Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zjpAGBssbZ_2JhKLNs5haOr43KQ.roa
File: zjpAGBssbZ_2JhKLNs5haOr43KQ.roa (raw, json)
Hash identifier: ncNXnOGPSuFjbpI7ShEaJMZIqfAzx0jhKfIK7f1bDyw=
Subject key identifier: CE:3A:40:18:1B:2C:6D:9F:F6:26:12:8B:36:CE:61:68:EA:F8:DC:A4
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0183170F088ADD9DC7A6F6FDC6B64ABF3DD1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zjpAGBssbZ_2JhKLNs5haOr43KQ.roa
Signing time: Wed 07 Sep 2022 08:26:44 +0000
ROA not before: Wed 07 Sep 2022 08:26:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 79.175.96.0/24 maxlen: 24
77.105.22.0/24 maxlen: 24
178.253.215.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
212.69.13.0/24 maxlen: 24
178.219.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:0f:08:8a:dd:9d:c7:a6:f6:fd:c6:b6:4a:bf:3d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 7 08:26:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce3a40181b2c6d9ff626128b36ce6168eaf8dca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:ca:fa:63:68:7b:55:83:b9:42:2d:f6:95:
c1:e6:c4:5b:1c:49:24:91:f8:c2:38:e0:41:cb:6a:
b1:01:64:56:c9:82:74:84:1d:21:0c:6d:7e:e9:ab:
25:a5:89:2f:8e:c6:67:cc:7e:5d:3f:68:cc:40:1b:
ab:de:e5:7a:e1:9f:fd:85:5d:d3:e1:c8:cf:05:8c:
ab:29:68:40:09:14:ee:eb:b3:63:a7:c7:a8:56:68:
9a:03:d7:e0:0d:92:4a:79:74:92:e9:ed:d9:1b:fb:
9b:73:41:0f:2a:44:c7:2c:d9:f7:e5:6c:00:2e:c0:
8c:23:90:76:b9:05:00:de:fa:07:83:c0:d6:fe:05:
19:d4:4f:28:95:bb:c9:e4:7c:01:e3:ea:62:9b:c4:
6a:a5:f1:93:25:c5:03:3f:34:4c:e0:ce:8e:15:e9:
d6:12:45:eb:35:89:7b:04:1f:2b:28:6f:1d:2f:9c:
7f:d1:2c:fa:10:bc:37:59:f7:a4:e9:51:19:bb:cc:
f1:3f:16:20:f2:4c:22:16:03:f3:66:91:af:46:10:
47:44:49:bf:5b:54:fe:31:4a:59:72:d9:97:32:1c:
99:0c:22:a0:dc:2b:df:fc:d9:a9:5a:b4:d6:37:91:
bc:3a:1b:a6:13:6b:77:2d:97:b1:75:84:3e:65:0b:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3A:40:18:1B:2C:6D:9F:F6:26:12:8B:36:CE:61:68:EA:F8:DC:A4
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/zjpAGBssbZ_2JhKLNs5haOr43KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.22.0/24
79.175.96.0/24
178.219.14.0/24
178.253.215.0/24
188.255.141.0/24
212.69.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b8:a1:bb:78:aa:ac:d9:bc:f0:6f:4e:46:31:34:bd:67:8a:
5f:96:29:29:17:34:2e:b4:76:e7:57:e6:6d:7d:ad:f1:13:6f:
62:ca:ee:06:f0:42:15:48:2a:66:ff:e5:ba:4c:e6:25:ef:d7:
a2:44:8a:10:9e:0a:0b:23:84:63:a4:bb:30:f2:0b:c7:c6:a1:
75:76:4d:66:49:6d:3c:c7:64:af:fb:06:3d:63:b3:e1:cd:99:
e9:17:7d:8d:5e:2e:6f:aa:00:c4:e8:85:71:4e:70:fd:e2:f6:
1d:f6:72:88:9e:60:d8:24:2b:37:71:85:81:87:96:27:f6:09:
c0:16:d6:16:c9:7b:2a:ea:f5:20:a2:ef:39:0c:7a:e9:24:1f:
e6:66:58:a9:60:af:4b:a4:f7:f2:97:9d:cb:e7:55:97:5b:e3:
01:9f:2d:2f:48:fb:06:7a:8b:2e:56:67:4e:75:a3:d9:6a:59:
38:0f:b5:f3:07:65:c5:fd:eb:71:6f:8d:21:b3:94:46:a7:d4:
21:a6:c0:4f:ef:b5:99:8a:b6:34:d2:29:51:71:b6:c6:6d:55:
b3:e9:55:f4:9e:3e:ce:71:59:b0:34:ab:ff:d5:f8:0b:11:a4:
e3:49:b4:bf:d7:09:8c:44:2a:2a:40:6b:1c:77:9c:d4:c1:54:
be:40:c2:ba
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYMXDwiK3Z3Hpvb9xrZKvz3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjIwOTA3MDgyNjQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTNhNDAxODFiMmM2ZDlmZjYyNjEyOGIzNmNlNjE2OGVhZjhkY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpbK+mNoe1WDuUIt9pXB5sRbHEkk
kfjCOOBBy2qxAWRWyYJ0hB0hDG1+6aslpYkvjsZnzH5dP2jMQBur3uV64Z/9hV3T
4cjPBYyrKWhACRTu67Njp8eoVmiaA9fgDZJKeXSS6e3ZG/ubc0EPKkTHLNn35WwA
LsCMI5B2uQUA3voHg8DW/gUZ1E8olbvJ5HwB4+pim8RqpfGTJcUDPzRM4M6OFenW
EkXrNYl7BB8rKG8dL5x/0Sz6ELw3Wfek6VEZu8zxPxYg8kwiFgPzZpGvRhBHREm/
W1T+MUpZctmXMhyZDCKg3Cvf/NmpWrTWN5G8OhumE2t3LZexdYQ+ZQvMuwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFM46QBgbLG2f9iYSizbOYWjq+NykMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvempwQUdCc3NiWl8ySmhLTE5zNWhhT3I0M0tRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQATWkWAwQA
T69gAwQAstsOAwQAsv3XAwQAvP+NAwQA1EUNMA0GCSqGSIb3DQEBCwUAA4IBAQBf
uKG7eKqs2bzwb05GMTS9Z4pflikpFzQutHbnV+Ztfa3xE29iyu4G8EIVSCpm/+W6
TOYl79eiRIoQngoLI4RjpLsw8gvHxqF1dk1mSW08x2Sv+wY9Y7PhzZnpF32NXi5v
qgDE6IVxTnD94vYd9nKInmDYJCs3cYWBh5Yn9gnAFtYWyXsq6vUgou85DHrpJB/m
ZlipYK9LpPfyl53L51WXW+MBny0vSPsGeosuVmdOdaPZalk4D7XzB2XF/etxb40h
s5RGp9QhpsBP77WZirY00ilRcbbGbVWz6VX0nj7OcVmwNKv/1fgLEaTjSbS/1wmM
RCoqQGscd5zUwVS+QMK6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:36 2023 by rpki-client on console-fra.rpki-client.org