa:b7:2d:db:ad:8b:02:5a:67:d0:47:98:
9d:77:33:7f:07:63:05:46:7c:f7:81:e4:96:24:42:
a5:e5:0b:86:7f:02:07:e6:2a:22:41:1e:68:ce:ca:
20:0b:7b:2f:c5:3e:f9:eb:55:49:f1:78:80:69:f2:
77:bd:07:b9:ce:dc:4b:a8:e7:8e:71:f7:7e:d2:44:
4b:f6:ca:a4:99:c1:fe:a2:e6:3b:ca:a3:4a:14:76:
fe:94:7f:1c:c4:5b:85:98:ba:97:fb:c2:8f:d8:e6:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:32:A3:AB:64:81:34:EC:B3:3F:47:AE:9F:18:D2:F3:06:21:B6
X509v3 Authority Key Identifier:
keyid:17:46:94:88:56:A2:B0:AD:F3:04:A1:6D:0D:3A:D6:68:57:F7:FD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0aUiFaisK3zBKFtDTrWaFf3_Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/zNcyo6tkgTTssz9Hrp8Y0vMGIbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/086277-821c-405a-9e75-9ba719f259cb/1/F0aUiFaisK3zBKFtDTrWaFf3_Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.216.0/21
88.151.208.0/21
94.24.112.0/20
109.235.128.0/21
185.11.200.0/22
212.36.64.0/19
IPv6:
2a01:1c8::/32
Signature Algorithm: sha256WithRSAEncryption
a4:23:b8:a5:17:3a:6e:d8:0d:db:f4:ee:16:1c:cb:65:ed:f0:
bd:12:86:bc:7a:8a:56:34:79:75:6a:d1:58:dd:02:20:dd:a6:
c2:60:a4:6b:ee:4a:b8:06:75:a3:97:60:ab:13:c8:84:7c:a2:
2c:ab:aa:47:70:30:7f:76:25:76:62:c5:33:71:f9:dc:c9:35:
60:bb:53:09:70:01:42:91:14:be:15:0f:30:8f:ba:b4:dd:5f:
70:ef:22:6e:f1:5c:a6:ac:c7:7a:a0:5f:93:d0:4e:6e:65:10:
ec:ff:a3:57:8f:be:f4:12:7b:47:7d:bc:ef:da:c4:96:99:ba:
4d:b2:82:ae:84:61:46:c6:77:e1:81:25:5d:69:13:51:36:3d:
df:60:c3:84:b5:6f:31:12:c1:7e:35:c6:56:2c:d3:8b:b0:bd:
49:b6:e8:18:f4:46:7e:5e:d8:d8:f4:17:55:d1:4a:e5:63:1e:
f8:92:3b:fe:e6:8c:66:c5:cb:ed:48:9c:8f:4f:3e:af:95:00:
1b:a2:26:8e:81:28:08:5a:d0:d3:56:55:55:3c:f4:88:54:a1:
67:4f:fe:97:bd:d5:1e:cd:64:73:4f:08:dc:e0:dc:a3:11:76:
62:04:f7:51:76:67:58:24:d7:8f:bd:ed:05:4b:94:ad:45:96:
e3:7b:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:10 2023 by rpki-client on console-ams.rpki-client.org