Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/PZVH3_rfn83XRVu1aNv1pS7_yD8.roa
File: PZVH3_rfn83XRVu1aNv1pS7_yD8.roa (raw, json)
Hash identifier: 7zGzGXGHNCJjiLjHbc6mJUIIQs4fT5ArFupteONKMbg=
Subject key identifier: 3D:95:47:DF:FA:DF:9F:CD:D7:45:5B:B5:68:DB:F5:A5:2E:FF:C8:3F
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 03D287C0
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/PZVH3_rfn83XRVu1aNv1pS7_yD8.roa
Signing time: Sat 01 Jan 2022 12:54:11 +0000
ROA not before: Sat 01 Jan 2022 12:54:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8473
IP address blocks: 185.159.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64128960 (0x3d287c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 1 12:54:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d9547dffadf9fcdd7455bb568dbf5a52effc83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:a8:68:75:be:70:15:97:82:4b:c4:47:5d:
e5:07:ec:36:7c:1d:38:db:b3:b8:78:12:e6:de:fb:
30:71:1b:90:70:d8:fe:94:70:6a:5c:b3:8f:6b:91:
ed:76:f9:0b:84:94:e8:03:94:6e:aa:3f:14:6d:8a:
3b:68:0c:99:11:7f:1b:4e:65:b4:66:81:88:4f:f1:
33:cb:73:bd:c3:32:04:79:86:51:37:f0:49:79:c6:
cd:1f:5a:1f:63:b3:ef:09:91:57:a3:31:b0:d4:af:
d9:23:c5:56:b3:a1:3e:e3:d8:1c:cf:f6:80:29:96:
4e:71:b1:09:f8:3c:0d:7d:0f:9d:e1:98:3e:3d:52:
58:bf:3d:20:52:3d:f4:f3:19:23:c0:1e:4c:0e:37:
64:58:e5:11:21:a9:38:57:31:35:69:ad:9d:07:71:
be:52:94:64:66:ea:ce:8c:e7:6d:42:1c:6a:df:dc:
54:8c:0d:58:ff:9e:76:3d:95:a8:e1:0e:fa:c9:bb:
b7:89:e6:ac:d8:3d:bd:29:d4:0e:f8:c6:d1:b6:ff:
fd:71:26:31:76:cb:28:0b:19:6a:c6:26:6c:4b:86:
12:25:b5:17:e4:22:d5:8c:1d:9d:79:38:94:42:9d:
37:86:46:61:89:e0:be:ba:52:51:c9:fb:91:8d:e8:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:47:DF:FA:DF:9F:CD:D7:45:5B:B5:68:DB:F5:A5:2E:FF:C8:3F
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/PZVH3_rfn83XRVu1aNv1pS7_yD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.156.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ec:9d:35:30:e3:84:eb:2a:52:73:50:7a:0e:90:f4:72:5a:
89:92:24:6f:69:07:1e:0a:c7:d0:2f:4e:a0:40:b9:cc:9a:36:
5e:37:34:64:cb:16:22:c1:e3:bb:4f:cc:0c:f6:50:f6:d0:da:
b3:d7:85:37:08:25:fd:04:d7:0f:d4:b3:3d:56:12:f5:a6:cf:
6e:ce:88:dc:be:9c:aa:4a:09:b3:af:cd:c1:86:f3:2b:26:3c:
dd:c9:8b:0f:a5:6d:57:fe:a1:fe:a6:48:6e:2e:f3:90:91:03:
e9:f7:7f:33:95:5c:02:c5:33:38:d6:3d:ac:78:30:f9:a3:15:
82:bb:f3:18:21:7d:7d:d8:37:f1:e1:8a:c0:f9:d0:c4:49:b3:
3a:a7:8d:6c:e5:7d:46:0f:62:3a:c8:ea:13:d5:29:b8:85:a7:
89:56:26:9c:2d:09:14:9c:4c:f5:4d:90:e7:11:df:c6:5a:90:
b8:74:62:a7:2c:da:dc:4b:98:46:30:93:7b:0b:f9:d7:38:1d:
dc:35:b7:a2:47:75:0a:8d:39:f0:4a:ca:cb:77:b6:d3:5a:5a:
2c:a3:10:43:8c:e3:25:a2:fa:38:08:f7:50:b7:60:f6:69:e6:
c1:ff:41:bf:cc:e8:38:b6:52:5b:f8:bf:ba:03:e6:ad:5d:f3:
fb:c5:00:aa
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA9KHwDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWIxOTk2NTE1ODg0NDM0Yjg3ODgyYjViOTcyYTZlNTI5ZmZiMDBiMB4XDTIyMDEw
MTEyNTQxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2Q5NTQ3ZGZmYWRm
OWZjZGQ3NDU1YmI1NjhkYmY1YTUyZWZmYzgzZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWpqGh1vnAVl4JLxEdd5QfsNnwdONuzuHgS5t77MHEbkHDY
/pRwalyzj2uR7Xb5C4SU6AOUbqo/FG2KO2gMmRF/G05ltGaBiE/xM8tzvcMyBHmG
UTfwSXnGzR9aH2Oz7wmRV6MxsNSv2SPFVrOhPuPYHM/2gCmWTnGxCfg8DX0PneGY
Pj1SWL89IFI99PMZI8AeTA43ZFjlESGpOFcxNWmtnQdxvlKUZGbqzoznbUIcat/c
VIwNWP+edj2VqOEO+sm7t4nmrNg9vSnUDvjG0bb//XEmMXbLKAsZasYmbEuGEiW1
F+Qi1YwdnXk4lEKdN4ZGYYngvrpSUcn7kY3og7kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ9lUff+t+fzddFW7Vo2/WlLv/IPzAfBgNVHSMEGDAWgBRasZllFYhENLh4
grW5cqblKf+wCzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dyR1paUldJUkRTNGVJSzF1WEttNVNuX3NBcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvOTRjOTE5LWU2ZWEtNGUxOC1hZjEyLWVkNWIwMWQyNTI4Yy8x
L1BaVkgzX3JmbjgzWFJWdTFhTnYxcFM3X3lEOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
OTRjOTE5LWU2ZWEtNGUxOC1hZjEyLWVkNWIwMWQyNTI4Yy8xL1dyR1paUldJUkRT
NGVJSzF1WEttNVNuX3NBcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmfnDANBgkqhkiG9w0BAQsFAAOC
AQEAe+ydNTDjhOsqUnNQeg6Q9HJaiZIkb2kHHgrH0C9OoEC5zJo2Xjc0ZMsWIsHj
u0/MDPZQ9tDas9eFNwgl/QTXD9SzPVYS9abPbs6I3L6cqkoJs6/NwYbzKyY83cmL
D6VtV/6h/qZIbi7zkJED6fd/M5VcAsUzONY9rHgw+aMVgrvzGCF9fdg38eGKwPnQ
xEmzOqeNbOV9Rg9iOsjqE9UpuIWniVYmnC0JFJxM9U2Q5xHfxlqQuHRipyza3EuY
RjCTewv51zgd3DW3okd1Co058ErKy3e201paLKMQQ4zjJaL6OAj3ULdg9mnmwf9B
v8zoOLZSW/i/ugPmrV3z+8UAqg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:00 2025 by rpki-client