Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/ZCBELPwD3s4pVxmzEbgcbUVzf7E.roa
File: ZCBELPwD3s4pVxmzEbgcbUVzf7E.roa (raw, json)
Hash identifier: v41/hr4n2YXbPMrDNvQ4spAq8NDsO60S5/WwcrdMFEw=
Subject key identifier: 64:20:44:2C:FC:03:DE:CE:29:57:19:B3:11:B8:1C:6D:45:73:7F:B1
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 0493DE24
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/ZCBELPwD3s4pVxmzEbgcbUVzf7E.roa
Signing time: Sat 01 Jan 2022 14:06:01 +0000
ROA not before: Sat 01 Jan 2022 14:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25627
IP address blocks: 79.170.64.0/23 maxlen: 23
79.170.64.0/22 maxlen: 22
79.170.70.0/23 maxlen: 23
79.170.68.0/22 maxlen: 22
79.170.68.0/23 maxlen: 23
79.170.66.0/23 maxlen: 23
87.237.81.0/24 maxlen: 24
87.237.82.0/24 maxlen: 24
87.237.82.0/23 maxlen: 23
87.237.80.0/23 maxlen: 23
87.237.80.0/24 maxlen: 24
87.237.84.0/22 maxlen: 22
87.237.83.0/24 maxlen: 24
87.237.84.0/24 maxlen: 24
87.237.86.0/24 maxlen: 24
87.237.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76799524 (0x493de24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Jan 1 14:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6420442cfc03dece295719b311b81c6d45737fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:c9:fc:1b:25:53:1b:81:50:1f:e3:d5:16:
6f:2d:78:4f:d4:28:40:d4:24:c5:74:23:81:94:26:
6f:d7:c6:89:de:7f:5e:19:6a:9f:a3:d9:72:33:a5:
cc:ee:9b:b8:7d:df:7c:97:20:05:62:5c:66:0d:fe:
3a:58:6c:da:bd:22:1e:f6:09:6f:77:3d:19:e7:ca:
1a:57:f7:65:b6:7a:57:c1:5c:ba:ed:a8:c8:6b:5f:
9e:2c:7e:00:46:5c:0f:7d:b4:f8:d1:e3:6a:75:e8:
5e:52:e0:17:f5:63:79:bc:7f:d5:28:b4:65:d4:1a:
54:96:ed:66:82:4d:2b:2a:0e:b4:a7:7a:dc:d8:13:
7b:a3:82:71:6f:db:57:00:25:be:bd:b5:90:10:ce:
d3:dd:db:20:46:f5:8d:6c:06:54:3f:0d:f6:29:d2:
4e:79:22:3e:db:36:18:cb:97:3f:dd:0f:2c:33:c6:
84:0c:93:c9:0a:e8:1c:80:58:36:20:f9:bd:91:a7:
71:57:7d:86:66:14:a8:2b:bc:c7:28:30:84:7f:6e:
83:60:4c:20:b8:0e:33:25:44:a1:28:5e:eb:c7:cf:
ae:44:4a:60:d4:19:97:a9:34:5d:04:5b:22:a6:82:
d7:30:d5:13:26:0c:d4:4e:a1:ce:c4:6a:fd:3d:08:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:20:44:2C:FC:03:DE:CE:29:57:19:B3:11:B8:1C:6D:45:73:7F:B1
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/ZCBELPwD3s4pVxmzEbgcbUVzf7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.64.0/21
87.237.80.0/21
Signature Algorithm: sha256WithRSAEncryption
58:b7:c8:b5:1f:a8:8e:8e:b7:be:39:ff:b8:0f:0f:be:58:40:
a0:03:e4:be:f7:c4:c7:e9:43:4f:85:0e:94:e6:81:df:51:fb:
fb:58:b8:78:4f:86:3a:ac:09:32:65:83:e1:5a:de:c4:69:27:
38:db:12:1e:4b:2b:8b:c9:e1:03:da:09:64:03:c6:a6:61:63:
a2:aa:34:0a:e2:ec:ca:b2:cb:e9:32:ed:79:be:26:6c:2f:7f:
a3:5d:c5:3f:ff:68:7d:0a:32:34:f9:08:af:01:79:bf:b5:82:
18:ab:0b:7a:6f:5d:11:d8:ee:7d:4f:09:10:4a:c2:50:3a:a9:
8b:05:e6:5c:ce:b2:5c:04:21:ce:31:96:6e:dc:c6:b7:93:66:
bf:f4:68:f3:6d:95:ab:2a:58:8d:6c:2d:a2:c9:fc:75:5c:ae:
6d:0b:48:60:b6:8c:9e:ff:1d:1f:a8:42:78:8e:88:16:21:8e:
a6:fb:df:50:66:70:b3:81:87:07:97:3b:b2:2f:25:e6:10:e1:
ba:0e:51:80:d8:86:27:26:f8:6b:83:00:ed:ff:7c:ec:53:d6:
08:81:22:35:74:0c:e6:c4:1a:2d:c6:db:de:4c:bc:35:84:92:
cc:28:a8:03:33:95:b0:0d:88:3d:b9:8a:19:e4:7e:fb:76:d5:
72:c8:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org