Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ZonJbhjrfJ0PxWzMInmRBiqZx0s.roa
File: ZonJbhjrfJ0PxWzMInmRBiqZx0s.roa (raw, json)
Hash identifier: TMYMwDgInAjIYeapmBLlnKmU/JpMKbF+E1LcN+QHoKo=
Subject key identifier: 66:89:C9:6E:18:EB:7C:9D:0F:C5:6C:CC:22:79:91:06:2A:99:C7:4B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A091DC7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ZonJbhjrfJ0PxWzMInmRBiqZx0s.roa
Signing time: Thu 05 May 2022 08:50:24 +0000
ROA not before: Thu 05 May 2022 08:50:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140107
IP address blocks: 45.81.236.0/22 maxlen: 32
45.82.204.0/23 maxlen: 32
45.12.234.0/23 maxlen: 32
185.182.63.0/24 maxlen: 24
45.12.162.0/24 maxlen: 32
193.16.8.0/24 maxlen: 24
185.240.236.0/22 maxlen: 24
84.39.190.0/24 maxlen: 32
45.81.10.0/23 maxlen: 32
45.14.47.0/24 maxlen: 32
185.172.144.0/24 maxlen: 24
185.253.249.0/24 maxlen: 24
45.83.252.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436805063 (0x1a091dc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 5 08:50:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6689c96e18eb7c9d0fc56ccc227991062a99c74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:3e:0d:9a:83:1b:de:07:28:69:40:58:4c:
c7:67:b6:b2:26:24:35:66:94:bf:3e:f5:98:08:83:
cc:86:a8:a0:5f:d2:23:b2:03:0a:87:af:0e:cf:ad:
99:0a:2f:f0:67:db:93:a8:e3:81:ac:a7:f0:7a:a2:
92:8f:c4:bc:08:40:8a:79:63:1c:63:cb:a4:8d:8e:
f9:bb:18:f0:7d:0d:14:1b:7a:a7:28:d9:73:8e:77:
f9:63:63:b2:52:ef:11:3c:da:1e:84:19:50:1d:ed:
85:32:07:00:24:49:c8:46:c6:82:87:25:f9:01:34:
8a:78:b2:45:bf:7c:9b:48:a2:07:04:7a:f5:a0:b5:
72:50:42:17:0e:3c:79:f5:af:7d:bc:c1:ab:32:06:
31:0d:0b:9f:27:58:29:cb:68:fb:d5:a4:58:cb:ac:
90:73:9f:d6:a7:1b:47:13:4f:8f:48:dc:3c:24:59:
2a:d1:bc:f3:df:be:78:2f:5e:11:00:2f:c9:b1:8e:
55:f0:0c:6b:4a:5b:b9:6a:18:ca:1e:bc:32:41:93:
d2:41:0c:98:be:f5:e8:eb:e1:b9:62:58:ec:cb:0b:
85:79:1e:ad:e9:0d:2d:44:21:53:61:26:46:a9:b2:
06:4a:fc:10:a3:48:65:9f:52:85:14:b6:0e:f8:21:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:C9:6E:18:EB:7C:9D:0F:C5:6C:CC:22:79:91:06:2A:99:C7:4B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ZonJbhjrfJ0PxWzMInmRBiqZx0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.162.0/24
45.12.234.0/23
45.14.47.0/24
45.81.10.0/23
45.81.236.0/22
45.82.204.0/23
45.83.252.0/23
84.39.190.0/24
185.172.144.0/24
185.182.63.0/24
185.240.236.0/22
185.253.249.0/24
193.16.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c4:0c:56:5a:6a:ca:eb:fd:77:08:29:ee:d1:0d:0a:63:da:
ab:05:00:c5:41:7e:37:81:d4:d8:09:8f:88:82:24:e2:a5:3c:
1f:b8:bd:be:23:be:2e:27:23:a2:11:ee:36:e0:f9:2b:20:18:
ca:dd:3f:cf:30:34:43:68:90:86:2e:de:3b:b1:15:38:41:cc:
31:dc:02:51:51:b6:a3:da:27:aa:00:47:5f:04:ea:cd:1b:a4:
6f:f5:23:91:26:54:3f:fe:fd:5a:57:39:c8:4d:1e:6f:61:98:
88:67:d2:dd:f0:e0:cd:31:95:25:00:5f:a6:55:15:12:6b:1a:
ce:39:6c:2c:43:60:93:9d:cb:9c:8a:cb:10:bf:c0:3f:3a:24:
fb:db:97:67:f9:c0:36:ca:d3:9d:55:b9:50:d9:3e:ef:26:ee:
4d:36:62:09:81:53:ed:e1:09:e3:8f:b1:4c:4f:53:d3:e4:52:
0e:f3:cd:49:53:fc:f2:cd:c2:43:eb:e2:f1:b6:2f:55:cc:c2:
72:af:30:5f:ca:a4:ec:b7:27:58:73:5c:33:2f:5d:0d:ea:47:
be:18:ef:7e:5a:10:c0:02:fc:86:fd:2f:5b:ea:d6:cd:a6:17:
b6:16:e0:38:57:09:42:24:df:8b:f1:d2:a9:f0:d2:ba:4b:a8:
b2:af:28:ac
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgIEGgkdxzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDUw
NTA4NTAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjY4OWM5NmUxOGVi
N2M5ZDBmYzU2Y2NjMjI3OTkxMDYyYTk5Yzc0YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM5jPg2agxveByhpQFhMx2e2siYkNWaUvz71mAiDzIaooF/S
I7IDCoevDs+tmQov8Gfbk6jjgayn8Hqiko/EvAhAinljHGPLpI2O+bsY8H0NFBt6
pyjZc453+WNjslLvETzaHoQZUB3thTIHACRJyEbGgocl+QE0iniyRb98m0iiBwR6
9aC1clBCFw48efWvfbzBqzIGMQ0LnydYKcto+9WkWMuskHOf1qcbRxNPj0jcPCRZ
KtG889++eC9eEQAvybGOVfAMa0pbuWoYyh68MkGT0kEMmL716OvhuWJY7MsLhXke
rekNLUQhU2EmRqmyBkr8EKNIZZ9ShRS2DvghHA8CAwEAAaOCAlEwggJNMB0GA1Ud
DgQWBBRmicluGOt8nQ/FbMwieZEGKpnHSzAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L1pvbkpiaGpyZkowUHhXek1Jbm1SQmlxWngwcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwVAQCAAEwTgMEAC0MogMEAS0M6gMEAC0OLwMEAS1R
CgMEAi1R7AMEAS1SzAMEAS1T/AMEAFQnvgMEALmskAMEALm2PwMEArnw7AMEALn9
+QMEAMEQCDANBgkqhkiG9w0BAQsFAAOCAQEAasQMVlpqyuv9dwgp7tENCmPaqwUA
xUF+N4HU2AmPiIIk4qU8H7i9viO+LicjohHuNuD5KyAYyt0/zzA0Q2iQhi7eO7EV
OEHMMdwCUVG2o9onqgBHXwTqzRukb/UjkSZUP/79Wlc5yE0eb2GYiGfS3fDgzTGV
JQBfplUVEmsazjlsLENgk53LnIrLEL/APzok+9uXZ/nANsrTnVW5UNk+7ybuTTZi
CYFT7eEJ44+xTE9T0+RSDvPNSVP88s3CQ+vi8bYvVczCcq8wX8qk7LcnWHNcMy9d
DepHvhjvfloQwAL8hv0vW+rWzaYXthbgOFcJQiTfi/HSqfDSukuosq8orA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org