Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/zeb9ABpmTs3SPA9Xn49VEiyDH_M.roa
File: zeb9ABpmTs3SPA9Xn49VEiyDH_M.roa (raw, json)
Hash identifier: oI8wyjKqyiXzmoUP90Qy0eXl20svvpJZ9OR9OkOTbFM=
Subject key identifier: CD:E6:FD:00:1A:66:4E:CD:D2:3C:0F:57:9F:8F:55:12:2C:83:1F:F3
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B57200B
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/zeb9ABpmTs3SPA9Xn49VEiyDH_M.roa
Signing time: Sat 01 Jan 2022 10:02:29 +0000
ROA not before: Sat 01 Jan 2022 10:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 5588
IP address blocks: 195.70.32.0/19 maxlen: 19
217.20.128.0/20 maxlen: 20
195.56.202.0/23 maxlen: 23
195.56.203.0/24 maxlen: 24
84.2.79.0/24 maxlen: 24
217.116.32.0/20 maxlen: 20
194.149.0.0/19 maxlen: 19
195.56.0.0/16 maxlen: 16
91.120.0.0/16 maxlen: 16
194.88.32.0/19 maxlen: 19
194.88.37.0/24 maxlen: 24
2a00:10d0::/32 maxlen: 32
2a02:738::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458694667 (0x1b57200b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cde6fd001a664ecdd23c0f579f8f55122c831ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:39:b9:6a:13:91:ab:28:46:ed:44:c5:77:
38:b2:61:3c:eb:17:3e:43:3e:2f:36:8e:0a:7c:3d:
fb:10:59:af:eb:93:d8:de:a3:4e:27:11:c4:54:f4:
9a:17:73:cf:cc:9a:9a:29:42:07:89:6b:ea:78:5b:
25:c9:35:40:03:18:8b:93:6e:d6:0d:f0:f1:01:3c:
37:7b:0b:50:bf:cc:bb:f5:a7:48:c2:51:22:84:aa:
62:2a:39:29:a1:eb:57:1e:37:80:d2:25:42:87:28:
8a:06:6e:eb:66:aa:43:c0:83:b5:38:0d:29:fc:ca:
b2:f3:aa:1f:48:e8:8b:7b:78:83:71:c0:e9:6e:f8:
c5:c9:0c:4c:37:28:fc:78:3f:13:97:a0:03:9a:a4:
68:9d:33:f7:94:39:7f:1f:8e:52:ce:bf:c2:14:c7:
0c:c8:a3:3d:28:d7:a6:69:dc:38:af:9c:2f:31:5b:
20:13:6f:e6:c7:d9:1c:3a:5c:0d:c6:91:a7:77:6c:
de:0d:7c:93:1a:10:11:ef:ef:c2:be:14:7e:21:23:
9b:be:93:7e:c6:98:ea:5c:b0:15:0d:62:27:f0:53:
be:2e:ec:8e:0b:47:01:63:ea:d4:91:ad:63:76:1b:
36:b0:62:1b:30:7e:b2:a1:34:51:b1:35:f4:b9:d2:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E6:FD:00:1A:66:4E:CD:D2:3C:0F:57:9F:8F:55:12:2C:83:1F:F3
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/zeb9ABpmTs3SPA9Xn49VEiyDH_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.2.79.0/24
91.120.0.0/16
194.88.32.0/19
194.149.0.0/19
195.56.0.0/16
195.70.32.0/19
217.20.128.0/20
217.116.32.0/20
IPv6:
2a00:10d0::/32
2a02:738::/32
Signature Algorithm: sha256WithRSAEncryption
04:19:97:13:e6:6e:4e:4c:db:72:ec:a6:30:ee:1b:1b:eb:e5:
8b:45:30:e4:76:28:e7:f5:b5:ce:5f:44:e1:f1:b7:e9:53:fa:
5e:1e:f6:4b:ab:65:ac:91:9e:56:8d:a7:46:6d:47:0e:b0:96:
e7:79:f4:23:bc:41:4f:d3:87:bc:b2:31:9c:51:8c:99:ac:71:
86:dc:14:d8:fc:96:a7:86:57:94:33:4f:c2:6d:9c:8e:da:f2:
d5:27:7d:c0:cb:bb:ae:66:5a:30:2f:68:36:c5:8a:55:32:61:
b4:9b:02:2d:c0:bd:cd:05:25:9a:6c:fe:1a:e4:dc:d2:6d:fe:
e0:4d:2e:4f:9a:8f:6e:69:9d:02:9f:a8:12:50:e0:67:92:bc:
09:d5:92:56:31:3a:04:86:29:eb:a6:ee:a2:b0:30:57:51:f1:
26:29:33:83:ae:24:0e:eb:03:ce:aa:ed:3d:56:db:ba:13:cd:
1e:65:27:c5:4c:ed:04:e3:6b:72:dc:58:f5:f4:bd:5f:16:18:
24:ad:22:65:57:09:3c:89:2c:55:63:60:d2:c0:a3:e9:63:71:
8b:06:02:a2:e7:80:74:3f:6b:93:d8:d3:ac:51:4a:e8:dd:0c:
a2:26:14:37:a4:a4:3c:3a:54:5b:f4:80:4a:38:47:28:d7:67:
c3:c6:bf:7d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIEG1cgCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MDJkYWM2MDVmNDY1OTcxOGMwYTE1ZTFmNzMyY2JkNGY0OGFhZTdiMB4XDTIyMDEw
MTEwMDIyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2RlNmZkMDAxYTY2
NGVjZGQyM2MwZjU3OWY4ZjU1MTIyYzgzMWZmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIc0OblqE5GrKEbtRMV3OLJhPOsXPkM+LzaOCnw9+xBZr+uT
2N6jTicRxFT0mhdzz8yamilCB4lr6nhbJck1QAMYi5Nu1g3w8QE8N3sLUL/Mu/Wn
SMJRIoSqYio5KaHrVx43gNIlQocoigZu62aqQ8CDtTgNKfzKsvOqH0joi3t4g3HA
6W74xckMTDco/Hg/E5egA5qkaJ0z95Q5fx+OUs6/whTHDMijPSjXpmncOK+cLzFb
IBNv5sfZHDpcDcaRp3ds3g18kxoQEe/vwr4UfiEjm76TfsaY6lywFQ1iJ/BTvi7s
jgtHAWPq1JGtY3YbNrBiGzB+sqE0UbE19LnSTD8CAwEAAaOCAkcwggJDMB0GA1Ud
DgQWBBTN5v0AGmZOzdI8D1efj1USLIMf8zAfBgNVHSMEGDAWgBTwLaxgX0ZZcYwK
FeH3MsvU9IquezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhDMnNZRjlHV1hHTUNoWGg5ekxMMVBTS3Jucy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8x
L3plYjlBQnBtVHMzU1BBOVhuNDlWRWl5REhfTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
ZTkwOTc2LTNkZDEtNDcxNi1iYmY2LTI5MmFlNDZlNjMwMi8xLzhDMnNZRjlHV1hH
TUNoWGg5ekxMMVBTS3Jucy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwNAQCAAEwLgMEAFQCTwMDAFt4AwQFwlggAwQFwpUA
AwMAwzgDBAXDRiADBATZFIADBATZdCAwFAQCAAIwDgMFACoAENADBQAqAgc4MA0G
CSqGSIb3DQEBCwUAA4IBAQAEGZcT5m5OTNty7KYw7hsb6+WLRTDkdijn9bXOX0Th
8bfpU/peHvZLq2WskZ5WjadGbUcOsJbnefQjvEFP04e8sjGcUYyZrHGG3BTY/Jan
hleUM0/CbZyO2vLVJ33Ay7uuZlowL2g2xYpVMmG0mwItwL3NBSWabP4a5NzSbf7g
TS5Pmo9uaZ0Cn6gSUOBnkrwJ1ZJWMToEhinrpu6isDBXUfEmKTODriQO6wPOqu09
Vtu6E80eZSfFTO0E42ty3Fj19L1fFhgkrSJlVwk8iSxVY2DSwKPpY3GLBgKi54B0
P2uT2NOsUUro3QyiJhQ3pKQ8OlRb9IBKOEco12fDxr99
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org