Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zb_bAA_FiLnVJonB8hpx1Du0oho.roa
File: zb_bAA_FiLnVJonB8hpx1Du0oho.roa (raw, json)
Hash identifier: TmDSgl5qwAEvsUNfsQ3qcZbbR9PO3bSQubgPzU0TESQ=
Subject key identifier: CD:BF:DB:00:0F:C5:88:B9:D5:26:89:C1:F2:1A:71:D4:3B:B4:A2:1A
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 447A1A6A
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zb_bAA_FiLnVJonB8hpx1Du0oho.roa
Signing time: Sat 01 Jan 2022 03:58:26 +0000
ROA not before: Sat 01 Jan 2022 03:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21272
IP address blocks: 217.167.147.0/24 maxlen: 24
194.2.35.0/24 maxlen: 24
81.252.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148852842 (0x447a1a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 03:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdbfdb000fc588b9d52689c1f21a71d43bb4a21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:3c:05:4a:fb:7f:d2:38:ed:c0:f6:8d:61:
6c:0f:15:72:40:8c:91:52:9c:d1:4e:af:a6:cd:15:
ec:67:73:e4:29:0c:f6:4b:54:7a:54:8f:24:9b:16:
28:02:46:d4:96:d5:c3:4a:bf:14:43:da:57:f8:f5:
10:6a:c5:bf:c2:1b:ac:01:d4:ee:64:82:f3:3d:b6:
19:4f:13:aa:9a:d7:e2:17:cf:49:d1:6a:f0:aa:66:
0b:c5:aa:2e:af:f0:56:7d:e8:51:c4:2e:6e:63:42:
c1:3f:36:b7:07:35:72:e3:f5:f5:79:24:e0:d0:dd:
c0:f4:21:46:70:13:65:5f:01:a9:1d:38:d0:bb:39:
09:72:ee:40:6e:00:d5:0d:c7:7a:cb:df:c8:5d:f4:
bf:36:59:ad:6a:22:f1:a7:26:4a:d8:02:3a:93:38:
c9:e4:70:15:76:c8:88:27:79:88:cf:83:a7:80:50:
e2:0b:9c:19:7a:c7:00:cf:d8:59:8b:a1:35:42:1b:
d7:37:3d:7b:30:52:2a:c0:a9:db:42:96:b6:56:ef:
38:dc:bb:99:9b:1c:e5:01:4b:90:98:11:f8:d8:20:
4c:a6:65:4e:76:d9:3e:f2:6e:d1:33:73:c4:c7:d5:
92:8f:9f:6a:2e:67:b1:f0:f7:4e:0c:21:60:bf:78:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:DB:00:0F:C5:88:B9:D5:26:89:C1:F2:1A:71:D4:3B:B4:A2:1A
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/zb_bAA_FiLnVJonB8hpx1Du0oho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.252.173.0/24
194.2.35.0/24
217.167.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:58:a6:d3:5d:7a:e4:ee:93:68:5d:02:e5:06:32:89:9d:cd:
60:0d:40:11:d4:e1:71:d0:de:32:67:ca:b7:9a:9e:66:e9:b3:
90:b9:31:3a:fc:de:ab:3d:b8:cd:15:f8:1b:d3:47:5c:67:3a:
97:2c:ca:ff:f2:69:ad:df:4c:63:9c:1c:6c:a1:4a:47:46:c8:
a0:df:e1:a2:4e:46:f8:61:21:c3:79:73:02:3f:b1:09:03:8f:
c9:38:68:cb:d1:1f:1e:ad:ce:ad:86:ce:42:d7:9d:6c:29:69:
ea:f4:b0:54:76:79:fc:72:cb:a7:23:2a:92:c0:41:26:5e:04:
cd:40:18:67:03:8b:9c:e7:cf:d6:ff:8c:67:ff:a5:67:f9:39:
36:fa:ed:6e:a9:46:7e:10:3a:77:91:48:d0:cd:0c:22:64:d9:
c9:0a:a6:f0:1e:44:59:74:07:0d:0d:29:d9:5e:cb:4d:84:f5:
cc:54:4d:21:c6:66:a1:9a:f9:a8:70:c8:02:7c:15:d1:d4:d9:
1d:6b:fa:c0:de:27:10:19:d5:ec:6e:88:74:cf:fa:51:06:68:
2e:20:ff:3d:9b:f0:28:de:31:f4:c6:6d:8b:ab:4a:c8:f5:57:
23:2b:ff:5f:a4:e9:13:fa:a4:e8:69:f9:86:cd:4e:c7:ef:3a:
b2:1d:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org