Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/k-DZD4VNPDSeEwR-FRIqbCjR3g8.roa
File: k-DZD4VNPDSeEwR-FRIqbCjR3g8.roa (raw, json)
Hash identifier: XxaOYzbiaBODkCvzcnhQ+u6iCcWyFpk7DWj3ujShamQ=
Subject key identifier: 93:E0:D9:0F:85:4D:3C:34:9E:13:04:7E:15:12:2A:6C:28:D1:DE:0F
Certificate issuer: /CN=64dfe26d403141be9059ab2144325b402d4cab7d
Certificate serial: 0C37EE68
Authority key identifier: 64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/k-DZD4VNPDSeEwR-FRIqbCjR3g8.roa
Signing time: Sat 01 Jan 2022 11:58:34 +0000
ROA not before: Sat 01 Jan 2022 11:58:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57588
IP address blocks: 185.129.4.0/22 maxlen: 22
185.129.4.0/23 maxlen: 23
185.129.4.0/24 maxlen: 24
185.129.5.0/24 maxlen: 24
185.129.6.0/24 maxlen: 24
185.129.6.0/23 maxlen: 23
185.129.7.0/24 maxlen: 24
176.241.84.0/24 maxlen: 24
176.241.80.0/24 maxlen: 24
176.241.80.0/22 maxlen: 22
176.241.81.0/24 maxlen: 24
176.241.82.0/24 maxlen: 24
176.241.83.0/24 maxlen: 24
176.241.84.0/23 maxlen: 23
176.241.85.0/24 maxlen: 24
176.241.80.0/20 maxlen: 20
176.241.86.0/24 maxlen: 24
176.241.87.0/24 maxlen: 24
176.241.88.0/24 maxlen: 24
176.241.88.0/22 maxlen: 22
176.241.89.0/24 maxlen: 24
176.241.90.0/24 maxlen: 24
176.241.91.0/24 maxlen: 24
176.241.94.0/24 maxlen: 24
176.241.95.0/24 maxlen: 24
176.241.92.0/22 maxlen: 22
176.241.92.0/24 maxlen: 24
176.241.93.0/24 maxlen: 24
2a0d:d680::/48 maxlen: 48
2a0d:d680::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204992104 (0xc37ee68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64dfe26d403141be9059ab2144325b402d4cab7d
Validity
Not Before: Jan 1 11:58:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93e0d90f854d3c349e13047e15122a6c28d1de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:15:b1:56:33:a1:d2:db:f5:58:70:39:fc:
af:2c:b4:3f:6b:2d:59:78:5e:94:96:1e:0a:81:d0:
6f:f7:9e:b4:bb:4b:8d:6a:9b:fc:34:03:29:e0:b4:
b5:48:8b:1a:56:d0:bc:49:40:1a:7a:c7:bf:da:85:
ae:9c:08:9a:1c:e4:09:c8:bf:9d:ed:fb:83:62:ad:
d4:11:26:64:7a:0d:50:1c:f3:e7:f0:fc:53:b3:54:
6f:9e:2a:40:eb:d1:0a:c6:29:81:bf:b6:0c:e0:57:
35:86:26:f6:4b:7e:0b:91:b9:b1:7f:1d:3c:a5:69:
10:08:8f:ca:40:f0:ba:b6:69:ae:87:39:19:ac:b4:
fc:66:e3:77:50:67:f0:2c:9e:47:de:04:00:53:31:
c0:4c:1d:9e:82:52:72:6d:c9:d1:9a:2d:26:77:f8:
fd:4c:d0:51:35:e7:26:59:8f:0a:87:a3:dd:ae:66:
52:60:4f:92:aa:96:fd:49:20:d0:ad:13:79:e5:f9:
92:55:b2:7b:09:d3:b4:4c:4a:00:15:ba:23:ce:a1:
13:2a:77:0c:e2:92:a1:67:dc:ed:9c:51:0b:af:da:
0e:2b:bd:bf:51:d9:98:c6:4e:30:60:74:c4:7f:e8:
fc:70:39:ee:e7:ac:d9:8d:18:ab:d1:01:42:20:9b:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E0:D9:0F:85:4D:3C:34:9E:13:04:7E:15:12:2A:6C:28:D1:DE:0F
X509v3 Authority Key Identifier:
keyid:64:DF:E2:6D:40:31:41:BE:90:59:AB:21:44:32:5B:40:2D:4C:AB:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN_ibUAxQb6QWashRDJbQC1Mq30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/k-DZD4VNPDSeEwR-FRIqbCjR3g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/5d6255-65c9-4bfa-b9d7-f657519d0233/1/ZN_ibUAxQb6QWashRDJbQC1Mq30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.80.0/20
185.129.4.0/22
IPv6:
2a0d:d680::/29
Signature Algorithm: sha256WithRSAEncryption
2e:b8:8e:71:aa:93:8b:26:3c:08:b4:09:44:0f:9d:4e:e7:d4:
7c:47:89:02:3a:07:85:f9:1c:3d:1e:ce:ee:2b:4d:3a:21:85:
73:51:43:06:64:d9:cb:a7:61:67:52:ee:f4:fd:6f:2e:32:5e:
94:9f:a3:c7:d1:2e:62:fe:79:3e:03:de:3e:ba:12:87:74:a6:
e9:bf:24:6a:64:b1:f1:f2:12:2e:c9:f5:51:24:33:9f:24:5a:
b1:93:f5:ce:6b:dd:d1:fa:4c:ab:b0:11:b8:c1:5a:48:72:27:
dc:44:7d:92:9e:d9:48:23:5c:65:b7:a5:42:ba:ad:f1:21:da:
2d:51:52:a4:fc:dc:d4:ba:6e:44:87:e1:2c:21:d9:1b:ca:9a:
76:b5:68:b9:9d:1d:cf:fd:d3:d3:55:63:70:ce:c0:b5:39:67:
54:7f:b1:be:f3:ab:6f:3a:84:2b:5c:ed:68:be:36:7f:2c:2f:
eb:01:8b:1e:6f:0d:c2:db:7f:17:5e:b9:88:83:c0:7d:8d:aa:
b3:fc:6e:8b:8f:50:29:b1:f7:63:cd:bc:f2:c9:bb:9f:de:ab:
03:5b:e4:e8:14:03:a1:5e:72:76:35:14:1e:18:3d:91:db:20:
76:8e:f7:81:b3:db:ed:1c:27:d8:89:94:49:fb:50:f3:e1:75:
c5:3a:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org