Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ZA2cLWaz2FuZqZxXptHYdLDjN_s.roa
File: ZA2cLWaz2FuZqZxXptHYdLDjN_s.roa (raw, json)
Hash identifier: FzIWLx1zYHZeniUidjABHToNOuBLAwM24ZlrMLyISlk=
Subject key identifier: 64:0D:9C:2D:66:B3:D8:5B:99:A9:9C:57:A6:D1:D8:74:B0:E3:37:FB
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 02C3143A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ZA2cLWaz2FuZqZxXptHYdLDjN_s.roa
Signing time: Sat 01 Jan 2022 11:58:04 +0000
ROA not before: Sat 01 Jan 2022 11:58:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31643
IP address blocks: 85.28.0.0/21 maxlen: 21
85.28.0.0/20 maxlen: 20
85.28.8.0/21 maxlen: 21
85.28.16.0/21 maxlen: 21
85.28.16.0/20 maxlen: 20
85.28.24.0/21 maxlen: 21
217.151.16.0/21 maxlen: 21
217.151.16.0/20 maxlen: 20
217.151.24.0/21 maxlen: 21
85.28.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46339130 (0x2c3143a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 1 11:58:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=640d9c2d66b3d85b99a99c57a6d1d874b0e337fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:bc:f4:0a:55:2f:07:74:96:71:3b:f8:75:
7f:60:1f:ae:e3:d4:b3:57:7c:58:33:d1:0b:4c:d4:
83:82:89:45:aa:ce:d6:fc:fa:1d:19:8f:ce:a4:f3:
24:b4:f4:c5:ef:96:60:b0:f0:4b:22:e8:06:82:3f:
a8:dc:12:dc:a9:92:16:e1:9d:60:3c:d6:dd:78:4f:
df:73:56:0e:cd:c2:28:b6:54:9a:4a:f9:27:8b:a1:
7a:c0:1a:35:60:c1:3c:0f:81:33:82:59:1c:1b:7c:
a4:81:4c:a7:14:4d:62:5b:36:8a:d8:0e:14:38:ab:
53:e5:e7:44:92:9e:ac:a1:54:9b:8a:0c:88:c4:eb:
bb:1d:36:8a:8d:74:80:f7:6c:d0:a1:e5:13:e2:66:
f6:cc:e7:af:53:05:5f:e1:2f:0b:f4:9a:9e:00:2e:
fc:1c:84:e2:29:81:2a:1b:a6:24:2e:7b:40:0c:45:
f0:9e:29:8c:30:4a:01:fe:a1:ce:67:9d:ea:f8:3d:
05:aa:85:21:42:af:c5:e4:aa:00:d6:ed:98:99:05:
92:f8:c6:2c:78:60:94:69:eb:ff:f5:3c:a0:4b:c0:
04:5d:e0:42:b8:6d:89:71:0a:44:c2:d9:83:e4:8f:
17:2e:30:b5:ff:52:ac:fc:99:90:06:a9:f5:5b:ab:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:9C:2D:66:B3:D8:5B:99:A9:9C:57:A6:D1:D8:74:B0:E3:37:FB
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/ZA2cLWaz2FuZqZxXptHYdLDjN_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.0.0-85.28.47.255
217.151.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:d9:89:2d:3b:69:d4:76:78:4e:1f:c7:ee:7c:77:ba:eb:b4:
e9:a3:3c:86:ac:6a:ed:e9:70:f9:31:af:1a:c2:a9:72:a3:25:
d7:18:09:a1:d3:1d:47:48:a0:fd:30:49:13:07:64:83:3d:23:
04:6e:83:b3:8c:b0:c1:1d:f2:0b:11:fd:c9:80:8c:c7:df:98:
f2:67:e5:cd:ca:e1:f8:d9:80:6d:bc:10:5f:ba:f2:34:21:11:
e2:de:71:50:42:0e:8c:96:c0:10:c3:9d:c0:12:aa:5b:ba:08:
6d:e6:a6:62:68:10:1c:28:56:c3:77:69:1c:a4:4d:6c:1c:c4:
44:52:b5:76:02:60:4b:3a:e6:6c:e3:94:a4:4e:be:fe:0b:ac:
0d:df:5b:e6:25:b2:dc:62:5b:5e:6c:cb:85:64:9e:bb:25:e0:
e5:00:9f:fe:f1:ae:f7:ed:fb:61:45:11:ff:13:8e:38:61:ef:
31:e3:c6:fc:7e:5f:fd:63:96:1a:20:34:ff:a0:85:ce:4d:ba:
34:f2:30:4d:79:3f:85:32:64:c9:08:17:18:3f:6d:69:06:5c:
2c:29:a0:1f:d0:3d:a5:1d:49:fc:ef:6c:f6:77:9f:f9:d8:3e:
ad:33:31:2e:67:a5:4e:3b:da:d4:be:2a:59:79:3b:64:8d:96:
8b:cb:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:38 2023 by rpki-client on console-fra.rpki-client.org