Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ZkJM-2jGcQgraTqW26QA49LcN4E.roa
File: ZkJM-2jGcQgraTqW26QA49LcN4E.roa (raw, json)
Hash identifier: mqk0aSTaz+oqMRiK146mzG04Lb5NtxsnPvS37ArqlL0=
Subject key identifier: 66:42:4C:FB:68:C6:71:08:2B:69:3A:96:DB:A4:00:E3:D2:DC:37:81
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 0184DE069C637D9F6676909C5213E25D2AA4
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ZkJM-2jGcQgraTqW26QA49LcN4E.roa
Signing time: Sun 04 Dec 2022 16:44:45 +0000
ROA not before: Sun 04 Dec 2022 16:44:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200462
IP address blocks: 31.47.238.0/24 maxlen: 32
94.247.43.0/24 maxlen: 32
5.180.192.0/22 maxlen: 24
2.58.52.0/23 maxlen: 32
45.86.125.0/24 maxlen: 24
45.86.124.0/23 maxlen: 24
2a09:e1c0::/32 maxlen: 128
2a07:6fc0:10::/44 maxlen: 48
2a0e:de80::/29 maxlen: 48
2a00:f826:8::/48 maxlen: 48
2a0c:8900::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:de:06:9c:63:7d:9f:66:76:90:9c:52:13:e2:5d:2a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Dec 4 16:44:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66424cfb68c671082b693a96dba400e3d2dc3781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:e4:4f:af:e2:85:7b:39:54:1c:ad:5d:8e:
0f:a7:88:5f:74:f3:fb:c7:5b:1f:00:d8:b7:ac:ad:
b9:7d:1d:6a:42:8b:81:42:56:ed:63:fd:f3:da:4c:
3a:3b:ca:49:62:1e:4a:9e:9b:80:0f:d1:ea:d6:2a:
9f:ea:37:3a:c7:9c:c3:82:f1:3f:35:c7:48:34:8a:
ae:c4:86:53:2c:05:34:74:af:56:50:55:47:f8:e3:
65:cc:c3:f6:c6:c0:8a:1a:7d:42:91:b2:34:92:3a:
91:ee:3e:d0:0a:62:33:40:f4:a1:6a:90:0c:ed:7b:
bb:22:e5:cb:dc:50:15:87:a8:ba:7f:2a:90:13:fe:
2d:33:9d:8a:6c:95:b3:9f:79:85:9c:88:42:f6:56:
f1:17:49:88:02:72:ad:94:62:0e:74:3c:55:35:ed:
3d:42:e8:7e:c6:0a:fe:7d:68:9e:3f:bb:f9:a4:c3:
05:e9:75:08:f3:af:8f:ef:65:43:eb:3f:39:0f:c4:
25:73:d9:f8:02:91:2b:2b:dd:7f:08:5e:2e:99:78:
8c:36:65:43:45:ab:04:a7:84:f3:74:9d:28:bc:88:
61:1e:8c:cb:55:c3:07:07:93:d1:1c:e6:67:7a:40:
4d:c3:9d:c4:ef:6f:50:e8:84:57:78:e0:e8:61:7d:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:42:4C:FB:68:C6:71:08:2B:69:3A:96:DB:A4:00:E3:D2:DC:37:81
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ZkJM-2jGcQgraTqW26QA49LcN4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.52.0/23
5.180.192.0/22
31.47.238.0/24
45.86.124.0/23
94.247.43.0/24
IPv6:
2a00:f826:8::/48
