Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/ZltaFCCB4lXjPjWSf8lI8OBoGEs.roa
File: ZltaFCCB4lXjPjWSf8lI8OBoGEs.roa (raw, json)
Hash identifier: 1CcbndMIYFhuz4Yq8qGQ7ZYnwXnbPpNEY5L3DPSC1aw=
Subject key identifier: 66:5B:5A:14:20:81:E2:55:E3:3E:35:92:7F:C9:48:F0:E0:68:18:4B
Certificate issuer: /CN=90ccd913a99bafd893e07ba968a67434e3df5420
Certificate serial: 0573C54D
Authority key identifier: 90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/ZltaFCCB4lXjPjWSf8lI8OBoGEs.roa
Signing time: Sat 01 Jan 2022 09:58:16 +0000
ROA not before: Sat 01 Jan 2022 09:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51348
IP address blocks: 195.226.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91473229 (0x573c54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ccd913a99bafd893e07ba968a67434e3df5420
Validity
Not Before: Jan 1 09:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=665b5a142081e255e33e35927fc948f0e068184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:59:72:89:e3:b5:55:69:ff:63:2c:e0:a3:
65:d1:39:db:66:d2:ca:1c:32:42:c6:f0:ba:04:36:
4f:9e:3f:2f:e6:c5:2b:a1:d8:a9:5c:30:e0:88:cd:
e6:29:1d:2c:c4:09:ec:a5:a7:02:0a:eb:5b:e2:3e:
7d:72:0e:c4:44:f1:8c:0a:c0:b2:7d:b7:e1:5e:87:
62:04:3c:27:c3:64:7f:73:79:55:6b:22:72:8f:87:
40:a6:6d:7b:c2:07:dd:5e:d4:1e:86:88:e7:6d:91:
54:10:e5:9a:ea:ce:1a:8e:fa:75:00:50:61:6b:c2:
a0:ff:e4:e1:d0:46:58:78:7b:42:79:40:da:7b:e7:
0a:2c:4c:3e:90:47:9b:19:c3:34:d6:58:bd:d9:88:
99:20:54:ce:cd:0e:8b:a4:58:32:1b:11:ba:39:5a:
63:b4:54:25:d3:39:be:50:c7:ed:3f:d6:90:ce:e6:
ac:1d:b2:53:ba:54:db:ba:fd:cc:97:64:6d:fb:4f:
15:cc:46:19:41:5c:a7:b1:ac:f2:63:ed:b3:8c:bd:
8e:6d:74:99:e4:e1:12:95:e4:57:9c:a3:73:b0:50:
95:e9:2b:cc:b6:c4:36:11:5c:87:8f:65:20:59:d4:
52:27:61:c6:48:0c:fd:74:c5:a3:c4:87:cf:81:de:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5B:5A:14:20:81:E2:55:E3:3E:35:92:7F:C9:48:F0:E0:68:18:4B
X509v3 Authority Key Identifier:
keyid:90:CC:D9:13:A9:9B:AF:D8:93:E0:7B:A9:68:A6:74:34:E3:DF:54:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMzZE6mbr9iT4HupaKZ0NOPfVCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/ZltaFCCB4lXjPjWSf8lI8OBoGEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/d3cb14-30ad-4213-815b-f6a513de2fea/1/kMzZE6mbr9iT4HupaKZ0NOPfVCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.209.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ca:c3:fb:4c:1e:91:f0:0e:c1:b1:2a:e1:66:21:25:8d:1c:
