Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZNFH0b3VRe3DJJgIReIfFxINOR0.roa
File: ZNFH0b3VRe3DJJgIReIfFxINOR0.roa (raw, json)
Hash identifier: 33KgyYnV+GpBIcGYu47Yot4MdxlcXaOrAtliP2Zizh0=
Subject key identifier: 64:D1:47:D1:BD:D5:45:ED:C3:24:98:08:45:E2:1F:17:12:0D:39:1D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01845B4253BCFD4DB764470FCEDB1477B555
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZNFH0b3VRe3DJJgIReIfFxINOR0.roa
Signing time: Wed 09 Nov 2022 07:19:44 +0000
ROA not before: Wed 09 Nov 2022 07:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204916
IP address blocks: 84.54.36.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
45.151.138.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:42:53:bc:fd:4d:b7:64:47:0f:ce:db:14:77:b5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Nov 9 07:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64d147d1bdd545edc324980845e21f17120d391d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:bc:30:3a:7f:18:4e:45:0b:ba:87:8d:bb:
cc:72:55:ae:fa:f4:8b:ef:6c:13:41:04:08:d3:68:
dd:63:ae:97:50:cb:1b:68:0d:44:d7:ae:ea:c5:c5:
b6:52:07:ca:fa:ae:21:04:40:7f:63:e5:78:63:7d:
be:15:2a:26:ff:ed:d7:e6:52:a6:0b:73:33:75:8e:
86:b9:c6:52:6a:ff:bb:13:9d:d2:70:42:ef:8b:ac:
25:d7:a4:75:48:c9:ca:8e:8f:fb:11:a7:6c:74:87:
a8:0c:07:3c:62:89:92:e1:1b:5d:88:8e:cf:16:99:
f6:eb:f2:8d:62:7a:cf:66:29:46:b8:36:ef:bc:f2:
0b:98:96:9b:f8:b4:01:f2:f0:2f:53:40:5e:24:21:
53:dc:8c:ec:62:dc:f8:4d:ce:4d:82:a9:ab:7f:77:
c9:c9:e2:4f:bc:f3:b0:f1:96:f4:c5:9a:21:41:cf:
02:35:8b:39:29:2b:ec:be:29:c2:75:ac:da:c7:b7:
d8:b3:61:7f:81:26:f8:ca:fb:39:f9:73:3e:50:3e:
05:fc:4f:0b:cc:b5:e9:ca:af:6c:8d:01:c9:f3:39:
29:f7:c9:41:82:e9:8a:3c:99:df:0f:68:90:ad:a9:
97:5b:47:93:98:e7:cc:6f:8d:5d:f2:6c:8a:fd:18:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:47:D1:BD:D5:45:ED:C3:24:98:08:45:E2:1F:17:12:0D:39:1D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZNFH0b3VRe3DJJgIReIfFxINOR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.136.0/22
83.171.240.0/22
84.54.36.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a2:68:dd:f5:e8:45:30:25:b1:d9:45:08:b6:a1:1d:c2:c5:
ce:c5:57:9f:b1:85:ba:34:8a:00:cc:33:24:81:ea:94:6c:36:
3a:fd:db:b4:0e:0d:82:49:24:ca:75:78:08:a4:27:bd:b1:13:
39:cf:b3:20:ee:0f:cc:da:13:57:b2:35:54:19:3f:e7:3b:f0:
96:2e:28:1c:a4:02:e7:77:67:d9:3a:05:1a:e8:6f:3b:92:88:
21:fc:9b:d4:9e:e8:24:15:c9:5b:5b:ff:85:ab:1c:9f:96:be:
5c:17:6b:91:c0:c4:d4:be:16:0f:da:41:2b:36:91:b6:1b:e1:
7d:9a:af:5d:dd:fe:78:9d:45:76:8f:05:ac:8b:eb:cc:5f:32:
2b:c1:05:8d:8d:f3:71:31:2a:f5:98:0d:be:cc:90:6f:6c:f0:
b3:01:8a:29:fa:aa:85:19:f2:05:e0:73:16:fc:b1:61:3b:7f:
84:be:68:be:21:7f:b7:2a:67:e4:7d:1a:d1:3a:6d:18:7d:17:
5f:33:ed:0e:49:86:8f:6f:b4:a6:96:25:9f:af:c0:ac:f9:14:
70:6a:db:49:60:8d:ba:f3:6b:68:4d:5b:b2:9f:53:b3:9e:42:
b0:92:5d:08:8f:45:17:ec:11:49:1b:a7:7b:0e:dc:8f:8e:83:
2a:82:e3:ef
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYRbQlO8/U23ZEcPztsUd7VVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjIxMTA5MDcxOTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGQxNDdkMWJkZDU0NWVkYzMyNDk4MDg0NWUyMWYxNzEyMGQzOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF28MDp/GE5FC7qHjbvMclWu+vSL
72wTQQQI02jdY66XUMsbaA1E167qxcW2UgfK+q4hBEB/Y+V4Y32+FSom/+3X5lKm
C3MzdY6GucZSav+7E53ScELvi6wl16R1SMnKjo/7EadsdIeoDAc8YomS4RtdiI7P
Fpn26/KNYnrPZilGuDbvvPILmJab+LQB8vAvU0BeJCFT3IzsYtz4Tc5Ngqmrf3fJ
yeJPvPOw8Zb0xZohQc8CNYs5KSvsvinCdazax7fYs2F/gSb4yvs5+XM+UD4F/E8L
zLXpyq9sjQHJ8zkp98lBgumKPJnfD2iQramXW0eTmOfMb41d8myK/RgrNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGTRR9G91UXtwySYCEXiHxcSDTkdMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvWk5GSDBiM1ZSZTNESkpnSVJlSWZGeElOT1IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZeIAwQC
U6vwAwQAVDYkMA0GCSqGSIb3DQEBCwUAA4IBAQA/omjd9ehFMCWx2UUItqEdwsXO
xVefsYW6NIoAzDMkgeqUbDY6/du0Dg2CSSTKdXgIpCe9sRM5z7Mg7g/M2hNXsjVU
GT/nO/CWLigcpALnd2fZOgUa6G87kogh/JvUnugkFclbW/+Fqxyflr5cF2uRwMTU
vhYP2kErNpG2G+F9mq9d3f54nUV2jwWsi+vMXzIrwQWNjfNxMSr1mA2+zJBvbPCz
AYop+qqFGfIF4HMW/LFhO3+Evmi+IX+3KmfkfRrROm0YfRdfM+0OSYaPb7SmliWf
r8Cs+RRwattJYI2682toTVuyn1OznkKwkl0Ij0UX7BFJG6d7DtyPjoMqguPv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org