Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/sz-EDhsqXuPtamn99XAQDxoFyzY.roa
File: sz-EDhsqXuPtamn99XAQDxoFyzY.roa (raw, json)
Hash identifier: 7XNzP65m+LnqWoJjCoK9grP77Mv8TwAFMj03wuOwlGE=
Subject key identifier: B3:3F:84:0E:1B:2A:5E:E3:ED:6A:69:FD:F5:70:10:0F:1A:05:CB:36
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0182CFBD293BDEB5DD1761337F7A06563A93
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/sz-EDhsqXuPtamn99XAQDxoFyzY.roa
Signing time: Wed 24 Aug 2022 12:04:16 +0000
ROA not before: Wed 24 Aug 2022 12:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197343
IP address blocks: 5.56.130.0/23 maxlen: 23
5.56.128.0/22 maxlen: 22
5.56.128.0/23 maxlen: 23
5.57.34.0/24 maxlen: 24
5.57.33.0/24 maxlen: 24
5.57.32.0/21 maxlen: 24
5.57.37.0/24 maxlen: 24
5.57.36.0/24 maxlen: 24
5.57.35.0/24 maxlen: 24
5.57.38.0/24 maxlen: 24
5.57.39.0/24 maxlen: 24
185.212.48.0/24 maxlen: 24
185.212.48.0/22 maxlen: 22
185.212.49.0/24 maxlen: 24
185.215.230.0/24 maxlen: 24
185.124.172.0/22 maxlen: 22
37.32.44.0/22 maxlen: 22
37.32.44.0/24 maxlen: 24
37.32.42.0/24 maxlen: 24
37.32.41.0/24 maxlen: 24
37.32.40.0/22 maxlen: 24
37.32.45.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
178.239.149.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
178.239.156.0/23 maxlen: 23
178.239.156.0/22 maxlen: 22
178.239.155.0/24 maxlen: 24
178.239.154.0/23 maxlen: 23
178.239.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cf:bd:29:3b:de:b5:dd:17:61:33:7f:7a:06:56:3a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Aug 24 12:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b33f840e1b2a5ee3ed6a69fdf570100f1a05cb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:16:90:30:bd:9e:50:66:6b:0f:d4:9d:6a:
b1:58:5a:a4:74:24:89:64:af:c1:10:73:a9:5d:91:
37:82:c8:c7:d0:6b:22:1c:f3:b4:02:1e:e0:2b:7e:
cf:53:2a:60:51:f2:bc:aa:b0:a1:68:d4:32:a0:90:
d3:c5:bb:b1:f0:9c:93:79:49:6c:fc:58:10:92:aa:
6a:b1:91:02:ac:08:3b:3e:6d:23:7c:e3:d3:4d:2e:
8a:36:95:dc:76:3a:65:07:f2:aa:69:c5:26:06:5f:
31:60:b3:8a:07:74:88:02:b4:af:2e:34:bf:7e:5b:
f5:a9:64:4b:73:e3:33:fc:2a:4e:7e:5f:81:7f:c0:
33:c9:02:c8:3b:63:2a:a5:95:5c:4e:9d:75:74:c0:
24:a9:ed:bf:c9:4d:b9:b3:c1:5b:d9:47:bb:58:19:
9a:74:08:15:87:12:94:96:43:bb:80:4d:3e:b0:63:
a1:3d:94:12:a0:09:f3:d9:b3:b9:bb:3c:c7:3a:b7:
94:5d:54:e9:bb:8f:c5:8f:0c:02:67:99:6c:8e:26:
dd:bc:ac:80:ac:e3:a1:45:2e:75:0f:f7:ac:47:0f:
6a:0f:88:44:41:0c:70:96:c5:21:7f:c7:78:70:00:
ea:38:2d:a5:11:03:6c:8e:e3:12:a7:89:dd:66:99:
56:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3F:84:0E:1B:2A:5E:E3:ED:6A:69:FD:F5:70:10:0F:1A:05:CB:36
