Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/ZQNwAtzhSqkj24zV6uMEkDulS8w.roa
File: ZQNwAtzhSqkj24zV6uMEkDulS8w.roa (raw, json)
Hash identifier: Yymu+g+O0wzwvnVJQUnde+XO0VvCxXoINV3Cr8wUEfQ=
Subject key identifier: 65:03:70:02:DC:E1:4A:A9:23:DB:8C:D5:EA:E3:04:90:3B:A5:4B:CC
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 17225C79
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/ZQNwAtzhSqkj24zV6uMEkDulS8w.roa
Signing time: Wed 09 Mar 2022 16:25:59 +0000
ROA not before: Wed 09 Mar 2022 16:25:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201353
IP address blocks: 185.70.32.0/22 maxlen: 22
91.132.128.0/22 maxlen: 22
45.86.222.0/23 maxlen: 23
45.91.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 388127865 (0x17225c79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Mar 9 16:25:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65037002dce14aa923db8cd5eae304903ba54bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:90:ef:66:65:e0:65:43:a3:b2:66:b0:4d:
81:e6:76:3e:8b:34:ce:f4:b6:33:85:05:86:ca:7d:
d4:90:8a:b5:2c:85:d6:88:06:7d:41:8b:f7:ee:f9:
14:fc:95:99:dc:a1:e9:9a:e5:5a:fb:8f:a0:cc:29:
34:57:0d:a2:3a:fb:de:14:5b:c9:7b:be:60:b1:ea:
8d:ec:5a:7f:fa:22:0a:bf:19:00:70:ce:dc:f3:1b:
fe:66:81:24:cb:8b:80:a4:59:5d:d4:2a:08:e4:5e:
0c:c9:63:93:0a:f2:f5:c7:13:ac:ea:9f:ea:29:57:
d9:19:69:d4:15:9e:e7:c1:e4:b8:4c:d3:b6:a9:28:
4e:2c:56:aa:5a:43:85:d2:1e:17:29:54:cf:e3:53:
07:93:5c:54:6a:1c:26:23:6c:78:ab:ae:35:4f:dc:
5a:ac:32:65:a2:7c:16:4b:d4:2e:f2:92:16:7f:9e:
4e:d1:1c:4f:41:f9:26:7b:5f:da:4f:8d:86:0a:92:
7c:fd:04:45:ef:f1:32:ee:34:90:56:d8:8b:5f:59:
d1:b0:9b:86:a9:28:a8:c1:bb:1c:0a:15:4a:ff:af:
9f:83:a2:fb:24:e1:f5:92:e7:e6:a1:95:bd:54:06:
d5:cb:dd:76:d9:14:75:e2:7c:08:80:3d:85:e1:76:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:70:02:DC:E1:4A:A9:23:DB:8C:D5:EA:E3:04:90:3B:A5:4B:CC
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/ZQNwAtzhSqkj24zV6uMEkDulS8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.222.0/23
45.91.36.0/22
91.132.128.0/22
185.70.32.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:2b:54:19:6a:2c:5c:3d:0d:70:67:e9:63:ce:c4:e1:74:25:
9b:0f:7f:67:f3:5f:59:5b:28:4c:87:e5:77:f5:1f:8d:76:35:
32:86:19:69:82:9c:67:c4:86:3d:21:99:26:6d:2c:5f:47:c8:
68:21:45:9d:91:d2:36:f7:b1:37:dc:19:77:b6:ac:63:46:93:
aa:2f:4e:bf:6d:a7:f7:74:39:a4:b3:d6:55:2a:93:13:84:83:
af:c7:23:00:b7:3a:2c:af:da:ed:0f:bd:0a:2c:8b:84:e0:37:
aa:d8:2f:f4:95:83:14:6d:43:6f:96:d5:05:8c:c7:81:3d:73:
ab:3d:8f:d6:5f:13:cf:00:5e:f1:58:b8:35:29:47:45:e1:91:
cf:ac:6d:7b:df:1d:a0:5a:51:69:d1:aa:97:1b:28:46:90:d0:
28:3d:b0:ed:c3:0a:92:a4:ab:a6:af:fc:45:6f:13:a3:25:9a:
7a:eb:b9:e4:76:1d:0a:34:f6:fe:64:89:5f:c3:97:be:3e:2e:
36:1b:04:96:53:6a:23:89:4b:47:44:53:d7:0a:23:07:af:0e:
1a:c9:25:5c:53:89:3f:18:e6:00:f5:d5:36:a5:ac:69:aa:5d:
65:77:e5:f3:f6:4e:07:58:8e:d8:d3:a2:cb:e5:e8:7c:bb:27:
18:0f:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:09 2023 by rpki-client on console-ams.rpki-client.org