Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Zvd7E3VckXlmAREy-pVoQhdxcng.roa
File: Zvd7E3VckXlmAREy-pVoQhdxcng.roa (raw, json)
Hash identifier: xadspQpvebpVxY/f+xa5OxwGSzm1RnWXVF0799gfFgw=
Subject key identifier: 66:F7:7B:13:75:5C:91:79:66:01:11:32:FA:95:68:42:17:71:72:78
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 073B4C7E
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Zvd7E3VckXlmAREy-pVoQhdxcng.roa
Signing time: Thu 28 Apr 2022 17:49:25 +0000
ROA not before: Thu 28 Apr 2022 17:49:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60026
IP address blocks: 194.61.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121326718 (0x73b4c7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Apr 28 17:49:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66f77b13755c917966011132fa95684217717278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:32:16:f2:bb:95:b1:1b:98:65:ad:7d:07:aa:
de:09:ee:44:6a:ba:2a:0d:53:70:9e:e8:9c:a8:1e:
1e:09:96:f8:92:dd:64:70:4f:e5:fc:34:d0:1f:e2:
ac:f9:d3:1f:52:91:21:e3:b2:76:b5:b9:7f:3c:8d:
55:a6:c2:30:50:48:67:ac:f9:c0:b4:0c:87:3d:2e:
63:37:ee:e3:9e:bd:fc:9d:0f:81:23:7a:4b:de:7a:
75:04:13:b9:2e:9b:05:df:7d:c7:e2:64:b6:95:c8:
b5:9b:41:13:79:6c:ed:ef:1b:3f:da:c8:fc:21:68:
a1:e0:01:f2:f8:9c:13:4e:3d:a9:e6:0d:5d:44:d4:
b0:f9:21:d0:a6:5e:17:20:d9:54:53:6a:0c:6d:32:
4b:42:03:be:6d:79:59:26:86:ab:92:3f:ce:03:88:
5b:64:ea:24:f5:d4:b7:fc:01:cc:e3:54:03:b0:33:
ac:3d:77:40:99:43:94:36:68:7b:59:38:4b:2c:7e:
4e:1c:d9:d4:62:54:26:6d:cc:4f:06:9e:e5:79:f1:
eb:c4:98:63:03:c8:be:00:a8:08:ae:a9:55:80:9b:
c6:5a:42:10:52:87:6a:8a:77:9b:5c:08:e6:41:fd:
68:d1:e6:7f:76:40:b5:b6:34:0c:44:4e:23:c9:73:
ef:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F7:7B:13:75:5C:91:79:66:01:11:32:FA:95:68:42:17:71:72:78
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/Zvd7E3VckXlmAREy-pVoQhdxcng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.80.0/24
Signature Algorithm: sha256WithRSAEncryption
62:59:00:dc:a7:81:d4:c6:c2:82:d7:98:d7:42:c1:d0:a8:2f:
68:93:35:f5:2c:34:79:83:f9:9d:1c:f8:46:de:6c:5c:72:b9:
27:d1:ac:2d:b0:63:da:d9:d4:13:01:a9:d2:b1:af:9b:7d:48:
d4:8a:88:f4:98:9d:a3:78:79:59:54:cb:f4:04:39:81:d5:7d:
16:5f:6f:92:f5:80:d6:d6:eb:d1:fd:f7:80:dd:ae:9e:39:ef:
f1:54:f8:44:f2:39:a9:2d:f0:e3:de:61:70:16:e2:74:1a:f4:
34:02:b1:0c:70:6c:bb:c1:34:0a:c8:55:24:c9:c1:e9:50:a4:
3f:98:24:5b:e9:6f:5b:8f:91:9f:06:5c:e5:b5:32:a2:51:3f:
93:f2:ac:90:a3:98:cc:ba:3b:83:81:7d:3e:1d:fe:e9:01:ce:
3c:fa:cf:7f:fa:d1:41:2a:f3:de:9b:66:12:1e:71:85:32:f9:
ef:4e:55:a0:a9:5d:bf:dc:c9:4b:6a:19:e0:03:6f:62:5c:0a:
c8:51:0c:d1:39:be:e7:3b:be:0d:4a:ff:92:29:ce:a5:15:52:
e5:0c:52:68:b1:f9:2d:f9:26:9b:db:34:b2:e9:01:70:8b:d4:
a6:71:c2:d2:09:f9:56:54:f6:44:dc:4f:53:f6:a7:bf:a6:5a:
69:ac:2e:22
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBztMfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
NGU4ODhhNzZlOTk4NTFiMDFmYjg2Y2VjNTM3ZDRkOGU2MTBkZTE2MB4XDTIyMDQy
ODE3NDkyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjZmNzdiMTM3NTVj
OTE3OTY2MDExMTMyZmE5NTY4NDIxNzcxNzI3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK4yFvK7lbEbmGWtfQeq3gnuRGq6Kg1TcJ7onKgeHgmW+JLd
ZHBP5fw00B/irPnTH1KRIeOydrW5fzyNVabCMFBIZ6z5wLQMhz0uYzfu4569/J0P
gSN6S956dQQTuS6bBd99x+JktpXItZtBE3ls7e8bP9rI/CFooeAB8vicE049qeYN
XUTUsPkh0KZeFyDZVFNqDG0yS0IDvm15WSaGq5I/zgOIW2TqJPXUt/wBzONUA7Az
rD13QJlDlDZoe1k4Syx+ThzZ1GJUJm3MTwae5Xnx68SYYwPIvgCoCK6pVYCbxlpC
EFKHaop3m1wI5kH9aNHmf3ZAtbY0DEROI8lz740CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRm93sTdVyReWYBETL6lWhCF3FyeDAfBgNVHSMEGDAWgBRE6IinbpmFGwH7
hs7FN9TY5hDeFjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1JPaUlwMjZaaFJzQi00Yk94VGZVMk9ZUTNoWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvODJlMmJhLTQ0MmMtNDJiMC05MzE1LWJjMGRiYTkzMmIzNS8x
L1p2ZDdFM1Zja1hsbUFSRXktcFZvUWhkeGNuZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
ODJlMmJhLTQ0MmMtNDJiMC05MzE1LWJjMGRiYTkzMmIzNS8xL1JPaUlwMjZaaFJz
Qi00Yk94VGZVMk9ZUTNoWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI9UDANBgkqhkiG9w0BAQsFAAOC
AQEAYlkA3KeB1MbCgteY10LB0KgvaJM19Sw0eYP5nRz4Rt5sXHK5J9GsLbBj2tnU
EwGp0rGvm31I1IqI9Jido3h5WVTL9AQ5gdV9Fl9vkvWA1tbr0f33gN2unjnv8VT4
RPI5qS3w495hcBbidBr0NAKxDHBsu8E0CshVJMnB6VCkP5gkW+lvW4+RnwZc5bUy
olE/k/KskKOYzLo7g4F9Ph3+6QHOPPrPf/rRQSrz3ptmEh5xhTL5705VoKldv9zJ
S2oZ4ANvYlwKyFEM0Tm+5zu+DUr/kinOpRVS5QxSaLH5Lfkmm9s0sukBcIvUpnHC
0gn5VlT2RNxPU/anv6ZaaawuIg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:23 2023 by rpki-client on console-fra.rpki-client.org