Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zG5YyfTKTcO-qtDGfzU7ZlcqV2U.roa
File: zG5YyfTKTcO-qtDGfzU7ZlcqV2U.roa (raw, json)
Hash identifier: hVclmfwXU1NBga5wT02y2MpjHMlzbtf9ritKNiXduDM=
Subject key identifier: CC:6E:58:C9:F4:CA:4D:C3:BE:AA:D0:C6:7F:35:3B:66:57:2A:57:65
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 197E4E4D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zG5YyfTKTcO-qtDGfzU7ZlcqV2U.roa
Signing time: Wed 06 Apr 2022 18:34:06 +0000
ROA not before: Wed 06 Apr 2022 18:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7489
IP address blocks: 185.133.192.0/24 maxlen: 24
185.117.22.0/24 maxlen: 24
185.122.56.0/24 maxlen: 32
185.122.57.0/24 maxlen: 24
185.122.59.0/24 maxlen: 32
2a06:8e00::/48 maxlen: 48
2a06:8ec0:3::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427707981 (0x197e4e4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 6 18:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc6e58c9f4ca4dc3beaad0c67f353b66572a5765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:9d:a3:df:77:31:67:a8:8e:a0:16:07:20:
01:51:75:a2:22:7e:e0:ee:bd:90:25:c7:ab:f4:e2:
a9:13:e6:dd:02:c2:47:cd:51:10:50:e2:e5:3c:09:
1c:0c:a7:9f:c6:fe:31:ca:04:fb:f6:74:66:91:8f:
0d:9a:b2:09:11:3b:e8:a8:e2:2f:ee:30:45:20:c9:
47:c0:7c:bd:0a:1b:3c:b3:cc:96:6e:df:0b:b2:23:
3c:be:63:90:df:8a:a0:33:b9:67:e4:c6:99:ef:39:
b6:b4:06:3e:41:ac:8f:52:ab:3f:aa:86:b6:ee:9b:
a2:71:89:1f:93:eb:d2:2d:5d:37:e7:53:29:e2:71:
e5:9e:c7:cd:a3:c3:89:5d:b3:8e:5e:93:eb:fd:73:
87:91:b1:66:cc:98:7e:bd:01:6a:ed:f6:d1:a8:ac:
1a:7f:db:1c:49:57:f5:50:d1:90:a0:26:78:35:f6:
64:58:97:54:7a:52:07:ae:85:63:5e:04:47:04:b4:
2d:c2:da:ed:dc:f7:bc:75:71:ee:a8:2a:ea:e3:66:
05:2f:6d:78:68:9d:b9:f5:12:78:dd:0a:87:a1:8b:
d6:98:cc:89:4e:66:ca:5d:b1:29:b1:a1:05:9e:8f:
71:64:52:70:68:c8:69:33:12:8a:78:4e:51:9c:80:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6E:58:C9:F4:CA:4D:C3:BE:AA:D0:C6:7F:35:3B:66:57:2A:57:65
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zG5YyfTKTcO-qtDGfzU7ZlcqV2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.22.0/24
185.122.56.0/23
185.122.59.0/24
185.133.192.0/24
IPv6:
2a06:8e00::/48
2a06:8ec0:3::/48
Signature Algorithm: sha256WithRSAEncryption
70:b7:17:60:73:1d:5a:29:7b:09:a7:35:c5:c1:d5:90:d0:50:
e4:3c:81:93:55:34:88:98:2d:d4:bb:2d:98:26:6d:12:27:b7:
12:a6:cd:2b:a9:06:99:7b:49:7b:67:44:3a:78:93:7c:53:26:
e8:c6:f2:d0:da:90:2a:a4:4d:28:92:e2:4b:31:e9:c8:02:09:
3a:d0:ad:fd:cc:c8:e0:0d:7a:f7:62:ba:24:64:e4:11:6a:a4:
10:73:34:22:fa:81:27:ab:9e:11:91:35:36:06:65:af:bd:23:
89:c9:36:e3:24:04:a5:ad:f5:95:04:f3:b3:5b:83:9a:8d:33:
8a:6e:2d:c8:03:54:8c:a9:93:16:9b:5d:a6:ef:a9:3b:cb:a6:
af:ab:58:f2:7c:3d:2d:c8:c7:24:bb:6d:1d:5f:18:ec:e1:50:
b3:88:fa:99:1a:bf:c9:64:d8:c5:52:98:52:ad:6e:57:02:2e:
1e:55:44:5c:31:14:e8:76:98:73:c3:05:d5:99:7c:04:81:f3:
4a:7f:6c:1f:c2:47:05:15:88:d9:e5:f0:6d:1a:31:97:0d:ad:
d4:82:de:0e:4d:6e:cd:c7:a0:d1:16:8f:08:8f:a6:da:fc:05:
96:53:bd:6b:df:f0:3a:81:b9:0d:9a:96:7c:42:48:03:c9:de:
f8:a1:f8:36
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEGX5OTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDQw
NjE4MzQwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2M2ZTU4YzlmNGNh
NGRjM2JlYWFkMGM2N2YzNTNiNjY1NzJhNTc2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALsOnaPfdzFnqI6gFgcgAVF1oiJ+4O69kCXHq/TiqRPm3QLC
R81REFDi5TwJHAynn8b+McoE+/Z0ZpGPDZqyCRE76KjiL+4wRSDJR8B8vQobPLPM
lm7fC7IjPL5jkN+KoDO5Z+TGme85trQGPkGsj1KrP6qGtu6bonGJH5Pr0i1dN+dT
KeJx5Z7HzaPDiV2zjl6T6/1zh5GxZsyYfr0Bau320aisGn/bHElX9VDRkKAmeDX2
ZFiXVHpSB66FY14ERwS0LcLa7dz3vHVx7qgq6uNmBS9teGidufUSeN0Kh6GL1pjM
iU5myl2xKbGhBZ6PcWRScGjIaTMSinhOUZyAb9ECAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBTMbljJ9MpNw76q0MZ/NTtmVypXZTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L3pHNVl5ZlRLVGNPLXF0REdmelU3WmxjcVYyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowHgQCAAEwGAMEALl1FgMEAbl6OAMEALl6OwMEALmF
wDAYBAIAAjASAwcAKgaOAAAAAwcAKgaOwAADMA0GCSqGSIb3DQEBCwUAA4IBAQBw
txdgcx1aKXsJpzXFwdWQ0FDkPIGTVTSImC3Uuy2YJm0SJ7cSps0rqQaZe0l7Z0Q6
eJN8UyboxvLQ2pAqpE0okuJLMenIAgk60K39zMjgDXr3YrokZOQRaqQQczQi+oEn
q54RkTU2BmWvvSOJyTbjJASlrfWVBPOzW4OajTOKbi3IA1SMqZMWm12m76k7y6av
q1jyfD0tyMcku20dXxjs4VCziPqZGr/JZNjFUphSrW5XAi4eVURcMRTodphzwwXV
mXwEgfNKf2wfwkcFFYjZ5fBtGjGXDa3Ugt4OTW7Nx6DRFo8Ij6ba/AWWU71r3/A6
gbkNmpZ8QkgDyd74ofg2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org