2a07:6fc0:10::/44
2a09:e1c0::/32
2a0c:8900::/29
2a0e:de80::/29
Signature Algorithm: sha256WithRSAEncryption
a0:a2:45:5b:38:3c:63:3d:90:e9:4a:f7:ad:93:79:2c:dc:5e:
9c:ed:72:06:08:54:e5:d9:74:c1:22:d1:25:fa:48:89:bd:67:
1d:e4:30:18:da:e3:f1:6d:ff:21:3f:60:b0:ab:33:f1:cc:99:
71:42:ab:38:5f:ac:a2:10:d9:59:61:b4:6d:fa:a6:27:17:2f:
53:9f:be:0f:c6:8a:ce:77:f5:11:e3:54:cc:67:f4:ab:5d:3d:
a9:7d:6a:1b:d0:e9:af:8d:a5:53:76:80:78:69:e0:f5:a6:84:
72:6b:8f:e9:d6:ee:36:01:60:4f:47:1a:68:e4:0d:57:17:58:
44:65:57:02:27:6e:3a:9d:90:3f:80:50:7f:c3:5d:ad:5d:e3:
0b:20:32:ae:c2:5c:db:7d:c2:22:57:3a:43:88:fb:05:ab:ff:
e4:06:a7:3d:22:2a:fc:39:95:c0:04:43:8a:f8:af:02:18:0e:
47:ac:58:55:ef:e3:81:e1:03:f8:ec:18:02:0d:ee:64:b8:37:
a0:e6:4a:62:76:fd:ff:7d:0e:dc:8c:23:7f:66:8a:5c:32:43:
21:4f:90:1f:98:f2:4c:8f:9b:7a:d7:6b:27:b6:ef:41:b1:d2:
e9:5d:32:0d:73:56:a9:11:cf:14:53:ee:8a:1d:f5:44:a4:a2:
8a:b6:cc:24
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYTeBpxjfZ9mdpCcUhPiXSqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjIxMjA0MTY0NDQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjQyNGNmYjY4YzY3MTA4MmI2OTNhOTZkYmE0MDBlM2QyZGMzNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslDkT6/ihXs5VBytXY4Pp4hfdPP7
x1sfANi3rK25fR1qQouBQlbtY/3z2kw6O8pJYh5KnpuAD9Hq1iqf6jc6x5zDgvE/
NcdINIquxIZTLAU0dK9WUFVH+ONlzMP2xsCKGn1CkbI0kjqR7j7QCmIzQPShapAM
7Xu7IuXL3FAVh6i6fyqQE/4tM52KbJWzn3mFnIhC9lbxF0mIAnKtlGIOdDxVNe09
Quh+xgr+fWieP7v5pMMF6XUI86+P72VD6z85D8Qlc9n4ApErK91/CF4umXiMNmVD
RasEp4TzdJ0ovIhhHozLVcMHB5PRHOZnekBNw53E729Q6IRXeODoYX3HAQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFGZCTPtoxnEIK2k6ltukAOPS3DeBMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvWmtKTS0yakdjUWdyYVRxVzI2UUE0OUxjTjRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAkBAIAATAeAwQBAjo0AwQC
BbTAAwQAHy/uAwQBLVZ8AwQAXvcrMC0EAgACMCcDBwAqAPgmAAgDBwQqB2/AABAD
BQAqCeHAAwUDKgyJAAMFAyoO3oAwDQYJKoZIhvcNAQELBQADggEBAKCiRVs4PGM9
kOlK962TeSzcXpztcgYIVOXZdMEi0SX6SIm9Zx3kMBja4/Ft/yE/YLCrM/HMmXFC
qzhfrKIQ2VlhtG36picXL1Ofvg/Gis539RHjVMxn9KtdPal9ahvQ6a+NpVN2gHhp
4PWmhHJrj+nW7jYBYE9HGmjkDVcXWERlVwInbjqdkD+AUH/DXa1d4wsgMq7CXNt9
wiJXOkOI+wWr/+QGpz0iKvw5lcAEQ4r4rwIYDkesWFXv44HhA/jsGAIN7mS4N6Dm
SmJ2/f99DtyMI39milwyQyFPkB+Y8kyPm3rXaye270Gx0uldMg1zVqkRzxRT7ood
9USkooq2zCQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org