Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Zn_TdWb-VlayhlUpoD9i11tMjdM.roa
File: Zn_TdWb-VlayhlUpoD9i11tMjdM.roa (raw, json)
Hash identifier: YJqXggrew3WU4sxTYuQH6ku/zozQoUB15YttxomHNwQ=
Subject key identifier: 66:7F:D3:75:66:FE:56:56:B2:86:55:29:A0:3F:62:D7:5B:4C:8D:D3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01838D848F788B01E16C09DC14CDFA454A68
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Zn_TdWb-VlayhlUpoD9i11tMjdM.roa
Signing time: Fri 30 Sep 2022 08:30:18 +0000
ROA not before: Fri 30 Sep 2022 08:30:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202578
IP address blocks: 193.34.234.0/24 maxlen: 24
185.233.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:84:8f:78:8b:01:e1:6c:09:dc:14:cd:fa:45:4a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 30 08:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=667fd37566fe5656b2865529a03f62d75b4c8dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:4b:cb:2f:c5:ce:f6:21:dc:3f:df:f0:3c:
e2:aa:6c:65:45:39:4b:15:42:ea:53:2b:46:94:fd:
3c:9e:19:97:a1:53:39:4b:12:99:96:89:4b:26:03:
1d:eb:e6:b7:f9:86:65:21:09:88:1a:e3:c9:5a:af:
bd:e1:8b:bc:10:42:d7:60:bf:9e:d8:3f:d6:d2:84:
89:d4:b5:85:8c:d1:6f:16:01:0a:79:6f:be:30:ca:
65:8e:31:fe:51:5c:19:7e:52:cb:d9:eb:9d:61:ea:
dc:ad:a2:b7:90:32:96:fb:3a:8c:57:0b:cf:fb:56:
86:11:80:be:a9:97:ee:7c:6e:a0:98:38:a7:d0:fa:
a9:21:96:12:2a:d4:27:88:57:55:b5:84:68:ab:27:
49:a1:d7:a8:45:aa:80:21:c2:2a:0a:bc:23:17:0a:
b1:b9:ce:3a:63:dd:21:f9:12:aa:80:5c:83:89:49:
4b:b9:69:bc:3e:1c:a5:66:72:a2:2f:30:6d:38:79:
a0:b5:87:a7:1a:1d:18:3a:c4:6e:5c:39:03:ce:4a:
f8:31:bb:3a:61:d1:15:37:fc:e5:b8:3d:e0:3f:a1:
e9:1b:f3:18:7b:ce:85:6e:28:33:79:81:96:24:74:
65:39:25:65:2d:e5:09:1f:24:06:54:55:0d:82:fa:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7F:D3:75:66:FE:56:56:B2:86:55:29:A0:3F:62:D7:5B:4C:8D:D3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Zn_TdWb-VlayhlUpoD9i11tMjdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.201.0/24
193.34.234.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:f4:d3:92:23:34:87:24:0c:43:ef:5e:60:c6:ad:3b:e5:d3:
f6:71:55:b2:d3:a1:d3:89:ce:04:45:1d:24:b6:4a:d6:68:9b:
5c:55:32:c2:6c:48:fd:81:e2:76:bd:58:c4:81:88:42:e9:19:
ad:d3:90:5e:7a:b0:2b:dc:6a:52:86:42:82:c1:29:16:93:f9:
55:23:59:33:6b:a7:41:3f:a4:b4:3d:ea:c4:5b:ea:a9:c1:85:
1e:be:4b:8d:85:b3:fe:a1:66:d2:70:20:35:68:e2:de:f9:e0:
30:53:f1:f1:1f:db:35:00:a1:0d:7c:7a:43:62:a7:51:5d:e5:
8e:f0:c0:f1:8d:9c:a6:89:48:ee:89:d0:e1:f0:3e:ba:0d:d7:
10:91:b8:2a:bc:1b:26:3c:42:4f:9b:d6:56:cc:e0:0a:bb:49:
8d:d0:94:34:78:46:61:64:7a:d0:a3:02:0e:59:1f:e9:3c:ff:
52:c4:93:d0:74:51:37:f9:3a:14:24:45:0d:61:7e:55:1d:bb:
8c:6a:ca:8f:e5:60:4a:ac:cc:e5:17:53:18:bd:92:c1:2b:ae:
5d:0b:59:69:e4:d2:1e:01:1d:13:c8:0d:7d:f3:28:91:7e:83:
d2:b8:a6:85:64:9b:4d:9e:28:cb:1d:92:d8:96:32:52:3e:f7:
ec:45:a6:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYONhI94iwHhbAncFM36RUpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjIwOTMwMDgzMDE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjdmZDM3NTY2ZmU1NjU2YjI4NjU1MjlhMDNmNjJkNzViNGM4ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI1Lyy/FzvYh3D/f8DziqmxlRTlL
FULqUytGlP08nhmXoVM5SxKZlolLJgMd6+a3+YZlIQmIGuPJWq+94Yu8EELXYL+e
2D/W0oSJ1LWFjNFvFgEKeW++MMpljjH+UVwZflLL2eudYercraK3kDKW+zqMVwvP
+1aGEYC+qZfufG6gmDin0PqpIZYSKtQniFdVtYRoqydJodeoRaqAIcIqCrwjFwqx
uc46Y90h+RKqgFyDiUlLuWm8PhylZnKiLzBtOHmgtYenGh0YOsRuXDkDzkr4Mbs6
YdEVN/zluD3gP6HpG/MYe86FbigzeYGWJHRlOSVlLeUJHyQGVFUNgvrBKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGZ/03Vm/lZWsoZVKaA/YtdbTI3TMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvWm5fVGRXYi1WbGF5aGxVcG9EOWkxMXRNamRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuenJAwQA
wSLqMA0GCSqGSIb3DQEBCwUAA4IBAQC99NOSIzSHJAxD715gxq075dP2cVWy06HT
ic4ERR0ktkrWaJtcVTLCbEj9geJ2vVjEgYhC6Rmt05BeerAr3GpShkKCwSkWk/lV
I1kza6dBP6S0PerEW+qpwYUevkuNhbP+oWbScCA1aOLe+eAwU/HxH9s1AKENfHpD
YqdRXeWO8MDxjZymiUjuidDh8D66DdcQkbgqvBsmPEJPm9ZWzOAKu0mN0JQ0eEZh
ZHrQowIOWR/pPP9SxJPQdFE3+ToUJEUNYX5VHbuMasqP5WBKrMzlF1MYvZLBK65d
C1lp5NIeAR0TyA198yiRfoPSuKaFZJtNnijLHZLYljJSPvfsRabk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org