db:ae:59:45:0d:a3:d0:73:80:fa:62:e8:e0:28:2e:d5:5d:bd:
e8:df:95:ec:d7:ef:6d:b3:68:60:76:c5:cf:5f:7d:e5:35:fb:
2e:de:8b:8b:7f:75:f7:69:ca:63:28:2e:fd:1e:c9:19:50:58:
83:3b:26:41:9f:02:dd:f5:19:8a:ea:00:e7:63:c1:b6:74:ca:
d3:2f:1e:ad:2d:da:29:fe:c1:ab:12:63:56:b6:46:21:89:64:
bd:a9:6c:59:bc:a4:1c:f7:96:d4:c8:15:1e:8f:dd:db:6c:c2:
d8:3e:7e:5a:a4:24:f3:d8:50:f9:92:78:5b:df:1a:7f:9a:6b:
2e:f4:b4:a2:8b:f1:4f:2a:03:f9:e2:e8:3b:14:fc:a1:ca:96:
0c:62:65:c0:7c:ce:a9:a1:2d:64:59:72:90:d2:c9:c0:d8:b6:
be:52:03:f8:6d:cb:27:20:fd:7e:a3:32:10:0d:1d:38:b4:b0:
9d:05:32:a7:aa:64:d7:a2:bc:c4:87:64:19:39:9f:3f:45:83:
fb:ac:7b:e6:5b:8a:c0:09:db:83:e6:cb:2a:3c:44:22:31:65:
ed:2b:53:c6:cb:7c:6a:4e:0a:38:7d:a7:0d:61:a3:73:71:c9:
1d:1f:15:fe
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBXPFTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MGNjZDkxM2E5OWJhZmQ4OTNlMDdiYTk2OGE2NzQzNGUzZGY1NDIwMB4XDTIyMDEw
MTA5NTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjY1YjVhMTQyMDgx
ZTI1NWUzM2UzNTkyN2ZjOTQ4ZjBlMDY4MTg0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyGWXKJ47VVaf9jLOCjZdE522bSyhwyQsbwugQ2T54/L+bF
K6HYqVww4IjN5ikdLMQJ7KWnAgrrW+I+fXIOxETxjArAsn234V6HYgQ8J8Nkf3N5
VWsico+HQKZte8IH3V7UHoaI522RVBDlmurOGo76dQBQYWvCoP/k4dBGWHh7QnlA
2nvnCixMPpBHmxnDNNZYvdmImSBUzs0Oi6RYMhsRujlaY7RUJdM5vlDH7T/WkM7m
rB2yU7pU27r9zJdkbftPFcxGGUFcp7Gs8mPts4y9jm10meThEpXkV5yjc7BQlekr
zLbENhFch49lIFnUUidhxkgM/XTFo8SHz4HeLEECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRmW1oUIIHiVeM+NZJ/yUjw4GgYSzAfBgNVHSMEGDAWgBSQzNkTqZuv2JPg
e6lopnQ0499UIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2tNelpFNm1icjlpVDRIdXBhS1owTk9QZlZDQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvZDNjYjE0LTMwYWQtNDIxMy04MTViLWY2YTUxM2RlMmZlYS8x
L1psdGFGQ0NCNGxYalBqV1NmOGxJOE9Cb0dFcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzUv
ZDNjYjE0LTMwYWQtNDIxMy04MTViLWY2YTUxM2RlMmZlYS8xL2tNelpFNm1icjlp
VDRIdXBhS1owTk9QZlZDQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMPi0TANBgkqhkiG9w0BAQsFAAOC
AQEAesrD+0wekfAOwbEq4WYhJY0c265ZRQ2j0HOA+mLo4Cgu1V296N+V7NfvbbNo
YHbFz1995TX7Lt6Li39192nKYygu/R7JGVBYgzsmQZ8C3fUZiuoA52PBtnTK0y8e
rS3aKf7BqxJjVrZGIYlkvalsWbykHPeW1MgVHo/d22zC2D5+WqQk89hQ+ZJ4W98a
f5prLvS0oovxTyoD+eLoOxT8ocqWDGJlwHzOqaEtZFlykNLJwNi2vlID+G3LJyD9
fqMyEA0dOLSwnQUyp6pk16K8xIdkGTmfP0WD+6x75luKwAnbg+bLKjxEIjFl7StT
xst8ak4KOH2nDWGjc3HJHR8V/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:38 2024 by rpki-client on console-ams.rpki-client.org