Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/zysfpaW6vax-GQbymOdPhwVoRjU.roa
File: zysfpaW6vax-GQbymOdPhwVoRjU.roa (raw, json)
Hash identifier: dQTYbj4p99Ms3LG9xchzD8TI/XSSLYsUCv85a2vzc9k=
Subject key identifier: CF:2B:1F:A5:A5:BA:BD:AC:7E:19:06:F2:98:E7:4F:87:05:68:46:35
Certificate issuer: /CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Certificate serial: 0182B38DE33E4E0D376D6536D22D211BC91A
Authority key identifier: FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/zysfpaW6vax-GQbymOdPhwVoRjU.roa
Signing time: Fri 19 Aug 2022 00:43:16 +0000
ROA not before: Fri 19 Aug 2022 00:43:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48070
IP address blocks: 94.126.232.0/23 maxlen: 23
94.126.232.0/24 maxlen: 24
94.126.233.0/24 maxlen: 24
94.126.236.0/24 maxlen: 24
94.126.235.0/24 maxlen: 24
94.126.238.0/24 maxlen: 24
94.126.237.0/24 maxlen: 24
94.126.239.0/24 maxlen: 24
94.126.234.0/24 maxlen: 24
2a11:5700::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b3:8d:e3:3e:4e:0d:37:6d:65:36:d2:2d:21:1b:c9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1523694bd5fb92d768435db3bb68ed843e5d53
Validity
Not Before: Aug 19 00:43:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf2b1fa5a5babdac7e1906f298e74f8705684635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:4a:5f:0e:e8:6c:4d:91:d4:4c:5d:81:6a:
52:64:88:f3:45:ff:4f:e8:44:f1:87:51:62:b4:e6:
b4:57:d5:c2:87:de:66:09:28:d4:c6:e6:84:f2:dc:
0e:d6:d7:4c:cb:47:e0:79:bc:5f:67:7f:f4:f4:7e:
67:44:61:68:77:31:51:c6:1b:f1:db:1b:54:1f:bd:
29:31:11:81:ac:7d:5b:4d:de:98:0d:32:da:f4:a6:
ca:c1:0a:8c:4b:ec:5e:08:28:cc:41:78:0f:ad:8b:
89:ed:5e:4f:18:83:6f:a1:50:29:e8:0e:8c:99:eb:
c9:3c:6b:84:15:bc:ca:f5:13:39:4e:f9:05:98:52:
40:19:9c:2b:11:76:ba:cf:a6:09:30:15:54:29:44:
e9:c2:30:cc:9d:fd:a8:c3:86:92:7f:12:f9:fd:63:
54:ea:b4:ed:fa:ff:31:ca:c5:68:be:9c:51:df:1f:
5c:4a:42:77:c6:b3:02:f2:d4:64:9f:e1:e5:a3:da:
83:97:9d:64:a5:0f:91:97:70:a6:c7:7f:fa:b3:dc:
10:7f:67:1b:d8:df:1a:d4:a9:82:44:a9:ec:cc:20:
49:ab:37:f6:ba:a5:88:7e:ea:7a:6a:aa:77:e4:c6:
77:12:9e:88:12:e7:64:b7:fd:ac:05:fd:a3:37:98:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2B:1F:A5:A5:BA:BD:AC:7E:19:06:F2:98:E7:4F:87:05:68:46:35
X509v3 Authority Key Identifier:
keyid:FD:15:23:69:4B:D5:FB:92:D7:68:43:5D:B3:BB:68:ED:84:3E:5D:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RUjaUvV-5LXaENds7to7YQ-XVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/zysfpaW6vax-GQbymOdPhwVoRjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/02a616-e614-45a0-9c90-8ad87e0dd596/1/_RUjaUvV-5LXaENds7to7YQ-XVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.232.0/21
IPv6:
2a11:5700::/32
Signature Algorithm: sha256WithRSAEncryption
69:cc:38:da:81:3d:0d:69:e4:82:dd:7f:c6:bc:18:e1:67:b2:
65:f5:a4:ae:70:d1:95:23:87:df:6e:59:3b:ce:86:06:be:8c:
af:af:d2:07:eb:66:2f:a8:1f:f8:e5:9d:fa:68:c7:7b:8e:4c:
f5:14:6b:69:1f:b0:5d:4f:b8:91:97:1a:5d:45:5a:74:46:b3:
8d:84:54:40:84:e4:9d:d0:f2:3f:c2:f5:cf:3d:ec:29:e8:b7:
06:36:c2:a6:3c:d7:5e:0d:59:d6:f9:a7:e6:44:d1:b1:82:2e:
5d:81:45:34:14:1b:81:38:38:35:15:4c:02:c9:af:6a:22:fb:
40:ce:dc:d5:f3:bd:62:1b:15:46:37:f7:f6:5c:e8:94:27:3b:
40:12:5c:db:12:a9:38:8d:e0:4c:cd:17:d6:0a:f4:e2:36:7b:
11:ce:a2:58:d3:a7:e6:41:d3:c6:62:b5:b8:7d:6d:08:34:58:
e6:da:5b:81:d8:b0:67:94:6a:05:f6:e0:35:72:bd:ca:b3:49:
11:e8:3a:07:8b:6a:f1:54:98:2c:33:9b:f0:6c:06:b8:c8:13:
2b:86:5f:26:b5:be:40:0f:c1:10:91:7c:8e:8d:59:a8:9e:01:
e1:ab:91:e9:8b:fa:56:ed:c5:bd:2c:d1:27:f4:61:e4:b1:2a:
d4:64:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:46 2023 by rpki-client on console-fra.rpki-client.org