Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/zLNYiKayhvriAmWY9o6R8ROD4vU.roa
File: zLNYiKayhvriAmWY9o6R8ROD4vU.roa (raw, json)
Hash identifier: 73H+cF9XzCB+gp378Bq/EohQqi8kxZftlLEAPAjYdbA=
Subject key identifier: CC:B3:58:88:A6:B2:86:FA:E2:02:65:98:F6:8E:91:F1:13:83:E2:F5
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 1FAF07CE
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/zLNYiKayhvriAmWY9o6R8ROD4vU.roa
Signing time: Sat 01 Jan 2022 06:58:42 +0000
ROA not before: Sat 01 Jan 2022 06:58:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199791
IP address blocks: 147.111.0.0/18 maxlen: 18
147.111.0.0/16 maxlen: 16
81.175.16.0/22 maxlen: 22
147.111.128.0/18 maxlen: 18
185.45.36.0/22 maxlen: 22
147.111.64.0/18 maxlen: 18
147.111.192.0/18 maxlen: 18
2a01:79e0::/32 maxlen: 32
2a01:79e0:c000::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531564494 (0x1faf07ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jan 1 06:58:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccb35888a6b286fae2026598f68e91f11383e2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:9d:d9:b9:04:84:0a:c4:86:d2:2c:cf:1b:
49:3d:6a:0c:e9:75:7b:e6:19:ed:f6:40:a1:3d:08:
a8:cc:43:5c:4a:2e:2a:b6:2f:5d:fc:3c:61:ef:b4:
d9:a8:ce:3d:3c:1b:a6:19:8d:de:f0:37:7f:45:31:
a1:fd:73:25:c4:91:88:7f:91:27:f0:81:64:ae:ea:
2c:f4:1c:f8:78:0d:59:8f:30:04:fb:e0:73:5c:4e:
66:7b:99:44:5d:39:83:f7:1c:23:bc:23:8f:10:71:
35:2c:6b:bc:18:b5:3f:73:92:f9:9b:89:a8:f4:01:
33:1e:fa:9e:1f:b6:6d:85:a0:db:84:27:16:0a:2f:
80:8d:f8:57:04:2b:40:6b:3c:2c:ba:c6:1c:a2:d0:
1b:e5:7d:7a:93:21:09:16:37:6e:a4:2a:c7:94:24:
64:56:05:cb:de:04:ff:ab:3c:78:52:7b:98:02:21:
3e:fe:6e:4d:00:f9:3a:71:48:26:a5:35:72:c9:27:
ef:8e:ec:21:eb:9b:ff:3d:73:e2:c6:fb:9e:aa:88:
7d:b2:6b:ac:90:61:96:40:0e:ff:d4:1b:e9:30:07:
b7:2d:7a:58:cb:a4:eb:81:8f:8a:a6:a9:d4:85:64:
17:c2:04:aa:e7:f0:57:ff:79:b3:44:99:4f:f3:1f:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B3:58:88:A6:B2:86:FA:E2:02:65:98:F6:8E:91:F1:13:83:E2:F5
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/zLNYiKayhvriAmWY9o6R8ROD4vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.175.16.0/22
147.111.0.0/16
185.45.36.0/22
IPv6:
2a01:79e0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:16:90:19:83:5c:b5:42:58:b8:9a:1b:1d:d3:2a:6d:76:f2:
00:33:e1:c0:f2:76:87:bd:e8:c2:41:3c:0e:24:95:01:2b:b4:
4b:65:09:f6:c5:8a:13:df:be:06:b3:d1:b6:4b:c6:06:0b:5c:
1b:25:58:00:0e:b3:2c:5b:d9:1f:ea:35:da:65:13:28:5c:db:
8e:c7:55:5e:70:8f:61:ac:c4:9e:69:7e:f4:42:2d:1e:c6:88:
13:9c:d9:75:94:ca:bb:0d:71:d5:b0:38:78:3b:34:6b:5a:d4:
63:2e:f9:d5:c4:13:11:2e:f4:e6:42:86:95:db:32:bf:75:65:
66:33:74:dd:0b:1c:d6:d0:dd:8e:06:88:e2:8e:1b:67:90:62:
16:20:dc:61:df:f9:be:bf:c8:e0:cd:7e:21:37:e9:0b:8a:78:
1b:c4:dc:69:43:a9:56:6a:71:87:ce:ed:a7:82:68:7f:3d:8d:
11:1e:87:4f:93:0d:d1:0a:4e:68:65:8e:8b:7e:7c:9d:c1:f6:
0a:c5:4d:84:30:0a:96:61:d8:35:a3:6b:cc:ff:02:11:db:d7:
c0:0b:6a:1d:73:e6:bb:66:45:3d:c5:0f:5a:e7:dd:6f:0c:4b:
b4:9e:45:e5:ba:e3:11:e5:c1:4c:3f:c5:90:d8:fa:bc:11:cc:
84:6d:c9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:22 2023 by rpki-client on console-fra.rpki-client.org