Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZKaRQqi7YRko8Dr1_y7iJqYOsvU.roa
File: ZKaRQqi7YRko8Dr1_y7iJqYOsvU.roa (raw, json)
Hash identifier: AoGdJCaJO04XNyMCbiZW9AE8UqqPo8LLxCJbmXloxF4=
Subject key identifier: 64:A6:91:42:A8:BB:61:19:28:F0:3A:F5:FF:2E:E2:26:A6:0E:B2:F5
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0865FB4F
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZKaRQqi7YRko8Dr1_y7iJqYOsvU.roa
Signing time: Thu 10 Feb 2022 09:39:10 +0000
ROA not before: Thu 10 Feb 2022 09:39:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 94.241.136.0/21 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.164.0/23 maxlen: 24
94.241.166.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140901199 (0x865fb4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 10 09:39:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64a69142a8bb611928f03af5ff2ee226a60eb2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:1c:93:f8:89:d5:ae:40:f4:ef:80:8d:2c:
61:db:0d:51:ea:50:26:08:a7:bb:68:51:c5:48:6d:
ee:55:59:53:ce:70:e1:61:55:bf:e3:a5:be:c0:0f:
24:f6:dc:64:a3:2a:f7:04:98:8b:28:56:cf:e8:67:
dc:d7:d1:cb:d8:fa:07:6d:18:1d:29:5a:6c:2d:f3:
a2:20:b9:23:d7:9d:3b:1a:54:04:ec:04:5b:c3:ae:
2b:28:88:91:d5:0d:c5:4f:6d:18:90:56:3e:9c:d8:
10:1e:fa:67:f5:97:c6:82:e5:8d:68:5d:a0:73:23:
3f:8c:06:1b:6a:df:79:76:69:43:ac:0f:1c:9b:7b:
b4:6f:a5:21:93:8f:c7:d0:74:96:29:24:37:68:34:
70:76:11:7f:dd:1c:c1:1e:9b:30:f5:72:20:3a:ef:
d7:31:9d:e7:f1:2a:4d:2b:2a:68:dc:a1:08:6b:82:
4e:d5:7e:d0:2e:b6:2b:2e:16:ce:6f:2b:20:67:88:
7b:d4:b6:11:d3:50:0c:81:1d:43:e4:aa:03:45:08:
6a:b8:38:f9:7b:d2:9b:54:8f:ef:09:ec:8a:84:d7:
f4:9a:cf:57:75:5c:6e:b8:0a:c2:d4:7e:6a:33:f8:
c3:1e:b9:27:d4:7a:ec:7f:5f:6b:82:49:6d:c9:ce:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A6:91:42:A8:BB:61:19:28:F0:3A:F5:FF:2E:E2:26:A6:0E:B2:F5
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ZKaRQqi7YRko8Dr1_y7iJqYOsvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.216.0/22
94.241.136.0/21
94.241.164.0/22
Signature Algorithm: sha256WithRSAEncryption
55:9f:a9:28:1d:be:f9:93:fd:c2:c2:21:9c:c8:54:0b:1c:71:
4a:f7:d9:54:92:9c:5b:71:b6:54:75:89:91:c9:4f:d9:29:58:
7c:cb:57:c9:db:35:19:5e:6f:b9:1d:b9:5b:85:4a:ca:51:dd:
3e:5f:78:7d:8c:1d:55:12:42:13:54:23:83:3b:74:44:54:ef:
39:13:31:e1:af:58:f8:9a:e2:75:04:ee:13:f0:46:64:8d:9b:
e9:0d:b8:11:b0:8b:a7:0e:d7:c8:af:49:27:37:69:e8:2a:d2:
27:74:bc:0c:64:dc:74:ad:62:f2:b1:1d:ba:93:b0:5f:8a:75:
12:a4:b3:07:ff:c1:89:51:28:71:bc:ec:69:79:6c:4e:29:3c:
5d:9c:7f:81:b3:2f:75:65:70:a0:48:b0:af:6b:a0:ef:bc:4c:
13:00:f4:5f:e4:f3:b8:33:03:93:e3:6b:16:54:d1:f3:5f:50:
c3:9e:ea:9c:5e:e8:83:2f:f0:04:a9:41:98:09:5b:ad:54:d1:
c2:a6:9c:df:96:3f:f6:96:e3:cc:9a:6b:84:05:da:75:bc:f8:
70:ce:81:aa:6a:5a:f4:d5:e6:7d:ec:46:1e:3d:e7:a6:d4:94:
58:7c:86:13:81:1f:4f:aa:77:d6:7f:e1:c5:1d:b3:5f:d8:0d:
61:1f:69:5e
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIECGX7TzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDIx
MDA5MzkxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjRhNjkxNDJhOGJi
NjExOTI4ZjAzYWY1ZmYyZWUyMjZhNjBlYjJmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALbaHJP4idWuQPTvgI0sYdsNUepQJginu2hRxUht7lVZU85w
4WFVv+OlvsAPJPbcZKMq9wSYiyhWz+hn3NfRy9j6B20YHSlabC3zoiC5I9edOxpU
BOwEW8OuKyiIkdUNxU9tGJBWPpzYEB76Z/WXxoLljWhdoHMjP4wGG2rfeXZpQ6wP
HJt7tG+lIZOPx9B0likkN2g0cHYRf90cwR6bMPVyIDrv1zGd5/EqTSsqaNyhCGuC
TtV+0C62Ky4Wzm8rIGeIe9S2EdNQDIEdQ+SqA0UIarg4+XvSm1SP7wnsioTX9JrP
V3VcbrgKwtR+ajP4wx65J9R67H9fa4JJbcnOXh8CAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRkppFCqLthGSjwOvX/LuImpg6y9TAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L1pLYVJRcWk3WVJrbzhEcjFfeTdpSnFZT3N2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAlu62AMEA17xiAMEAl7xpDANBgkq
hkiG9w0BAQsFAAOCAQEAVZ+pKB2++ZP9wsIhnMhUCxxxSvfZVJKcW3G2VHWJkclP
2SlYfMtXyds1GV5vuR25W4VKylHdPl94fYwdVRJCE1Qjgzt0RFTvORMx4a9Y+Jri
dQTuE/BGZI2b6Q24EbCLpw7XyK9JJzdp6CrSJ3S8DGTcdK1i8rEdupOwX4p1EqSz
B//BiVEocbzsaXlsTik8XZx/gbMvdWVwoEiwr2ug77xMEwD0X+TzuDMDk+NrFlTR
819Qw57qnF7ogy/wBKlBmAlbrVTRwqac35Y/9pbjzJprhAXadbz4cM6Bqmpa9NXm
fexGHj3nptSUWHyGE4EfT6p31n/hxR2zX9gNYR9pXg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org