Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zwm6QZou6cnNEfIkGzRAWQ-7nEU.roa
File: zwm6QZou6cnNEfIkGzRAWQ-7nEU.roa (raw, json)
Hash identifier: njG0mPXggSj8Jham3Omp4LaQQNwL0r2hkTk34AXUAQ4=
Subject key identifier: CF:09:BA:41:9A:2E:E9:C9:CD:11:F2:24:1B:34:40:59:0F:BB:9C:45
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 35EBB8E1
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zwm6QZou6cnNEfIkGzRAWQ-7nEU.roa
Signing time: Sat 01 Jan 2022 03:02:11 +0000
ROA not before: Sat 01 Jan 2022 03:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20562
IP address blocks: 82.150.150.0/24 maxlen: 24
82.150.151.0/24 maxlen: 24
82.150.156.0/24 maxlen: 24
82.150.157.0/24 maxlen: 24
82.150.158.0/24 maxlen: 24
82.150.159.0/24 maxlen: 24
82.150.154.0/24 maxlen: 24
82.150.155.0/24 maxlen: 24
213.207.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 904640737 (0x35ebb8e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 03:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf09ba419a2ee9c9cd11f2241b3440590fbb9c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:ac:e9:83:05:a0:f3:af:20:9b:2f:db:d4:
b7:91:6e:6c:e8:18:09:ca:51:64:b9:2f:98:a5:b4:
b6:a3:ad:35:57:b3:00:73:11:f4:31:4e:c3:d9:28:
14:53:fc:cb:65:b0:91:df:d5:09:e7:5f:67:3a:53:
d5:d8:50:51:10:2b:14:cc:f3:f8:77:a6:3a:27:91:
78:72:78:96:cb:21:4b:07:fe:3f:c1:e5:b1:bd:05:
e0:1a:32:e1:c5:df:01:70:07:f5:c3:58:28:cf:48:
7f:95:20:e2:d6:32:1e:f3:a7:92:15:33:b5:c3:84:
c2:21:96:e6:92:83:7c:8e:54:f1:e8:a0:d0:b6:34:
c3:8a:3b:c6:5d:96:d2:77:fa:8e:a7:de:25:fb:7e:
e5:8a:4b:7b:49:2c:f4:8c:52:74:92:8a:0d:e3:31:
aa:9d:78:71:99:27:56:ec:4c:f3:bb:84:9c:e9:be:
1f:46:4e:47:40:a4:4c:56:ec:f3:d5:d0:dd:41:1b:
3e:af:ae:49:5d:86:10:de:5d:69:59:00:20:22:cf:
ff:01:e4:c5:1d:ae:32:c4:f9:70:fe:ca:f4:9e:71:
1e:91:24:52:84:98:19:3c:d6:0a:2d:5b:9c:9d:83:
20:a2:51:f4:57:b2:77:93:82:8f:3a:c0:04:d9:35:
92:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:BA:41:9A:2E:E9:C9:CD:11:F2:24:1B:34:40:59:0F:BB:9C:45
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/zwm6QZou6cnNEfIkGzRAWQ-7nEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.150.0/23
82.150.154.0-82.150.159.255
213.207.20.0/24
Signature Algorithm: sha256WithRSAEncryption
09:0b:0c:4c:32:d6:8c:79:bb:d4:14:f6:b9:f2:ea:f6:11:26:
31:6d:55:0f:bb:16:6a:17:65:dc:7a:12:1f:4c:da:62:c1:4d:
6d:73:2b:8b:c9:b8:ae:9b:bf:98:eb:89:84:21:9c:9b:ab:53:
bf:b4:9a:1f:dd:37:f0:3a:86:85:4a:f0:a0:8b:f2:c4:ce:df:
13:e6:80:56:86:3a:bb:0f:8c:47:12:2b:66:4d:97:55:ff:e5:
9f:1d:b3:d3:19:d9:7f:7a:07:c2:e5:f2:c7:73:6f:22:45:c6:
58:86:20:74:f3:a3:5b:7e:2e:2c:d8:17:7b:98:65:69:a1:08:
2f:b9:c8:79:01:2a:f5:6f:d7:27:5c:75:e9:50:a1:0c:e2:a8:
82:c4:af:c7:ae:9d:62:d6:82:a0:08:84:f1:f4:4b:8a:c8:e4:
6e:8f:0f:b8:c9:e1:b8:9c:64:31:66:b7:be:7f:59:46:32:5c:
a0:25:f6:95:a3:07:ee:16:ba:3d:7e:f7:0f:ea:01:55:b6:cf:
23:da:69:3a:d7:52:cb:83:81:a0:81:29:b0:72:89:91:ca:c5:
c3:ab:a1:ea:7c:cc:1a:fd:15:0c:e4:a9:6d:bc:c2:3b:62:0d:
ed:56:d0:46:6f:7c:98:f9:2c:6e:c7:71:f4:d2:ae:d6:fc:d0:
b0:af:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:54 2023 by rpki-client on console-ams.rpki-client.org