Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zx-r88LAZhCoZrqxFK3s0cYtJL4.roa
File: Zx-r88LAZhCoZrqxFK3s0cYtJL4.roa (raw, json)
Hash identifier: 1Llfq6XBCeqL+ulnDMXiQsf9KVi+CLB5JYzBJcLi3KY=
Subject key identifier: 67:1F:AB:F3:C2:C0:66:10:A8:66:BA:B1:14:AD:EC:D1:C6:2D:24:BE
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 08DF571E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zx-r88LAZhCoZrqxFK3s0cYtJL4.roa
Signing time: Sat 01 Jan 2022 07:01:28 +0000
ROA not before: Sat 01 Jan 2022 07:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213030
IP address blocks: 185.235.165.0/24 maxlen: 24
185.245.0.0/22 maxlen: 24
45.93.16.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148854558 (0x8df571e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 1 07:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=671fabf3c2c06610a866bab114adecd1c62d24be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:58:f6:57:d8:a0:04:d7:b4:77:d7:1e:41:7d:
89:37:c6:82:c5:09:30:7b:c9:ad:3a:c5:41:c5:46:
a5:39:18:3e:13:dc:51:4e:d9:d6:b4:8f:93:44:0e:
71:d2:d5:fa:32:b9:13:6b:56:27:ec:72:8b:b4:2c:
83:41:08:4f:48:bb:09:99:2a:65:be:04:c4:1e:1f:
c4:8f:b0:ee:4e:e2:1f:b5:26:6d:a9:ec:58:96:37:
d5:9f:26:8a:7d:96:7b:02:d4:dd:b5:1e:9b:58:d5:
64:8f:95:2e:3d:91:d2:42:1d:ae:92:21:c1:1e:6c:
bb:7f:6f:f8:0f:ea:8b:4d:92:74:33:eb:53:f4:10:
1f:16:8c:dc:2c:db:02:f1:97:54:34:2b:56:25:1c:
19:f6:67:80:3b:31:8b:65:10:cc:18:44:68:78:8d:
f0:77:13:e1:60:f6:73:90:67:03:05:fa:78:7a:18:
41:9f:ed:e0:17:ce:7e:30:d7:85:41:0d:46:e6:54:
ca:f0:15:97:5c:df:70:f6:64:9f:5a:d2:ac:73:a1:
d3:0a:6c:32:c1:8a:e7:79:ff:2b:5c:b9:2f:2b:68:
03:ae:b0:b7:5a:11:52:38:33:a6:b0:4d:1b:69:23:
5b:0a:7d:c1:5c:51:f5:bf:ff:c3:72:d2:27:73:f2:
d3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:AB:F3:C2:C0:66:10:A8:66:BA:B1:14:AD:EC:D1:C6:2D:24:BE
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Zx-r88LAZhCoZrqxFK3s0cYtJL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.16.0/23
185.235.165.0/24
185.245.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:4a:49:b3:78:dd:6e:0d:8a:77:f8:9e:11:a6:51:3d:5a:45:
40:00:de:b0:a4:e0:1d:46:2a:ba:99:25:a7:75:67:2c:9f:28:
2b:b0:ab:60:bd:9d:20:28:d9:ce:65:12:a3:24:b7:7c:fb:f0:
b3:1a:c5:aa:de:bd:3e:b3:06:fd:09:38:05:c5:35:b4:74:45:
e0:36:d0:f9:69:fb:0e:fb:43:ee:fe:68:9d:4e:c6:a3:75:d3:
1f:e8:99:d1:1d:e7:85:33:b4:79:88:6e:00:ed:fa:ba:00:32:
70:60:c3:16:d9:32:39:6b:7e:db:f6:75:04:29:25:d7:e6:26:
dc:99:1f:f6:d0:44:55:e1:bb:1a:bb:b2:0e:2a:98:17:b1:ca:
db:e5:6d:1b:9b:50:f9:cc:9f:b6:1c:15:ab:82:b6:78:02:6b:
68:d3:e8:29:84:1c:1a:aa:41:fc:33:bb:3e:61:e0:43:1a:1e:
d5:da:d3:b3:2d:5a:88:e9:fc:d3:b1:ef:d9:64:b1:1b:fd:56:
02:3d:20:73:d6:18:a6:15:ea:8e:2f:d8:6a:f3:e0:d8:25:f0:
45:4f:75:0c:33:3a:e5:27:12:e0:c2:72:bb:74:46:7c:ca:2d:
d7:38:cb:a6:6b:89:6c:8c:5a:36:0c:e0:e3:bb:21:ea:d3:a4:
a5:18:2f:99
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECN9XHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
N2QwM2YyOTgxODBjYzEwOWYxOWQ0YjE5OTJjN2Q3MWM1NmM4ZGNjMB4XDTIyMDEw
MTA3MDEyOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjcxZmFiZjNjMmMw
NjYxMGE4NjZiYWIxMTRhZGVjZDFjNjJkMjRiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZY9lfYoATXtHfXHkF9iTfGgsUJMHvJrTrFQcVGpTkYPhPc
UU7Z1rSPk0QOcdLV+jK5E2tWJ+xyi7Qsg0EIT0i7CZkqZb4ExB4fxI+w7k7iH7Um
bansWJY31Z8min2WewLU3bUem1jVZI+VLj2R0kIdrpIhwR5su39v+A/qi02SdDPr
U/QQHxaM3CzbAvGXVDQrViUcGfZngDsxi2UQzBhEaHiN8HcT4WD2c5BnAwX6eHoY
QZ/t4BfOfjDXhUENRuZUyvAVl1zfcPZkn1rSrHOh0wpsMsGK53n/K1y5LytoA66w
t1oRUjgzprBNG2kjWwp9wVxR9b//w3LSJ3Py0x8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRnH6vzwsBmEKhmurEUrezRxi0kvjAfBgNVHSMEGDAWgBQX0D8pgYDMEJ8Z
1LGZLH1xxWyNzDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0Y5QV9LWUdBekJDZkdkU3htU3g5Y2NWc2pjdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8x
L1p4LXI4OExBWmhDb1pycXhGSzNzMGNZdEpMNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
ODJlMjUzLTAxNzctNGEyMC1iZWZlLTkxOGFjNjQ2MjY3OS8xL0Y5QV9LWUdBekJD
ZkdkU3htU3g5Y2NWc2pjdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAS1dEAMEALnrpQMEArn1ADANBgkq
hkiG9w0BAQsFAAOCAQEAXEpJs3jdbg2Kd/ieEaZRPVpFQADesKTgHUYqupklp3Vn
LJ8oK7CrYL2dICjZzmUSoyS3fPvwsxrFqt69PrMG/Qk4BcU1tHRF4DbQ+Wn7DvtD
7v5onU7Go3XTH+iZ0R3nhTO0eYhuAO36ugAycGDDFtkyOWt+2/Z1BCkl1+Ym3Jkf
9tBEVeG7GruyDiqYF7HK2+VtG5tQ+cyfthwVq4K2eAJraNPoKYQcGqpB/DO7PmHg
Qxoe1drTsy1aiOn807Hv2WSxG/1WAj0gc9YYphXqji/YavPg2CXwRU91DDM65ScS
4MJyu3RGfMot1zjLpmuJbIxaNgzg47sh6tOkpRgvmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:03 2023 by rpki-client on console-fra.rpki-client.org