Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/ZFeXGfOeSuP0IJ0AonKvLc0NSB4.roa
File: ZFeXGfOeSuP0IJ0AonKvLc0NSB4.roa (raw, json)
Hash identifier: kIbHLjhNp4BAvcNEPku6K9++tV23U9uwhAf+aT5xExM=
Subject key identifier: 64:57:97:19:F3:9E:4A:E3:F4:20:9D:00:A2:72:AF:2D:CD:0D:48:1E
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 05DA1509
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/ZFeXGfOeSuP0IJ0AonKvLc0NSB4.roa
Signing time: Sat 01 Jan 2022 11:02:32 +0000
ROA not before: Sat 01 Jan 2022 11:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 217.147.124.0/22 maxlen: 22
217.147.124.0/24 maxlen: 24
217.147.125.0/24 maxlen: 24
217.147.121.0/24 maxlen: 24
217.147.127.0/24 maxlen: 24
217.147.126.0/24 maxlen: 24
92.249.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98178313 (0x5da1509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 11:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64579719f39e4ae3f4209d00a272af2dcd0d481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:79:52:aa:f3:e8:99:ad:de:1d:c5:c8:aa:
ae:57:b9:d3:bb:41:13:a4:4c:0e:6b:23:ca:17:54:
35:29:de:b0:a1:63:ec:57:ec:14:cc:b4:49:6b:9e:
63:53:c0:d0:30:52:19:77:fa:c0:b1:7b:a3:bb:8e:
10:48:b4:0f:a1:65:9b:e9:3b:32:64:f7:dc:28:6e:
e0:79:93:f7:d3:d5:0e:bd:d6:c1:f5:a9:75:2d:cf:
b3:ca:05:a9:1d:19:70:14:79:71:85:46:e4:74:93:
eb:b9:62:17:ea:39:76:4e:b9:41:58:ff:3f:61:5f:
96:2a:2e:5d:a6:9f:6e:80:e1:92:32:2b:54:b4:9f:
e2:8e:f6:43:ad:24:94:84:ab:e8:cf:de:59:8e:5b:
84:97:60:52:4f:32:b0:e5:08:02:71:64:7a:37:fc:
cf:a7:e2:d6:b9:a6:90:d3:f7:55:12:a6:ea:2e:01:
b3:0f:81:e7:f9:94:e3:28:8c:7d:2c:26:24:66:74:
cf:de:91:50:42:61:39:26:5a:7f:db:59:b0:63:1a:
00:32:6e:62:1e:f8:fc:8e:39:c7:76:cf:d5:33:b1:
a8:e4:b6:70:6a:07:71:00:94:7b:c5:d0:ab:91:81:
62:23:a9:5e:64:3b:3e:2f:bc:22:1d:ce:fd:f8:28:
a6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:97:19:F3:9E:4A:E3:F4:20:9D:00:A2:72:AF:2D:CD:0D:48:1E
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/ZFeXGfOeSuP0IJ0AonKvLc0NSB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.5.0/24
217.147.121.0/24
217.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
42:20:d0:81:52:18:ce:97:e2:8c:b5:9f:2d:ce:4c:db:0e:2e:
26:8a:4b:5a:f0:27:3d:70:43:2d:7e:d4:2d:34:7d:03:40:06:
0c:c0:df:e6:6e:e4:87:7c:e6:f8:c7:96:94:7d:c0:0a:9f:3e:
87:4b:9f:f1:61:6f:15:47:fe:15:3b:bf:41:3f:7c:aa:67:12:
ef:4b:bc:82:35:89:6e:3c:19:ed:64:92:a1:99:d6:a7:56:a8:
cd:ab:5a:80:d0:ca:72:6f:d9:58:9b:ba:59:6c:dd:e6:e5:d6:
be:01:27:91:da:4c:63:6d:75:88:0c:98:96:9a:80:c9:c1:5c:
2f:e6:03:83:63:a5:4c:f1:6b:54:ef:6d:39:15:d8:92:bc:da:
2f:09:86:7e:07:fc:e7:3c:c3:db:8f:d4:e7:df:09:6d:ca:3c:
9d:89:4f:77:26:2f:1b:e5:05:ce:bf:66:54:d7:0b:fd:13:db:
32:ae:63:27:a3:f1:0c:6f:8e:2a:b4:b5:84:83:8e:e0:66:b5:
4f:b9:a6:ca:e5:71:c5:45:9d:d8:e8:6f:55:96:55:3e:02:4b:
ca:e6:8e:6c:0c:8f:fd:22:4f:5f:b0:65:2f:d5:42:45:a4:fc:
8d:9d:b8:73:ea:b5:a3:2b:87:c0:98:e1:ff:4e:22:a7:ca:b5:
cf:74:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:53 2024 by rpki-client on console-fra.rpki-client.org