Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZZGG8C7c5Ar4PaV4_D5oRcxdjOM.roa
File: ZZGG8C7c5Ar4PaV4_D5oRcxdjOM.roa (raw, json)
Hash identifier: sqPz9vHVVHLf21PHoseI+aQVDHqwSDUj5ppMB6PirIs=
Subject key identifier: 65:91:86:F0:2E:DC:E4:0A:F8:3D:A5:78:FC:3E:68:45:CC:5D:8C:E3
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 1FE95459
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZZGG8C7c5Ar4PaV4_D5oRcxdjOM.roa
Signing time: Thu 03 Feb 2022 19:38:58 +0000
ROA not before: Thu 03 Feb 2022 19:38:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60461
IP address blocks: 176.100.37.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
37.114.44.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
94.154.50.0/24 maxlen: 24
37.114.45.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
37.114.54.0/24 maxlen: 24
2a00:ccc3::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 535385177 (0x1fe95459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Feb 3 19:38:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=659186f02edce40af83da578fc3e6845cc5d8ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:1e:29:7b:c3:94:81:0f:1b:54:f7:d1:15:
71:6e:e9:fc:b7:05:84:f3:15:3c:8a:a4:2a:e5:68:
3f:e0:6f:c1:cc:89:5a:01:d3:98:1e:96:78:47:76:
e2:7c:5e:0a:7f:80:01:8a:af:a4:fe:48:5b:f6:c1:
e7:60:06:06:bc:e3:1f:fe:d0:1c:51:93:f7:58:26:
6c:4f:5c:cc:fe:fd:21:a5:1d:93:4b:52:22:90:11:
a2:3d:c6:85:52:01:de:8c:f5:ca:d8:65:c8:24:ca:
5d:8b:b4:06:ae:bf:68:3e:94:d0:d2:26:9c:85:6f:
c6:2b:85:b8:72:a6:2b:51:8d:50:d4:1e:9a:24:84:
b6:b9:92:5d:90:06:d4:a4:eb:6e:be:14:6c:7d:88:
b0:cc:a4:8d:4f:b4:24:16:bf:76:06:3d:79:3c:89:
5e:af:a8:5a:32:ee:7a:8d:bf:e6:58:af:96:27:4b:
a3:5c:2b:77:80:3b:6f:fe:b9:ce:b3:2d:b5:88:d0:
3d:65:de:56:be:4e:dc:44:9b:5d:49:3e:08:ba:fc:
bd:47:4f:1d:bb:26:19:f3:36:6e:0f:b5:32:a3:bd:
3d:6f:37:85:2d:20:29:54:b4:7f:2a:49:7e:7b:10:
f9:53:00:c6:5a:53:d7:ea:45:69:30:4a:08:6c:39:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:91:86:F0:2E:DC:E4:0A:F8:3D:A5:78:FC:3E:68:45:CC:5D:8C:E3
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/ZZGG8C7c5Ar4PaV4_D5oRcxdjOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.39.0/24
37.114.44.0/23
37.114.54.0/24
37.114.58.0/24
94.154.50.0/24
176.100.36.0/23
176.100.39.0/24
IPv6:
2a00:ccc3::/32
Signature Algorithm: sha256WithRSAEncryption
6a:01:8a:f2:47:a4:9a:9f:44:e2:fa:33:52:ad:1d:6b:eb:f6:
76:6d:e7:e5:3f:ab:bb:2e:08:ed:05:7f:bd:c8:14:1a:cd:c8:
93:04:33:51:64:46:83:5e:ab:14:ac:31:dc:50:a4:e2:71:a4:
1c:fd:50:d8:9f:e5:b9:d0:e6:89:12:49:c5:c7:93:78:67:dc:
9f:e2:89:20:98:5d:91:1f:d5:be:ec:41:39:c2:cc:2d:95:64:
01:c2:39:d0:8e:88:62:fd:1b:83:3f:af:81:f6:db:fa:41:43:
dd:ae:28:c3:87:d1:41:25:be:a5:8d:6a:fa:31:85:a9:b1:f8:
7f:85:94:08:61:64:ef:dd:02:65:a6:51:c7:d8:32:79:72:4b:
d3:53:8d:eb:09:82:07:01:f7:36:93:1e:79:09:dd:fb:4f:88:
75:98:82:e7:f1:c7:03:b6:72:55:6a:12:b7:3b:0b:49:1c:43:
a1:0f:d1:83:ea:19:3c:3b:1d:53:5a:d3:e3:09:ad:0b:4d:1c:
e6:d1:f5:74:c2:01:44:9d:a1:a6:1b:8f:1a:2b:85:d5:3e:11:
d2:42:d7:4b:1f:26:6a:32:77:49:f0:73:bb:da:ac:05:34:40:
11:50:2b:78:d3:95:66:63:0d:fe:c4:d4:71:a1:5b:82:51:d1:
01:ed:9e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:18 2024 by rpki-client on console-ams.rpki-client.org