Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/zxdRNkoFzGK6M1WbEo-C8q1LW-A.roa
File: zxdRNkoFzGK6M1WbEo-C8q1LW-A.roa (raw, json)
Hash identifier: CuQbO6dLfe9Php185hda4m6Czw55lipfGVt6qAaEePY=
Subject key identifier: CF:17:51:36:4A:05:CC:62:BA:33:55:9B:12:8F:82:F2:AD:4B:5B:E0
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 0181D787C9A7FAE8122AE78FC49F60D0B50F
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/zxdRNkoFzGK6M1WbEo-C8q1LW-A.roa
Signing time: Thu 07 Jul 2022 07:20:09 +0000
ROA not before: Thu 07 Jul 2022 07:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41412
IP address blocks: 185.187.64.0/23 maxlen: 23
109.70.218.0/23 maxlen: 23
109.70.216.0/23 maxlen: 23
109.70.220.0/23 maxlen: 23
109.70.222.0/23 maxlen: 23
46.245.176.0/23 maxlen: 23
46.245.178.0/23 maxlen: 23
46.245.182.0/23 maxlen: 23
46.245.180.0/23 maxlen: 23
91.230.172.0/23 maxlen: 23
91.230.174.0/23 maxlen: 23
91.90.144.0/23 maxlen: 23
91.90.150.0/23 maxlen: 23
91.90.152.0/23 maxlen: 23
195.93.242.0/23 maxlen: 23
91.90.148.0/23 maxlen: 23
91.90.146.0/23 maxlen: 23
91.90.154.0/23 maxlen: 23
91.90.156.0/23 maxlen: 23
91.90.158.0/23 maxlen: 23
86.105.223.0/24 maxlen: 24
2a00:14e0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:87:c9:a7:fa:e8:12:2a:e7:8f:c4:9f:60:d0:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jul 7 07:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf1751364a05cc62ba33559b128f82f2ad4b5be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2d:d2:e8:c9:92:29:2e:48:7b:65:21:84:63:
80:d2:9d:a2:1b:48:82:f4:50:80:fc:45:5a:6e:4c:
5b:e7:2f:89:06:57:05:4e:97:15:c0:3e:65:46:d9:
13:b9:6d:09:ed:a1:7a:fe:05:77:64:39:83:32:f6:
3d:d3:6e:8e:3d:b0:81:c2:a7:ea:68:90:ca:ce:cf:
70:9e:bf:64:f1:e3:16:a6:4e:28:87:21:5b:91:42:
d6:40:2f:ab:36:8f:43:7a:92:38:00:1e:e8:a7:e9:
fd:85:18:86:de:15:4a:9c:65:03:61:cd:53:16:2f:
5e:6e:c2:d3:85:8e:a6:41:c6:5d:2b:be:7a:41:5d:
2e:1b:7f:68:b3:d2:25:ab:4d:4b:b7:f5:cf:db:1a:
c9:c4:56:9c:3e:30:aa:61:63:31:27:99:78:44:14:
c5:9b:b0:fc:9a:a4:1b:c7:29:51:a6:7d:29:db:83:
bf:7f:49:c8:0b:5f:ce:52:b6:5e:33:f1:53:53:a3:
a7:37:44:11:d0:21:b3:fa:1e:c3:fa:42:05:06:fe:
d0:98:ed:47:50:0f:03:47:ac:77:83:68:99:85:5d:
49:4d:51:d1:54:2b:6c:68:af:4c:ec:f4:f2:39:9e:
57:be:c3:15:90:79:01:4d:13:5f:21:f0:79:5a:da:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:17:51:36:4A:05:CC:62:BA:33:55:9B:12:8F:82:F2:AD:4B:5B:E0
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/zxdRNkoFzGK6M1WbEo-C8q1LW-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.223.0/24
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/23
195.93.242.0/23
IPv6:
2a00:14e0::/32
Signature Algorithm: sha256WithRSAEncryption
4b:9f:5a:47:d0:90:bd:0c:77:91:8c:54:22:2d:ff:27:a5:3d:
b9:81:fc:8a:09:1c:85:27:14:99:bf:ab:35:07:fc:19:31:81:
c1:0b:2b:56:9b:62:4a:c0:c4:33:69:59:40:8a:c5:17:83:e1:
be:f8:5d:a5:48:0b:1f:0c:8c:0b:b6:b0:d1:06:a8:4d:68:87:
6a:06:f9:fd:02:80:7e:c4:77:44:28:70:be:24:b5:c6:e8:5b:
fa:1c:e2:ee:84:7e:18:89:30:01:d2:9a:d7:29:05:62:71:89:
49:ea:c7:33:8c:50:6b:1b:f9:e7:93:b3:da:aa:71:c6:5b:9e:
07:ce:f9:67:ea:6c:e2:c2:99:dc:b7:f4:ce:4a:99:6d:eb:c3:
68:49:ec:f4:bb:6d:d9:46:9a:62:42:1c:6f:cb:51:ce:dd:0f:
37:cb:22:a9:fc:41:c2:7d:56:2a:c2:ac:96:2e:27:71:39:0f:
05:d8:d2:13:67:05:c9:38:24:b9:f8:4c:fe:24:f8:e8:41:07:
8d:50:0e:14:cd:d5:d6:c3:ac:47:53:21:a5:94:4a:dc:fa:33:
b1:8b:79:86:e2:1f:6e:6d:55:58:19:74:eb:c1:8f:ef:a3:c8:
b1:ec:73:50:ac:67:ea:71:df:6e:41:00:f5:31:71:58:52:95:
df:6c:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:21 2024 by rpki-client on console-ams.rpki-client.org