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/sz-EDhsqXuPtamn99XAQDxoFyzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.128.0/22
5.57.32.0/21
37.32.40.0/21
178.239.149.0-178.239.150.255
178.239.154.0-178.239.159.255
185.124.172.0/22
185.212.48.0/22
185.215.230.0/24
Signature Algorithm: sha256WithRSAEncryption
27:05:13:8c:16:42:54:76:19:65:d1:3d:9c:ea:d2:8c:d1:70:
b2:9b:83:52:5f:10:fe:1f:64:d9:12:2f:34:bb:c6:03:c5:ba:
73:83:18:12:62:8f:b1:3d:b1:11:4d:62:44:a8:3c:58:30:83:
6e:17:d8:2a:25:a3:59:03:08:86:1d:0e:b6:d0:52:c8:95:6b:
7f:3a:45:ca:a1:f5:2f:f4:b3:a3:bd:72:79:ed:c0:88:95:11:
da:b2:24:c9:4c:2a:41:6a:02:f5:e4:8f:0b:ad:87:fb:77:68:
ab:4c:88:c8:56:37:7f:c8:ba:59:87:7a:63:31:66:c1:48:f4:
a0:20:b6:2c:22:8b:55:5c:92:a7:e6:30:86:7b:29:39:ff:1b:
63:8f:3f:8f:70:d7:54:87:a7:82:01:6d:85:1d:c0:ea:b8:04:
6a:93:09:35:24:dc:7b:35:f6:9a:1e:d2:08:8f:60:4a:c5:f3:
66:1c:40:21:9e:7e:4e:ed:1f:3f:58:72:42:16:14:ec:74:a7:
aa:ad:60:a0:d0:a7:e4:43:12:02:f9:a3:1e:07:8e:30:12:d6:
9a:c5:8c:cd:ad:13:39:8f:9f:b4:ff:14:71:d0:ee:2f:55:b7:
77:da:f8:dc:ef:f5:56:1a:79:94:32:53:e2:0d:06:ee:90:28:
7c:87:dc:0b
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYLPvSk73rXdF2Ezf3oGVjqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjIwODI0MTIwNDE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzNmODQwZTFiMmE1ZWUzZWQ2YTY5ZmRmNTcwMTAwZjFhMDVjYjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3EWkDC9nlBmaw/UnWqxWFqkdCSJ
ZK/BEHOpXZE3gsjH0GsiHPO0Ah7gK37PUypgUfK8qrChaNQyoJDTxbux8JyTeUls
/FgQkqpqsZECrAg7Pm0jfOPTTS6KNpXcdjplB/KqacUmBl8xYLOKB3SIArSvLjS/
flv1qWRLc+Mz/CpOfl+Bf8AzyQLIO2MqpZVcTp11dMAkqe2/yU25s8Fb2Ue7WBma
dAgVhxKUlkO7gE0+sGOhPZQSoAnz2bO5uzzHOreUXVTpu4/FjwwCZ5lsjibdvKyA
rOOhRS51D/esRw9qD4hEQQxwlsUhf8d4cADqOC2lEQNsjuMSp4ndZplWIwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFLM/hA4bKl7j7Wpp/fVwEA8aBcs2MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvc3otRURoc3FYdVB0YW1uOTlYQVFEeG9GeXpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQCBTiAAwQD
BTkgAwQDJSAoMAwDBACy75UDBACy75YwDAMEAbLvmgMEBbLvgAMEArl8rAMEArnU
MAMEALnX5jANBgkqhkiG9w0BAQsFAAOCAQEAJwUTjBZCVHYZZdE9nOrSjNFwspuD
Ul8Q/h9k2RIvNLvGA8W6c4MYEmKPsT2xEU1iRKg8WDCDbhfYKiWjWQMIhh0OttBS
yJVrfzpFyqH1L/Szo71yee3AiJUR2rIkyUwqQWoC9eSPC62H+3doq0yIyFY3f8i6
WYd6YzFmwUj0oCC2LCKLVVySp+YwhnspOf8bY48/j3DXVIenggFthR3A6rgEapMJ
NSTcezX2mh7SCI9gSsXzZhxAIZ5+Tu0fP1hyQhYU7HSnqq1goNCn5EMSAvmjHgeO
MBLWmsWMza0TOY+ftP8UcdDuL1W3d9r43O/1Vhp5lDJT4g0G7pAofIfcCw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org