Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/ZrxHJ7NWz1EFR_OHVOhCibOpKBU.roa
File: ZrxHJ7NWz1EFR_OHVOhCibOpKBU.roa (raw, json)
Hash identifier: lKgQAscVmNkJZ+JEiDIurUtLszWQT/lCidLrsgioBrU=
Subject key identifier: 66:BC:47:27:B3:56:CF:51:05:47:F3:87:54:E8:42:89:B3:A9:28:15
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 0D877165
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/ZrxHJ7NWz1EFR_OHVOhCibOpKBU.roa
Signing time: Sat 01 Jan 2022 07:56:25 +0000
ROA not before: Sat 01 Jan 2022 07:56:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21409
IP address blocks: 213.246.32.0/19 maxlen: 32
213.246.33.0/24 maxlen: 32
213.246.35.0/24 maxlen: 32
213.246.36.0/22 maxlen: 32
213.246.42.0/24 maxlen: 32
213.246.51.0/24 maxlen: 32
213.246.49.0/24 maxlen: 32
213.246.55.0/24 maxlen: 32
213.246.52.0/23 maxlen: 32
213.246.56.0/22 maxlen: 32
213.246.61.0/24 maxlen: 32
213.246.62.0/23 maxlen: 32
213.246.60.0/24 maxlen: 32
78.24.128.0/21 maxlen: 32
94.125.160.0/21 maxlen: 32
80.93.80.0/20 maxlen: 32
178.170.0.0/17 maxlen: 32
185.246.84.0/22 maxlen: 22
109.238.0.0/20 maxlen: 32
109.238.15.0/24 maxlen: 32
2a00:c70::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226980197 (0xd877165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Jan 1 07:56:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66bc4727b356cf510547f38754e84289b3a92815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:a5:68:a2:db:e0:2c:61:bf:de:cd:4d:40:
11:22:53:aa:9a:23:27:03:1a:a0:e2:00:5d:7c:03:
47:cd:c8:ef:bb:c4:f4:b7:e1:7c:4b:11:bb:c6:58:
27:a6:d5:2d:82:2b:1c:b9:96:4c:a8:45:1d:cb:23:
b2:17:23:7e:ba:87:2b:e4:50:16:5b:08:0d:8e:77:
62:46:93:0f:d3:a0:e7:22:eb:87:d2:3d:87:04:1d:
d0:67:2e:a7:cc:70:97:75:ed:3e:0a:91:84:04:18:
a6:ea:a8:e1:7c:8e:e9:12:02:24:b5:78:24:6c:9b:
15:30:f4:d0:c5:26:6c:1e:e2:7d:ab:76:3c:14:21:
31:94:ef:9b:fc:28:36:7b:f0:c9:6f:ac:82:ad:c0:
bf:f1:41:70:47:86:45:a0:f7:28:56:fa:34:51:4f:
56:5f:2b:42:83:4b:c7:c9:9b:14:2d:24:9e:0b:11:
ed:ce:a1:0a:7e:5e:d1:c4:f0:84:1d:7a:c8:ff:67:
ad:71:3b:24:ee:73:98:56:ec:4e:57:44:ff:f4:03:
1e:08:a3:ea:a0:fa:8f:48:53:dc:a7:f0:10:a1:bc:
5d:0a:ad:8b:e7:5d:49:13:9f:73:95:af:60:33:c0:
45:d6:5c:b5:fe:7a:19:09:09:92:39:8d:fa:1d:62:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:47:27:B3:56:CF:51:05:47:F3:87:54:E8:42:89:B3:A9:28:15
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/ZrxHJ7NWz1EFR_OHVOhCibOpKBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.128.0/21
80.93.80.0/20
94.125.160.0/21
109.238.0.0/20
178.170.0.0/17
185.246.84.0/22
213.246.32.0/19
IPv6:
2a00:c70::/32
Signature Algorithm: sha256WithRSAEncryption
99:61:2a:dd:2c:28:ec:82:5e:3b:df:d5:3c:b3:ba:4c:d8:18:
e6:4b:e0:cb:61:c7:95:fc:df:61:89:f4:3b:d6:66:05:8a:9a:
82:16:b8:ec:b6:10:e7:32:89:11:57:0e:fe:93:97:64:e9:b2:
a1:12:51:8d:6a:58:43:10:59:e3:9d:6b:7d:6c:a4:56:ba:c3:
79:c3:7c:77:80:46:bd:de:d7:07:f6:a6:7c:80:a2:06:f1:bd:
33:5e:5e:90:79:ee:9c:75:8c:aa:0d:e1:35:38:80:61:6e:4b:
3c:86:c4:1f:f4:2a:c8:cb:4c:47:23:f1:6f:45:87:76:c6:d3:
82:d6:66:d4:d8:c4:cf:31:80:5b:09:02:b5:40:ce:9c:7c:9e:
87:ea:67:b7:b8:16:8a:0e:20:ed:0c:ab:c4:51:6b:c1:3a:8e:
93:a0:c5:12:80:4d:3f:a8:db:ca:e3:7d:54:28:d4:bb:8c:a8:
e9:6c:df:a6:ca:c1:a9:b6:cd:d9:d2:83:48:cd:d2:26:84:29:
e8:31:dc:23:02:72:14:45:56:80:9c:20:ff:99:49:9a:bb:0e:
ef:35:3e:da:29:66:0c:90:1d:12:1c:cc:77:a3:b9:9b:e7:17:
55:0a:14:b0:ff:56:90:9a:86:d3:66:df:fd:4c:34:e8:1b:a6:
30:da:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:09 2023 by rpki-client on console-fra.rpki-client.org