Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZPefKjyrht_8SDidqejvCBud494.roa
File: ZPefKjyrht_8SDidqejvCBud494.roa (raw, json)
Hash identifier: V1IAnikHq1Mkq1Gp3EgH2Tg2sWvFLEmZmuIRJ+K6XB0=
Subject key identifier: 64:F7:9F:2A:3C:AB:86:DF:FC:48:38:9D:A9:E8:EF:08:1B:9D:E3:DE
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0183548D45B641D6C26A0647712D5537B601
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZPefKjyrht_8SDidqejvCBud494.roa
Signing time: Mon 19 Sep 2022 07:01:28 +0000
ROA not before: Mon 19 Sep 2022 07:01:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 185.204.1.0/24 maxlen: 24
185.232.168.0/24 maxlen: 24
185.103.110.0/24 maxlen: 24
185.112.82.0/24 maxlen: 24
185.212.149.0/24 maxlen: 24
185.117.118.0/24 maxlen: 24
185.217.196.0/23 maxlen: 23
82.115.220.0/24 maxlen: 24
185.221.163.0/24 maxlen: 24
194.53.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:54:8d:45:b6:41:d6:c2:6a:06:47:71:2d:55:37:b6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 19 07:01:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64f79f2a3cab86dffc48389da9e8ef081b9de3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:c3:dc:d0:2a:16:97:b7:54:fa:b1:8a:d8:
7b:ca:64:b9:3e:90:a9:5f:96:03:95:2a:a7:bc:60:
1d:73:7f:03:4f:91:c9:41:d3:5f:8c:fb:13:76:2a:
e4:4b:ed:eb:ff:69:04:68:0e:76:bb:5b:cb:30:42:
81:54:32:a9:49:8e:bd:53:1b:46:6f:01:f5:6f:a0:
d3:bd:86:7e:15:66:b6:f2:82:f5:a2:51:9b:2d:96:
8a:f2:14:72:f0:54:2d:e7:dd:7c:28:c5:24:ea:cc:
29:c1:79:86:b5:2c:8a:7a:dc:c1:68:91:77:c5:cd:
15:29:b7:0d:b4:01:ba:73:bc:01:7a:86:4b:5d:c8:
78:e8:2c:05:fa:b8:a9:2e:2e:5c:7f:34:be:66:a4:
0c:e1:fa:d9:53:97:31:9a:70:af:9d:62:65:cb:fa:
39:8d:b1:02:37:c7:65:ef:a2:e5:87:bf:a3:07:28:
0e:0f:b7:53:1f:94:35:23:02:56:f3:30:00:1b:8f:
17:16:47:e1:bf:1b:92:26:c2:8b:37:9d:61:bb:b4:
e6:63:7a:74:12:e3:d8:10:78:45:57:d3:46:81:ca:
19:c3:6b:05:72:f0:11:07:01:85:92:31:a0:fc:ce:
d9:19:a7:54:91:bd:10:e5:27:37:9d:9b:e9:23:5a:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F7:9F:2A:3C:AB:86:DF:FC:48:38:9D:A9:E8:EF:08:1B:9D:E3:DE
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZPefKjyrht_8SDidqejvCBud494.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.220.0/24
185.103.110.0/24
185.112.82.0/24
185.117.118.0/24
185.204.1.0/24
185.212.149.0/24
185.217.196.0/23
185.221.163.0/24
185.232.168.0/24
194.53.52.0/24
Signature Algorithm: sha256WithRSAEncryption
95:31:98:5a:51:0e:21:77:19:55:1c:0f:e8:f6:ab:3a:85:e4:
25:09:b6:24:bc:de:e4:9f:96:94:75:cc:13:51:aa:c3:2b:39:
0d:41:62:f1:29:72:40:72:b4:f7:25:f6:18:ac:74:2a:00:40:
e8:c0:73:c5:dc:e7:5c:6d:13:9a:40:4a:ff:59:56:73:6a:74:
27:f5:72:79:f7:9e:66:7a:5c:b4:53:81:66:23:fa:c5:80:91:
bb:17:f0:f0:4c:35:49:c1:a0:40:92:34:db:1a:58:ad:5e:96:
8d:12:56:1e:92:78:5e:8d:e7:c2:ad:18:5a:c1:16:9e:67:a2:
e7:f4:e1:33:d1:08:93:89:cb:be:18:b2:70:2e:3a:8c:1e:51:
a8:e9:9b:88:d0:7c:98:03:8e:51:6e:e9:17:ea:80:4f:cd:77:
5a:ed:6c:b5:13:37:89:40:c5:11:0a:99:f8:15:33:34:48:71:
f3:2d:53:e4:76:78:e0:ee:37:32:6a:b5:4d:8c:8e:50:33:82:
73:67:cd:f6:fa:c3:9e:99:33:64:88:ef:53:c8:e5:ef:99:ef:
13:67:51:e4:80:83:03:95:da:97:1d:33:bd:3c:ed:7d:d3:c6:
20:b2:96:b4:a7:14:f4:8a:c6:60:17:8a:ee:36:90:83:bf:95:
09:ee:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org