Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/Zqr1_7AkjV0O747UbpJ_lHyK8eU.roa
File: Zqr1_7AkjV0O747UbpJ_lHyK8eU.roa (raw, json)
Hash identifier: Q9wvw6CAi9JPNDQNHAdIaHUCaCV/ZThTZEgaW8aFGXw=
Subject key identifier: 66:AA:F5:FF:B0:24:8D:5D:0E:EF:8E:D4:6E:92:7F:94:7C:8A:F1:E5
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 01CD66
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/Zqr1_7AkjV0O747UbpJ_lHyK8eU.roa
Signing time: Thu 31 Mar 2022 12:37:24 +0000
ROA not before: Thu 31 Mar 2022 12:37:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42714
IP address blocks: 195.211.184.0/22 maxlen: 22
31.170.128.0/20 maxlen: 20
31.170.128.0/19 maxlen: 19
31.170.144.0/21 maxlen: 21
31.170.152.0/21 maxlen: 21
193.200.38.0/24 maxlen: 24
193.200.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118118 (0x1cd66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Mar 31 12:37:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66aaf5ffb0248d5d0eef8ed46e927f947c8af1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:2c:7e:2a:64:39:5b:2f:f5:3f:a1:5e:8d:
a0:61:03:2e:65:93:88:82:a3:91:29:ad:8c:b9:d1:
68:97:6f:41:7c:3e:b4:0a:44:74:7a:96:a9:0a:8d:
2c:cb:f0:85:cc:55:57:5f:0f:3d:bc:bf:1b:62:c9:
5c:62:d0:e6:1c:4f:08:56:ad:66:b2:df:ac:ce:94:
4b:d6:aa:6d:74:07:95:9a:ea:cc:ea:3c:8b:65:ff:
4c:9c:5f:c9:dc:ba:08:a2:3a:0a:73:39:d5:64:00:
98:c7:75:e6:1d:bd:0b:0a:7b:cf:f6:de:82:b3:75:
ee:21:d3:79:ee:dd:61:2b:2f:2e:d9:c7:d5:dd:77:
6d:2c:af:90:db:18:5c:67:5a:0b:af:26:b7:2b:f2:
df:89:8a:27:e1:06:ce:99:00:5e:ee:46:85:02:38:
bf:37:46:0c:29:35:11:3a:0d:35:c9:40:af:26:e7:
e9:25:9b:34:08:4f:5e:d9:30:75:76:0a:7c:d8:7d:
6a:ac:71:35:ac:5c:b7:b5:f5:be:e3:23:da:d8:d1:
f2:7f:fa:e1:dc:3e:63:f7:0d:6d:dc:1a:41:38:f2:
98:ac:14:8e:10:20:06:16:de:00:ee:79:69:c2:b8:
36:1d:d3:74:7d:08:5a:7d:f0:58:86:35:22:b2:4c:
1f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AA:F5:FF:B0:24:8D:5D:0E:EF:8E:D4:6E:92:7F:94:7C:8A:F1:E5
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/Zqr1_7AkjV0O747UbpJ_lHyK8eU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.128.0/19
193.200.38.0/23
195.211.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:a5:e8:a2:b2:2b:e5:6b:ab:a9:a5:8f:c8:b9:aa:80:e1:c3:
44:35:4d:c2:ea:8d:b6:62:b7:35:cd:d0:d0:04:0f:08:fc:15:
5b:ea:92:df:c8:77:ad:d2:15:30:c3:d6:29:18:84:42:27:ef:
a7:60:20:f3:cc:c8:95:b0:41:58:f5:ee:d9:ee:51:c7:88:11:
a4:f6:fa:f3:7a:2a:1a:98:0c:65:af:34:7e:7c:ac:69:77:51:
03:5e:65:5d:0d:d4:a6:c1:5f:60:66:5d:cc:0a:76:d7:89:15:
b3:7f:85:f4:e1:93:68:f4:f2:f3:48:5d:71:f8:67:11:f2:23:
49:6a:48:f3:a1:97:27:07:95:8d:4f:ba:40:a0:c9:a8:9e:df:
01:b3:e8:aa:d4:4d:20:08:be:80:83:87:ec:62:d1:f3:d9:7c:
3d:e3:76:eb:b5:fd:2e:a0:09:f2:f3:42:b4:63:44:22:7d:4e:
e4:2c:c7:0b:35:af:84:fe:7f:c2:3f:75:8d:53:7a:4c:2d:b5:
54:13:11:e5:9a:bf:d3:96:37:a7:a7:11:ae:a6:32:87:66:79:
8b:a7:dc:4d:88:5a:98:a7:0d:d5:d2:7a:45:c1:32:a3:cf:1e:
76:6e:b0:61:5e:96:04:82:c0:e1:e0:ce:8b:c2:68:56:1e:be:
92:21:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:58 2024 by rpki-client on console-ams.rpki-client.org