Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/Z1nd_KAZtYzKJhB6p_MXMUFoQPw.roa
File: Z1nd_KAZtYzKJhB6p_MXMUFoQPw.roa (raw, json)
Hash identifier: yOLw8tYM0yf4zH7sMudMP5ZRg5EAzT3VmacJ8hT+xVI=
Subject key identifier: 67:59:DD:FC:A0:19:B5:8C:CA:26:10:7A:A7:F3:17:31:41:68:40:FC
Certificate issuer: /CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Certificate serial: 361EA152
Authority key identifier: 39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/Z1nd_KAZtYzKJhB6p_MXMUFoQPw.roa
Signing time: Sat 01 Jan 2022 13:55:22 +0000
ROA not before: Sat 01 Jan 2022 13:55:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50880
IP address blocks: 185.69.211.0/24 maxlen: 24
185.69.210.0/24 maxlen: 24
185.69.209.0/24 maxlen: 24
185.69.208.0/24 maxlen: 24
78.110.3.0/24 maxlen: 24
78.110.2.0/24 maxlen: 24
78.110.0.0/20 maxlen: 20
78.110.1.0/24 maxlen: 24
78.110.0.0/24 maxlen: 24
78.110.4.0/24 maxlen: 24
78.110.10.0/24 maxlen: 24
78.110.9.0/24 maxlen: 24
78.110.8.0/24 maxlen: 24
78.110.7.0/24 maxlen: 24
78.110.6.0/24 maxlen: 24
78.110.5.0/24 maxlen: 24
78.110.11.0/24 maxlen: 24
78.110.15.0/24 maxlen: 24
78.110.14.0/24 maxlen: 24
78.110.13.0/24 maxlen: 24
78.110.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907977042 (0x361ea152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=393cc8b7d2dc70a27d40fa459e4e56c005ccc63a
Validity
Not Before: Jan 1 13:55:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6759ddfca019b58cca26107aa7f31731416840fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:f2:ef:d0:e2:a1:eb:30:85:4c:4b:1c:e9:
65:29:bc:ec:7d:bd:5d:3d:4d:96:06:2d:43:d1:90:
49:5e:38:74:f3:b3:29:b4:6c:55:3d:fd:51:f5:ae:
74:55:a5:93:d0:46:c4:f3:10:96:cb:9b:88:7c:d7:
d3:68:b0:90:31:e8:44:ab:9d:98:8a:f1:1d:41:3a:
52:92:73:19:3e:82:d9:20:b0:1a:4a:70:eb:ef:84:
d6:3a:2e:f3:95:eb:6e:00:95:e1:7f:da:f5:26:e5:
84:3a:05:e8:8b:2f:d2:dc:65:cb:5a:59:05:16:b2:
5c:ad:9e:e1:03:f8:09:a4:6a:8d:a3:c4:23:0b:fa:
81:ce:21:66:9b:be:70:9f:b0:e6:97:90:ca:4c:fa:
46:7d:32:41:a8:3e:3d:77:96:5f:a7:d8:5c:da:3f:
24:b9:b8:08:49:c8:e3:7f:26:ce:d6:c1:e0:af:f7:
9a:7b:99:7f:fe:90:a7:ad:ab:86:9a:17:28:3d:5f:
4e:98:51:5c:ca:2c:bd:a9:95:23:b1:4b:cb:08:b6:
77:cd:11:93:21:3d:eb:bf:4e:66:0b:a9:3b:77:23:
9f:c6:fe:fa:83:3a:46:ce:c2:9e:00:3e:55:90:dd:
75:45:7b:60:38:c3:15:8b:7b:5e:6c:a4:46:5c:a3:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:59:DD:FC:A0:19:B5:8C:CA:26:10:7A:A7:F3:17:31:41:68:40:FC
X509v3 Authority Key Identifier:
keyid:39:3C:C8:B7:D2:DC:70:A2:7D:40:FA:45:9E:4E:56:C0:05:CC:C6:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTzIt9LccKJ9QPpFnk5WwAXMxjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/Z1nd_KAZtYzKJhB6p_MXMUFoQPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/137002-e75f-4201-9988-991a1c714f95/1/OTzIt9LccKJ9QPpFnk5WwAXMxjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.0.0/20
185.69.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:05:e8:5b:10:44:bb:6f:f0:80:3a:1c:c5:4b:f4:ae:14:ad:
06:42:23:8a:89:a4:41:d1:b2:9b:b3:4d:79:45:f0:a8:d2:55:
d4:32:3a:3e:d6:d2:82:dc:e7:c4:f7:a6:89:c7:5e:a4:99:11:
32:6b:5d:e4:67:17:48:98:94:4d:4d:c2:e5:1f:8c:71:76:3a:
a3:79:fe:2c:78:be:48:7e:f5:fe:a2:56:4c:fe:1f:64:b5:12:
0a:b4:65:94:f3:34:e0:4d:fa:90:dd:ae:24:d8:ef:b8:3a:cf:
63:02:ad:00:e0:57:ac:f5:01:cf:5e:f1:14:af:06:e8:89:e1:
e0:49:69:63:bf:6b:8b:e1:21:b0:df:69:3d:6d:79:c5:3d:96:
24:5a:5f:ec:0e:63:7e:e7:21:1a:58:d3:0e:d1:68:29:a9:15:
4c:e5:ef:fe:bb:19:cc:61:37:bf:8f:c6:d5:92:89:62:58:1c:
29:e4:d9:fb:e0:22:6f:e5:50:17:b9:d8:4b:05:c0:61:ac:60:
d6:27:b1:99:d2:14:e9:b0:80:8b:68:d7:72:4c:28:4b:a2:11:
ba:ca:74:55:9c:a4:08:73:e8:67:1e:1e:fd:a5:fb:c5:02:16:
c0:f8:c1:4e:37:2b:26:7b:76:65:19:ba:99:5b:43:81:10:93:
03:6c:0a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:04 2024 by rpki-client on console-fra.rpki-client.org