Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z0aGLPolXYbyGZPtSBdmmPIKebY.roa
File: z0aGLPolXYbyGZPtSBdmmPIKebY.roa (raw, json)
Hash identifier: 4pH0kP9qO7JV+Q5QUKweF6h91Si1t8DVYbCKaTvsIeQ=
Subject key identifier: CF:46:86:2C:FA:25:5D:86:F2:19:93:ED:48:17:66:98:F2:0A:79:B6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018505A423094A8750081EE3FC1664B239D7
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z0aGLPolXYbyGZPtSBdmmPIKebY.roa
Signing time: Mon 12 Dec 2022 09:22:00 +0000
ROA not before: Mon 12 Dec 2022 09:22:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8263
IP address blocks: 193.201.228.0/22 maxlen: 24
188.162.0.0/16 maxlen: 24
195.16.96.0/19 maxlen: 24
178.176.225.0/24 maxlen: 24
178.176.224.0/24 maxlen: 24
178.176.226.0/24 maxlen: 24
195.5.128.0/19 maxlen: 24
195.78.116.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:05:a4:23:09:4a:87:50:08:1e:e3:fc:16:64:b2:39:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 09:22:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf46862cfa255d86f21993ed48176698f20a79b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:88:9e:72:1d:08:eb:68:5e:3c:12:bb:89:6e:
53:e1:41:ab:ce:8a:bf:1e:4c:11:e3:06:3d:45:dc:
6c:97:54:14:d4:e5:49:bf:70:b8:a4:19:f1:bf:6f:
e8:2c:f0:81:73:bb:ae:60:6f:be:e0:a3:43:4a:32:
21:04:a8:66:a5:7a:de:4f:d0:a5:a5:55:f1:d8:18:
cf:18:c8:c4:06:d2:1c:e9:c0:2c:58:05:19:75:82:
d9:1b:c0:78:a1:34:d9:35:43:5c:78:db:4d:a3:f8:
0a:34:ee:6c:39:d7:95:e7:b0:f3:a4:c8:54:80:3f:
98:7f:9b:22:32:4e:16:5e:d8:01:6f:a7:57:71:9e:
f7:b5:3f:40:b6:0c:2b:a2:67:9d:46:d0:31:09:07:
0f:10:06:7e:6e:92:75:34:57:17:1d:a8:c5:21:d9:
43:4d:04:d6:4c:f1:8f:0c:7e:8b:95:d0:b6:06:34:
f2:0c:20:15:0a:df:d1:da:96:87:a0:2b:dc:f9:70:
24:98:89:af:29:1b:63:08:bf:fc:75:b8:4f:7e:9b:
43:51:1f:6e:c7:6f:c4:e5:4f:f7:a4:8a:45:dc:54:
7e:ff:1f:0e:ed:19:18:67:cd:df:c0:88:2c:20:10:
f9:44:94:fe:d0:df:34:61:89:e8:1f:ff:2c:06:51:
c8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:46:86:2C:FA:25:5D:86:F2:19:93:ED:48:17:66:98:F2:0A:79:B6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/z0aGLPolXYbyGZPtSBdmmPIKebY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.224.0-178.176.226.255
188.162.0.0/16
193.201.228.0/22
195.5.128.0/19
195.16.96.0/19
195.78.116.0/23
Signature Algorithm: sha256WithRSAEncryption
86:2f:98:79:d5:81:5d:95:57:36:2d:8d:cf:3e:02:27:0f:44:
4f:4e:01:dc:ac:d6:6c:4a:af:30:a2:7d:77:da:3e:95:ca:12:
13:8f:f6:f9:c2:4e:1e:8d:6c:ab:9f:38:2d:ea:18:67:f5:4b:
50:26:01:56:93:89:3c:52:92:b0:18:b1:1b:3b:0d:38:3e:a1:
7e:c0:84:c5:92:d1:51:ba:77:75:96:df:9a:63:2e:b5:c0:d1:
35:07:4b:76:c8:16:30:6a:47:99:29:07:55:4e:63:05:ab:7f:
36:19:e5:34:31:94:68:6f:81:03:d9:6d:85:5a:6c:d7:f8:f8:
f7:d6:8c:d3:d8:95:13:e7:54:91:7e:e9:52:7b:51:88:4e:25:
4d:1d:0a:32:4a:50:c0:c5:00:52:ae:55:7e:06:51:bc:d6:43:
51:c9:de:93:bd:32:9c:9f:d4:c6:7f:1e:87:5b:b7:af:2b:22:
58:27:96:9b:94:7d:0d:e8:b0:1d:bf:0d:bc:c1:f3:eb:0b:b9:
48:63:60:34:52:1f:0b:cf:07:ae:be:61:c5:0f:bc:87:d6:37:
48:2f:c8:97:cd:c4:01:c4:bf:8a:9a:3f:b2:37:d7:2a:ab:ec:
d8:fb:09:f2:97:ff:b1:d5:86:ef:15:6d:12:58:b9:5f:7f:ed:
fa:79:66:a9
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAYUFpCMJSodQCB7j/BZksjnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx
Nzg1YzAwHhcNMjIxMjEyMDkyMjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjQ2ODYyY2ZhMjU1ZDg2ZjIxOTkzZWQ0ODE3NjY5OGYyMGE3OWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYiech0I62hePBK7iW5T4UGrzoq/
HkwR4wY9Rdxsl1QU1OVJv3C4pBnxv2/oLPCBc7uuYG++4KNDSjIhBKhmpXreT9Cl
pVXx2BjPGMjEBtIc6cAsWAUZdYLZG8B4oTTZNUNceNtNo/gKNO5sOdeV57DzpMhU
gD+Yf5siMk4WXtgBb6dXcZ73tT9AtgwromedRtAxCQcPEAZ+bpJ1NFcXHajFIdlD
TQTWTPGPDH6LldC2BjTyDCAVCt/R2paHoCvc+XAkmImvKRtjCL/8dbhPfptDUR9u
x2/E5U/3pIpF3FR+/x8O7RkYZ83fwIgsIBD5RJT+0N80YYnoH/8sBlHImQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFM9Ghiz6JV2G8hmT7UgXZpjyCnm2MB8GA1UdIwQY
MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct
ODllNTZjODBkMWQwLzEvejBhR0xQb2xYWWJ5R1pQdFNCZG1tUElLZWJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw
LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArMAwDBAWysOAD
BACysOIDAwC8ogMEAsHJ5AMEBcMFgAMEBcMQYAMEAcNOdDANBgkqhkiG9w0BAQsF
AAOCAQEAhi+YedWBXZVXNi2Nzz4CJw9ET04B3KzWbEqvMKJ9d9o+lcoSE4/2+cJO
Ho1sq584LeoYZ/VLUCYBVpOJPFKSsBixGzsNOD6hfsCExZLRUbp3dZbfmmMutcDR
NQdLdsgWMGpHmSkHVU5jBat/NhnlNDGUaG+BA9lthVps1/j499aM09iVE+dUkX7p
UntRiE4lTR0KMkpQwMUAUq5VfgZRvNZDUcnek70ynJ/Uxn8eh1u3rysiWCeWm5R9
DeiwHb8NvMHz6wu5SGNgNFIfC88Hrr5hxQ+8h9Y3SC/Il83EAcS/ipo/sjfXKqvs
2PsJ8pf/sdWG7xVtEli5X3/t+nlmqQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:36 2024 by rpki-client on console-ams.rpki-client.org