Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/kzCCXyzVaIef7d6N4waIFLvD3Tg.roa
File: kzCCXyzVaIef7d6N4waIFLvD3Tg.roa (raw, json)
Hash identifier: bM9oYWwTpV6b/8HGxomDPTxNKAeJbWcqsQfmfkPNI60=
Subject key identifier: 93:30:82:5F:2C:D5:68:87:9F:ED:DE:8D:E3:06:88:14:BB:C3:DD:38
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B732566
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/kzCCXyzVaIef7d6N4waIFLvD3Tg.roa
Signing time: Sat 01 Jan 2022 10:02:46 +0000
ROA not before: Sat 01 Jan 2022 10:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203583
IP address blocks: 195.228.29.0/24 maxlen: 24
84.1.158.0/24 maxlen: 24
195.228.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460531046 (0x1b732566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9330825f2cd568879fedde8de3068814bbc3dd38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:f5:20:42:25:1f:a7:b6:49:1a:d8:51:e1:
f2:46:82:de:cf:48:59:d4:47:d4:ad:89:80:98:2f:
12:ad:91:1c:65:d8:81:7c:14:27:6e:dd:2c:0d:6d:
cb:11:b5:94:fc:ed:d9:b1:86:3b:4b:0f:14:33:d1:
5f:10:77:65:a3:1c:de:a1:9f:8f:fe:fc:60:00:ba:
65:d2:b2:a4:2c:36:29:e2:ba:6b:e3:24:02:ba:b6:
9f:6d:f8:69:8a:63:c2:54:ac:f6:bb:fa:2b:2e:21:
63:20:24:47:96:68:91:1f:7a:8a:02:f8:33:1c:0a:
f1:d2:1c:21:28:a5:f5:5d:da:a6:72:17:f4:79:33:
bc:d8:35:6f:ab:19:41:6e:1a:2c:21:6c:d2:09:a5:
59:9c:84:7d:41:7e:bf:2a:ab:5b:68:f3:0f:de:ff:
22:47:25:7c:01:5a:19:e8:f8:29:9f:c7:09:cd:e0:
2c:46:5a:92:45:cf:ae:32:0b:ee:3c:42:68:a1:53:
82:a9:78:36:6b:e9:50:ec:7e:e6:fb:0e:e2:bc:19:
f3:fc:49:63:fa:3c:b6:bc:6a:65:0e:a8:6b:c9:ce:
2e:5c:a1:30:a9:7f:15:61:ce:91:25:8a:93:cc:0e:
9b:0c:df:3e:89:0d:08:39:d4:ff:6f:4a:82:b4:2c:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:82:5F:2C:D5:68:87:9F:ED:DE:8D:E3:06:88:14:BB:C3:DD:38
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/kzCCXyzVaIef7d6N4waIFLvD3Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.158.0/24
195.228.29.0/24
195.228.180.0/24
Signature Algorithm: sha256WithRSAEncryption
75:d6:ce:bd:f5:c1:61:06:d7:e1:27:8a:f4:51:bf:90:e0:46:
05:c8:0d:68:65:34:b7:7a:cd:49:7b:a4:ce:40:47:09:6a:46:
bd:f2:b5:c6:48:38:47:b4:1d:6f:96:34:ab:d1:f6:21:84:0e:
0c:ae:07:8e:da:20:95:a6:2d:0e:a6:4e:67:54:e2:db:84:de:
2e:6e:66:84:59:79:04:e4:94:66:5f:f2:71:67:b0:19:20:61:
46:e1:11:9b:5a:88:a4:0c:b0:f8:90:ec:ac:20:b5:67:42:7b:
38:b5:48:b1:bf:c7:c2:45:8d:10:1f:f2:24:91:3e:55:51:95:
d2:e6:1e:b9:e2:3b:33:bd:1b:8e:6e:51:a2:f8:47:2e:6f:d5:
6d:12:9b:d6:df:0d:e0:02:2c:6a:25:dd:a6:23:41:80:34:b7:
19:77:e9:ea:c2:ce:0f:89:ef:d2:f7:6f:51:38:3c:dd:8e:ab:
39:e6:69:66:b3:ce:bc:8a:95:3d:b9:1a:bd:51:dc:42:52:cf:
f5:11:94:c7:81:8a:c8:4a:b4:c4:59:7a:66:86:98:13:ac:03:
5e:55:f0:de:34:cd:13:21:ad:3b:94:be:00:56:98:ef:60:8d:
0e:26:27:1d:9d:98:3a:5f:2e:c1:7f:6d:34:85:34:5d:48:fb:
3b:99:90:6d
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEG3MlZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDJkYWM2MDVmNDY1OTcxOGMwYTE1ZTFmNzMyY2JkNGY0OGFhZTdiMB4XDTIyMDEw
MTEwMDI0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTMzMDgyNWYyY2Q1
Njg4NzlmZWRkZThkZTMwNjg4MTRiYmMzZGQzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKpt9SBCJR+ntkka2FHh8kaC3s9IWdRH1K2JgJgvEq2RHGXY
gXwUJ27dLA1tyxG1lPzt2bGGO0sPFDPRXxB3ZaMc3qGfj/78YAC6ZdKypCw2KeK6
a+MkArq2n234aYpjwlSs9rv6Ky4hYyAkR5ZokR96igL4MxwK8dIcISil9V3apnIX
9HkzvNg1b6sZQW4aLCFs0gmlWZyEfUF+vyqrW2jzD97/IkclfAFaGej4KZ/HCc3g
LEZakkXPrjIL7jxCaKFTgql4NmvpUOx+5vsO4rwZ8/xJY/o8trxqZQ6oa8nOLlyh
MKl/FWHOkSWKk8wOmwzfPokNCDnU/29KgrQs0XUCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBSTMIJfLNVoh5/t3o3jBogUu8PdODAfBgNVHSMEGDAWgBTwLaxgX0ZZcYwK
FeH3MsvU9IquezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhDMnNZRjlHV1hHTUNoWGg5ekxMMVBTS3Jucy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8x
L2t6Q0NYeXpWYUllZjdkNk40d2FJRkx2RDNUZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
ZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8xLzhDMnNZRjlHV1hH
TUNoWGg5ekxMMVBTS3Jucy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFQBngMEAMPkHQMEAMPktDANBgkq
hkiG9w0BAQsFAAOCAQEAddbOvfXBYQbX4SeK9FG/kOBGBcgNaGU0t3rNSXukzkBH
CWpGvfK1xkg4R7Qdb5Y0q9H2IYQODK4HjtoglaYtDqZOZ1Ti24TeLm5mhFl5BOSU
Zl/ycWewGSBhRuERm1qIpAyw+JDsrCC1Z0J7OLVIsb/HwkWNEB/yJJE+VVGV0uYe
ueI7M70bjm5RovhHLm/VbRKb1t8N4AIsaiXdpiNBgDS3GXfp6sLOD4nv0vdvUTg8
3Y6rOeZpZrPOvIqVPbkavVHcQlLP9RGUx4GKyEq0xFl6ZoaYE6wDXlXw3jTNEyGt
O5S+AFaY72CNDiYnHZ2YOl8uwX9tNIU0XUj7O5mQbQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org