Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZEFfEAaQ4AqDJF04kni0ixozLRo.roa
File: ZEFfEAaQ4AqDJF04kni0ixozLRo.roa (raw, json)
Hash identifier: Gpx/UDeHgzMJC8T/JbyLVL9NorGlgRcvwGAK93l4z8E=
Subject key identifier: 64:41:5F:10:06:90:E0:0A:83:24:5D:38:92:78:B4:8B:1A:33:2D:1A
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 01850A54E33067210C6C3BA0F3DD6D7950A5
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZEFfEAaQ4AqDJF04kni0ixozLRo.roa
Signing time: Tue 13 Dec 2022 07:13:33 +0000
ROA not before: Tue 13 Dec 2022 07:13:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16371
IP address blocks: 81.46.244.0/22 maxlen: 22
195.55.104.0/23 maxlen: 23
195.55.106.0/23 maxlen: 23
81.46.192.0/21 maxlen: 21
81.46.200.0/21 maxlen: 21
81.46.208.0/22 maxlen: 22
81.46.212.0/22 maxlen: 22
81.46.215.0/24 maxlen: 24
81.46.216.0/22 maxlen: 22
81.46.224.0/21 maxlen: 21
81.46.220.0/22 maxlen: 22
81.46.232.0/21 maxlen: 21
81.46.240.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0a:54:e3:30:67:21:0c:6c:3b:a0:f3:dd:6d:79:50:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Dec 13 07:13:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64415f100690e00a83245d389278b48b1a332d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:ed:a9:a9:cd:38:1c:e9:eb:7d:5f:26:15:
13:9a:0f:3a:6d:88:80:e8:01:98:69:63:f0:c5:15:
f8:ed:19:51:9f:94:2d:54:20:09:e8:54:03:41:3c:
9d:2e:17:a0:f4:5d:72:96:d8:21:78:55:37:ab:97:
1e:3c:84:18:64:d0:ba:7f:3a:a9:df:39:1c:38:bc:
b4:70:7d:db:b7:b4:18:5c:e3:1e:97:8d:9a:2c:83:
e3:77:e7:e2:cf:80:55:a7:5c:6a:e8:10:06:91:c3:
a5:07:de:66:68:62:34:e3:49:a6:b4:ac:1b:a8:b1:
7d:ad:dd:e7:8d:69:a0:49:b2:3c:b4:a2:98:02:28:
91:e7:0e:a8:49:39:1d:19:33:7f:e7:7d:cb:0a:ab:
3d:c3:e8:6e:f9:88:44:a0:f9:fd:1b:e0:96:6c:53:
96:7e:16:c0:a3:59:b8:06:e3:46:9d:69:64:46:36:
01:eb:96:b2:40:9f:6f:ac:f3:08:0b:e4:a3:df:ed:
ec:d9:7d:bb:d7:3a:01:62:18:18:ea:06:83:f7:84:
f7:b5:34:9a:cf:09:98:d2:c5:96:d1:4e:80:cb:8a:
58:3b:5e:f8:f5:de:5e:ab:92:5d:a0:95:13:3f:51:
e6:f7:88:9b:ef:b1:b6:ef:d0:8a:1e:a2:b9:37:3d:
0c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:41:5F:10:06:90:E0:0A:83:24:5D:38:92:78:B4:8B:1A:33:2D:1A
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/ZEFfEAaQ4AqDJF04kni0ixozLRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.46.192.0-81.46.247.255
195.55.104.0/22
Signature Algorithm: sha256WithRSAEncryption
07:5a:c8:a9:cd:9e:a2:3e:bc:f0:fe:01:2e:71:e0:5b:4d:47:
03:45:27:dc:ce:04:7c:75:28:c7:0a:99:52:1a:15:a7:8a:03:
a1:b4:49:6a:fd:8a:37:24:7b:41:fe:67:9c:0e:8c:ab:05:76:
f2:b1:c0:1f:88:59:2e:9b:db:cc:d8:bb:79:2a:45:d2:cb:13:
a7:24:5b:5f:3e:c6:9b:69:75:ac:59:3e:4c:e8:35:5d:c8:8b:
18:95:6e:af:cd:99:56:92:7b:51:60:1c:92:cf:57:91:40:aa:
6d:05:4d:c2:c3:ec:fc:d0:ee:0e:e4:51:fc:22:cb:c9:02:99:
c1:f4:c6:3c:28:58:10:80:ec:f8:0d:eb:7d:3a:64:a7:2e:92:
8d:f8:45:9c:b1:9e:14:d0:6a:27:7e:98:58:9a:81:26:73:ec:
f2:36:33:56:8c:44:3f:ae:d8:20:1b:ea:e1:4c:d9:05:23:a7:
d3:e3:c5:2f:21:85:a4:86:23:7a:62:3c:2e:c9:bd:d6:af:e4:
ee:2c:6b:62:8c:fc:ce:1b:77:e8:16:c3:6d:56:3d:d9:bf:c6:
07:84:82:cb:73:2c:78:32:7c:14:75:9c:2a:aa:07:10:73:c2:
03:0d:38:4d:e9:f5:f1:b2:21:f6:e0:49:19:f2:c8:87:5c:6f:
d7:51:56:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:36 2023 by rpki-client on console-ams.rpki-client.org