Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zwbPeuTK6hxily8EC3EWqaRFjFo.roa
File: zwbPeuTK6hxily8EC3EWqaRFjFo.roa (raw, json)
Hash identifier: OHAOjTCN8pv5TcO7mZCkmTLVOJQ/pcLuarlIIVCX/F8=
Subject key identifier: CF:06:CF:7A:E4:CA:EA:1C:62:97:2F:04:0B:71:16:A9:A4:45:8C:5A
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01843E4350E470E08C6A42052713527BDA7E
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zwbPeuTK6hxily8EC3EWqaRFjFo.roa
Signing time: Thu 03 Nov 2022 16:11:49 +0000
ROA not before: Thu 03 Nov 2022 16:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 5.134.84.0/23 maxlen: 23
5.134.84.0/22 maxlen: 22
5.134.86.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3e:43:50:e4:70:e0:8c:6a:42:05:27:13:52:7b:da:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Nov 3 16:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf06cf7ae4caea1c62972f040b7116a9a4458c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:86:74:e5:b3:8c:5c:a8:25:fa:7f:56:8b:
89:aa:e2:75:7e:93:e4:7a:92:60:9a:70:d9:c0:08:
da:0a:dc:71:4c:0b:a1:ae:21:5a:6b:34:92:30:4c:
42:8e:3b:d5:ce:90:79:f0:41:02:86:58:1f:47:57:
29:af:14:61:bb:c3:1d:ff:c9:ce:1f:c9:fd:61:af:
08:7b:22:78:90:89:71:e7:f8:26:2f:2e:09:5b:fa:
66:f3:89:04:f9:0c:0b:20:a7:70:2f:31:3c:24:0f:
43:05:d3:87:16:ea:24:fa:54:ae:19:55:79:b1:24:
77:c8:b6:11:87:42:56:e2:57:f0:b4:7e:6e:b4:67:
2e:b9:62:58:5e:ce:8f:c1:d0:2e:ec:31:e0:a0:29:
bf:fe:84:29:a5:c1:38:90:5f:5e:c5:f4:00:69:87:
61:9c:73:16:54:60:66:37:1d:e7:12:b2:60:0a:08:
0d:0c:d4:05:88:23:cc:14:cf:64:98:e7:91:5a:ce:
1d:cf:f1:85:ed:55:6e:ea:f2:3d:81:91:f8:8a:be:
a0:cd:35:66:15:5d:af:c0:f9:b8:fe:7e:6a:b5:6e:
17:8e:b5:2c:20:da:09:27:3c:0a:21:34:6d:0b:32:
0b:e4:4f:2c:db:8b:bf:e8:e1:c7:4e:65:20:a2:c7:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:CF:7A:E4:CA:EA:1C:62:97:2F:04:0B:71:16:A9:A4:45:8C:5A
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zwbPeuTK6hxily8EC3EWqaRFjFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.84.0/22
Signature Algorithm: sha256WithRSAEncryption
69:0c:54:ad:cd:c6:95:4f:fb:f5:49:66:95:56:01:f3:42:21:
96:4f:3a:1e:aa:ff:2f:2b:98:cf:66:4c:1e:24:c0:e3:cf:88:
3b:f5:78:9b:66:9c:ea:e5:d8:21:b8:1b:a9:5e:4b:f0:29:77:
bd:fa:de:e8:83:eb:e2:9b:3c:5a:34:e5:ad:14:a0:c7:40:fd:
c9:c7:5b:7b:c8:fb:0d:76:ab:fb:06:a3:76:e6:ec:67:9b:50:
8e:e2:86:8c:d6:e0:66:dc:95:61:60:d7:08:22:0a:53:8d:9d:
39:93:5b:09:dc:e3:6d:b8:f6:1e:83:36:1a:fa:12:4f:90:6b:
9b:10:6a:55:f0:ec:9d:3b:61:42:e2:b6:6e:81:77:18:6c:63:
e6:6c:29:7b:67:3e:9c:e4:d2:20:55:ed:83:b6:ab:2f:82:9f:
34:06:11:e1:24:83:58:a6:3c:1f:60:39:cf:25:22:9b:55:79:
08:c7:f0:7c:6a:2d:3c:78:b8:e7:02:e0:61:93:0e:6c:65:9c:
04:e8:5f:0b:c6:b1:cf:40:e4:77:0c:c8:96:5b:97:7d:fd:cd:
16:6c:96:12:53:cc:56:5a:73:92:b7:f6:3b:89:fd:e7:96:d2:
96:a4:34:e3:2b:1f:53:c3:90:07:25:d6:5e:01:fa:63:70:4d:
74:8f:c7:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQ+Q1DkcOCMakIFJxNSe9p+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjIxMTAzMTYxMTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjA2Y2Y3YWU0Y2FlYTFjNjI5NzJmMDQwYjcxMTZhOWE0NDU4YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF2GdOWzjFyoJfp/VouJquJ1fpPk
epJgmnDZwAjaCtxxTAuhriFaazSSMExCjjvVzpB58EEChlgfR1cprxRhu8Md/8nO
H8n9Ya8IeyJ4kIlx5/gmLy4JW/pm84kE+QwLIKdwLzE8JA9DBdOHFuok+lSuGVV5
sSR3yLYRh0JW4lfwtH5utGcuuWJYXs6PwdAu7DHgoCm//oQppcE4kF9exfQAaYdh
nHMWVGBmNx3nErJgCggNDNQFiCPMFM9kmOeRWs4dz/GF7VVu6vI9gZH4ir6gzTVm
FV2vwPm4/n5qtW4XjrUsINoJJzwKITRtCzIL5E8s24u/6OHHTmUgosdajwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM8Gz3rkyuocYpcvBAtxFqmkRYxaMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvendiUGV1VEs2aHhpbHk4RUMzRVdxYVJGakZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBYZUMA0G
CSqGSIb3DQEBCwUAA4IBAQBpDFStzcaVT/v1SWaVVgHzQiGWTzoeqv8vK5jPZkwe
JMDjz4g79XibZpzq5dghuBupXkvwKXe9+t7og+vimzxaNOWtFKDHQP3Jx1t7yPsN
dqv7BqN25uxnm1CO4oaM1uBm3JVhYNcIIgpTjZ05k1sJ3ONtuPYegzYa+hJPkGub
EGpV8OydO2FC4rZugXcYbGPmbCl7Zz6c5NIgVe2Dtqsvgp80BhHhJINYpjwfYDnP
JSKbVXkIx/B8ai08eLjnAuBhkw5sZZwE6F8LxrHPQOR3DMiWW5d9/c0WbJYSU8xW
WnOSt/Y7if3nltKWpDTjKx9Tw5AHJdZeAfpjcE10j8cA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org