Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZvDT-XYkP9aLm_Mpl1sUUpEzO2w.roa
File: ZvDT-XYkP9aLm_Mpl1sUUpEzO2w.roa (raw, json)
Hash identifier: w2cil68eUWlUbO7OQthDG3Q6zvLqMAh9LzO08LuP/9Y=
Subject key identifier: 66:F0:D3:F9:76:24:3F:D6:8B:9B:F3:29:97:5B:14:52:91:33:3B:6C
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018474DEBA460AC37E1A378FE8AF4380A9EC
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZvDT-XYkP9aLm_Mpl1sUUpEzO2w.roa
Signing time: Mon 14 Nov 2022 06:41:04 +0000
ROA not before: Mon 14 Nov 2022 06:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 84.32.79.0/24 maxlen: 24
84.32.90.0/23 maxlen: 24
84.32.88.0/23 maxlen: 24
88.216.131.0/24 maxlen: 24
88.216.128.0/24 maxlen: 24
84.32.24.0/22 maxlen: 22
88.216.132.0/23 maxlen: 24
88.216.134.0/24 maxlen: 24
88.216.135.0/24 maxlen: 24
84.32.28.0/22 maxlen: 22
88.216.94.0/23 maxlen: 24
88.216.92.0/23 maxlen: 24
84.32.212.0/24 maxlen: 24
88.216.224.0/22 maxlen: 24
88.216.232.0/21 maxlen: 24
88.216.16.0/23 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.43.0/24 maxlen: 24
88.216.44.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:74:de:ba:46:0a:c3:7e:1a:37:8f:e8:af:43:80:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Nov 14 06:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66f0d3f976243fd68b9bf329975b145291333b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:26:ba:f5:15:88:24:2c:7a:74:1f:e5:23:a6:
67:ac:4a:10:d6:4c:19:83:85:c4:ce:55:b2:8d:91:
a0:31:f9:1a:65:0c:1c:70:59:b9:1d:35:79:33:a4:
0f:9a:cf:79:89:14:69:45:c8:e9:7a:43:d3:c0:d5:
aa:00:96:6b:b6:8f:ed:74:7a:0e:3f:4a:f7:cb:b4:
66:91:74:9b:33:26:51:b8:30:5d:4f:18:00:ea:b9:
1c:07:1a:f1:af:d9:65:c6:9b:19:cc:29:6a:c5:d2:
79:00:70:ec:57:25:fa:e8:97:72:3e:2a:b4:41:cd:
38:9c:bc:31:f3:12:d0:3d:ea:17:f8:72:42:13:72:
e4:68:38:ec:a6:3c:91:67:44:17:01:3a:ad:07:28:
b2:2f:3b:2a:6f:fb:9b:db:79:da:a0:36:41:30:77:
51:68:70:5d:36:3d:35:89:bc:6a:e1:87:5e:fe:6d:
e9:7c:2d:04:6c:41:55:5b:a8:2d:47:2d:d4:d9:de:
6a:da:1b:bc:9e:1d:36:fd:d8:59:c3:56:bf:24:06:
41:c9:3a:7f:b4:0f:1b:3a:a9:5c:50:35:bf:5d:50:
6b:34:2b:98:bf:83:77:f1:63:22:39:fc:cb:72:31:
c3:53:3d:48:d4:f3:1b:71:79:54:2f:81:3d:47:e4:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:D3:F9:76:24:3F:D6:8B:9B:F3:29:97:5B:14:52:91:33:3B:6C
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ZvDT-XYkP9aLm_Mpl1sUUpEzO2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.24.0/21
84.32.79.0/24
84.32.88.0/22
84.32.212.0/24
88.216.16.0/23
88.216.41.0/24
88.216.43.0-88.216.45.255
88.216.92.0/22
88.216.128.0/24
88.216.131.0-88.216.135.255
88.216.224.0/22
88.216.232.0/21
Signature Algorithm: sha256WithRSAEncryption
30:eb:6c:ec:be:42:4b:2d:04:35:06:b6:5e:28:98:4e:2d:1a:
ca:8c:b0:69:25:42:47:5f:87:d9:85:ef:8a:42:8e:2b:c1:95:
a4:ca:b9:15:24:67:be:40:d9:0e:a9:ef:c9:7d:85:eb:fa:1f:
7d:ee:d0:36:fe:33:e8:31:35:2c:b7:5b:ca:94:ca:65:c4:b8:
53:4e:71:a6:46:ce:c2:17:46:14:35:3f:63:0b:4d:93:ce:22:
8c:4c:98:ca:e7:0c:92:0b:c8:58:a6:a5:d9:91:eb:68:95:58:
61:a3:70:e8:50:ee:b9:74:3e:46:ea:29:f8:b7:ed:d6:8d:48:
df:6d:11:93:0c:93:bb:8c:79:b1:39:b5:80:17:c0:89:59:f6:
7c:67:a1:25:46:8f:b6:ae:b7:07:6d:53:74:24:a0:64:f9:1a:
ee:80:c9:de:77:9a:8d:7c:c8:c0:68:ac:b9:63:bc:4d:80:f5:
3a:4f:f2:d2:1d:7e:a6:f6:a5:9f:e7:27:dd:87:e1:a5:6d:6e:
eb:85:e6:73:ee:9d:0a:2b:aa:a2:ae:c7:c3:3a:b3:c3:89:72:
63:00:cb:c4:3d:81:f2:b1:71:9e:18:bb:48:9b:4c:30:83:bf:
a2:56:b5:3a:37:ec:bc:9b:e2:77:81:78:7f:3d:46:3a:04:e7:
5d:2c:69:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:30 2023 by rpki-client on console-ams.rpki-client.org