Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/ZcCIO5jU-37PCIAgegxB249CkK4.roa
File: ZcCIO5jU-37PCIAgegxB249CkK4.roa (raw, json)
Hash identifier: 59/x+/U4u3eU7QR81NnvHxJxYDczZLdJhibDIuJstrw=
Subject key identifier: 65:C0:88:3B:98:D4:FB:7E:CF:08:80:20:7A:0C:41:DB:8F:42:90:AE
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 17EE0EE4
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/ZcCIO5jU-37PCIAgegxB249CkK4.roa
Signing time: Sat 01 Jan 2022 03:55:01 +0000
ROA not before: Sat 01 Jan 2022 03:55:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2856
IP address blocks: 213.230.244.0/23 maxlen: 23
213.230.246.0/23 maxlen: 23
213.230.242.0/23 maxlen: 23
213.230.251.0/24 maxlen: 24
213.230.252.0/23 maxlen: 23
213.230.248.0/24 maxlen: 24
213.230.214.0/24 maxlen: 24
213.230.225.0/24 maxlen: 24
213.230.224.0/24 maxlen: 24
213.230.226.0/23 maxlen: 23
213.230.230.0/23 maxlen: 23
213.230.232.0/23 maxlen: 23
213.230.228.0/23 maxlen: 23
213.230.238.0/23 maxlen: 23
213.230.234.0/23 maxlen: 23
213.230.240.0/23 maxlen: 23
213.230.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401477348 (0x17ee0ee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Jan 1 03:55:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65c0883b98d4fb7ecf0880207a0c41db8f4290ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:da:98:f7:96:1c:27:b9:12:a6:48:06:34:
aa:89:28:13:ce:c1:83:82:32:d9:a2:19:fd:92:e8:
b6:a7:48:b5:0e:c2:bf:30:de:5e:5f:6e:b7:80:c5:
9d:9e:8d:86:3e:5f:b7:3a:59:65:17:f6:19:f7:03:
89:01:2b:26:f6:b0:a8:aa:d9:ff:75:c2:60:8d:14:
4f:a1:93:08:ef:a9:59:60:cd:4a:2a:96:9e:97:d2:
73:88:f3:b3:8c:f6:cc:14:03:c6:27:22:0b:84:91:
39:88:45:fe:4f:6f:07:99:2f:de:9a:d7:4f:24:83:
0f:01:17:79:11:98:ba:3d:e9:e8:25:86:4f:00:5b:
54:fe:8e:2c:d5:27:2e:3b:d9:a2:c2:b4:73:4d:2d:
c1:92:14:8b:5a:06:26:56:b7:9f:88:39:1f:1c:c0:
30:52:57:63:38:d3:0e:fa:53:fe:46:0d:34:96:8b:
2e:e7:49:09:b2:0c:b6:72:85:e8:22:41:9b:8f:45:
68:51:6a:e6:5a:8d:9a:84:72:67:97:ac:55:1e:82:
e1:1f:a3:12:0e:b8:74:bb:32:73:f5:58:a5:85:d5:
8c:8e:0c:a8:23:51:41:f9:c3:e0:27:a6:ec:f8:d1:
98:55:18:7c:28:be:a8:52:d4:28:af:52:dc:bd:d2:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C0:88:3B:98:D4:FB:7E:CF:08:80:20:7A:0C:41:DB:8F:42:90:AE
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/ZcCIO5jU-37PCIAgegxB249CkK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.230.214.0/24
213.230.224.0-213.230.248.255
213.230.251.0-213.230.253.255
Signature Algorithm: sha256WithRSAEncryption
b5:06:08:e8:c8:e3:3f:c9:1a:16:05:83:8c:e1:ce:2e:76:73:
65:1e:8d:1b:0c:7e:5a:f2:9b:93:75:8b:12:2e:cb:21:70:48:
9d:5f:8a:b4:f7:4f:b1:57:e1:99:3c:71:1d:24:a3:09:29:ae:
cf:0b:64:30:66:4e:b6:a4:ed:36:94:9e:bb:68:7c:23:66:5a:
67:43:1c:b1:25:25:8e:2d:5a:f1:ff:28:ea:c7:25:8a:96:d8:
ce:9e:1c:fc:f9:1d:99:e4:8e:04:94:bd:92:bb:af:66:41:76:
c4:e3:c5:0c:bd:49:22:fb:fe:38:d3:ef:1f:db:4b:20:6b:9a:
ad:2d:f0:ab:d2:b3:a0:bd:3a:a0:95:f5:b7:67:1f:d1:43:26:
cb:66:e0:d9:83:66:95:d4:11:53:7b:e6:c9:d7:91:7a:fa:a4:
a5:ea:be:d7:7f:2f:6d:d1:36:e1:23:fc:39:f6:0f:d5:9f:7b:
8d:c6:8c:5c:3f:6c:2b:ae:23:77:5a:4f:f1:d4:19:20:77:af:
f9:34:d7:d1:4c:14:cf:cf:e3:bf:2a:d0:fe:3e:69:04:bf:a7:
4a:da:66:30:8f:6a:25:10:0b:79:8c:e4:91:01:7e:0e:d9:1e:
a8:05:b3:53:cd:44:d2:e0:e1:09:14:e7:26:46:00:92:94:fc:
5b:91:d2:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:29 2024 by rpki-client on console-ams.rpki-client.org