Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZNEDIGhN05ENOWwU2g5t7cvpFVs.roa
File: ZNEDIGhN05ENOWwU2g5t7cvpFVs.roa (raw, json)
Hash identifier: a8PGFGgoYt5/HlQ9JEA3FOJZKNWLv2B/C+4xHefTxgM=
Subject key identifier: 64:D1:03:20:68:4D:D3:91:0D:39:6C:14:DA:0E:6D:ED:CB:E9:15:5B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DDD4331
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZNEDIGhN05ENOWwU2g5t7cvpFVs.roa
Signing time: Mon 11 Apr 2022 07:53:46 +0000
ROA not before: Mon 11 Apr 2022 07:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 185.121.120.0/24 maxlen: 24
45.133.1.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
62.197.136.0/24 maxlen: 24
45.144.227.0/24 maxlen: 24
203.159.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232604465 (0xddd4331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 11 07:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64d10320684dd3910d396c14da0e6dedcbe9155b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:ed:da:a8:03:a7:c3:46:68:21:7b:7b:e2:
ec:0f:6b:7d:d7:1a:7e:51:60:54:52:1a:ab:bc:34:
7b:76:f2:e6:12:bd:ea:73:b0:cb:cd:ea:d8:6d:5a:
1d:05:bd:95:c0:3b:af:f4:a7:64:16:42:96:5a:50:
91:1d:4b:19:66:7d:cb:a8:ed:9f:e1:3f:f0:62:60:
9b:5a:8d:e1:09:b7:d7:a5:46:27:f9:4f:b3:bc:75:
02:95:e1:86:89:66:e6:eb:f5:14:9e:91:0b:18:c1:
03:30:b1:a2:40:8d:a4:5a:8a:25:d2:cd:ff:5e:5d:
1a:dc:36:a6:9c:13:b1:e5:b3:af:b3:4f:33:90:37:
04:82:60:d2:c7:76:a1:8a:a3:0f:2a:26:b4:ca:5c:
29:7a:ee:12:c2:60:df:05:b8:85:13:ac:0a:1e:5e:
21:8d:ae:dc:a4:24:9a:81:7b:11:2c:cd:99:03:9b:
5a:81:87:31:81:a2:d2:4f:ae:c7:1f:5d:b1:6d:93:
44:77:b9:82:c8:95:47:ae:6f:9e:4d:02:72:b5:19:
7d:37:00:d8:5c:07:83:9d:3b:54:2b:4a:9f:46:c0:
ff:d7:fd:2b:90:ef:48:a7:8a:4a:b7:73:df:96:5b:
be:fd:25:dd:c9:96:ed:a8:b6:36:2a:a6:f5:86:8c:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:03:20:68:4D:D3:91:0D:39:6C:14:DA:0E:6D:ED:CB:E9:15:5B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ZNEDIGhN05ENOWwU2g5t7cvpFVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.1.0/24
45.144.225.0/24
45.144.227.0/24
62.197.136.0/24
185.121.120.0/24
203.159.80.0/24
Signature Algorithm: sha256WithRSAEncryption
34:04:f7:ca:39:4d:72:6a:97:dc:74:8a:19:2d:80:49:8c:31:
01:55:d6:25:09:81:3c:8b:3b:37:fa:05:07:e8:83:21:2e:b8:
c3:09:06:a5:45:f5:5e:34:b3:8e:7b:e5:a2:0a:62:81:e8:5a:
ea:c6:16:1e:e6:20:cc:5c:14:7d:31:73:2d:19:a5:1d:c1:48:
1c:4e:59:4e:28:9d:3a:57:a3:7d:a2:2c:c8:6b:de:71:42:a9:
b1:9e:b4:14:35:2a:3e:58:00:69:25:3d:2b:7f:50:42:89:18:
4b:f6:f0:21:6c:6e:0b:e5:8e:60:6d:c6:bd:9c:9c:87:cc:a2:
ae:21:a8:25:f7:c2:9f:95:7a:7e:df:7b:2e:d2:15:9e:0c:fe:
4b:7f:9e:6e:59:ae:4b:31:d8:67:00:93:bd:53:aa:0a:9c:78:
87:76:d5:61:98:77:b7:56:7e:b7:8e:b0:e5:6b:58:56:06:45:
43:97:9f:a7:2d:5d:8d:6b:5e:1b:4e:be:ea:cc:d5:ce:fb:a8:
14:07:0c:5e:3f:c3:0c:0d:47:2e:8d:99:f3:e7:18:df:e4:c5:
79:ba:9c:7f:e8:cf:99:4d:47:c8:5a:81:e6:d1:f9:69:a2:4e:
4e:ac:c7:b8:62:ca:d5:1e:2e:be:7a:95:96:da:d6:c0:76:84:
13:a4:e5:e4
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEDd1DMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDQx
MTA3NTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjRkMTAzMjA2ODRk
ZDM5MTBkMzk2YzE0ZGEwZTZkZWRjYmU5MTU1YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJsh7dqoA6fDRmghe3vi7A9rfdcaflFgVFIaq7w0e3by5hK9
6nOwy83q2G1aHQW9lcA7r/SnZBZCllpQkR1LGWZ9y6jtn+E/8GJgm1qN4Qm316VG
J/lPs7x1ApXhholm5uv1FJ6RCxjBAzCxokCNpFqKJdLN/15dGtw2ppwTseWzr7NP
M5A3BIJg0sd2oYqjDyomtMpcKXruEsJg3wW4hROsCh5eIY2u3KQkmoF7ESzNmQOb
WoGHMYGi0k+uxx9dsW2TRHe5gsiVR65vnk0CcrUZfTcA2FwHg507VCtKn0bA/9f9
K5DvSKeKSrdz35Zbvv0l3cmW7ai2Niqm9YaMCnMCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBRk0QMgaE3TkQ05bBTaDm3ty+kVWzAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L1pORURJR2hOMDVFTk9Xd1UyZzV0N2N2cEZWcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAC2FAQMEAC2Q4QMEAC2Q4wMEAD7F
iAMEALl5eAMEAMufUDANBgkqhkiG9w0BAQsFAAOCAQEANAT3yjlNcmqX3HSKGS2A
SYwxAVXWJQmBPIs7N/oFB+iDIS64wwkGpUX1XjSzjnvlogpigeha6sYWHuYgzFwU
fTFzLRmlHcFIHE5ZTiidOlejfaIsyGvecUKpsZ60FDUqPlgAaSU9K39QQokYS/bw
IWxuC+WOYG3GvZych8yiriGoJffCn5V6ft97LtIVngz+S3+eblmuSzHYZwCTvVOq
Cpx4h3bVYZh3t1Z+t46w5WtYVgZFQ5efpy1djWteG06+6szVzvuoFAcMXj/DDA1H
Lo2Z8+cY3+TFebqcf+jPmU1HyFqB5tH5aaJOTqzHuGLK1R4uvnqVltrWwHaEE6Tl
5A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org