Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/ZjMxUXaYZAOYCCMMVVbX16AL6HI.roa
File: ZjMxUXaYZAOYCCMMVVbX16AL6HI.roa (raw, json)
Hash identifier: JGesydW8ISSVm5EN3bH+2HEywR50Egwg0orLK6qSUg0=
Subject key identifier: 66:33:31:51:76:98:64:03:98:08:23:0C:55:56:D7:D7:A0:0B:E8:72
Certificate issuer: /CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Certificate serial: 08FF05EE
Authority key identifier: 9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/ZjMxUXaYZAOYCCMMVVbX16AL6HI.roa
Signing time: Sat 01 Jan 2022 13:59:08 +0000
ROA not before: Sat 01 Jan 2022 13:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50231
IP address blocks: 81.30.136.0/23 maxlen: 23
81.30.140.0/22 maxlen: 22
193.150.44.0/22 maxlen: 22
193.150.42.0/23 maxlen: 23
109.95.232.0/21 maxlen: 21
193.34.220.0/22 maxlen: 22
193.17.54.0/24 maxlen: 24
109.196.48.0/20 maxlen: 20
193.27.210.0/23 maxlen: 23
91.123.208.0/20 maxlen: 20
213.5.136.0/21 maxlen: 21
80.65.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150930926 (0x8ff05ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ec448e1b1e0ebe4e976b120d398fe74d5e135f8
Validity
Not Before: Jan 1 13:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66333151769864039808230c5556d7d7a00be872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:ce:a0:76:18:93:cc:3f:25:25:85:19:dc:
62:78:bc:bd:c5:87:c3:4b:d2:05:cc:16:d9:be:37:
3d:5b:72:47:53:f7:b3:8d:6e:08:11:95:c1:0d:6b:
8c:06:93:29:1e:ad:ff:a2:c4:64:59:2e:cb:7f:3b:
42:5e:22:8e:a0:a2:df:29:d5:c2:d0:67:07:9f:0d:
18:79:4b:7c:de:dd:dc:b4:f9:da:b1:98:e4:9b:68:
e9:7e:32:8b:25:05:89:0f:eb:f8:93:54:98:7d:30:
34:35:a1:67:c0:62:0b:a3:2c:1c:60:33:85:77:0a:
fd:fe:19:a9:3d:59:9e:be:3f:47:e3:ea:03:a7:c6:
e8:98:f3:8e:3d:79:b2:72:04:a9:63:fe:73:cf:74:
66:76:a8:bf:50:2f:91:1f:e5:23:1a:fb:b9:02:65:
f4:f0:93:16:05:26:f9:a8:95:e6:d8:a2:45:39:31:
4d:d7:98:2f:3f:01:fc:86:27:30:6b:ce:20:93:59:
08:7f:5c:21:0a:c8:e7:51:61:9f:82:53:bf:57:c8:
06:0a:14:15:94:32:d8:fd:0a:e4:56:97:bc:91:3e:
30:79:14:e4:6e:41:76:47:dc:1b:21:b7:34:1e:f5:
16:da:69:46:38:69:f5:bb:31:46:ab:60:b3:83:06:
95:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:31:51:76:98:64:03:98:08:23:0C:55:56:D7:D7:A0:0B:E8:72
X509v3 Authority Key Identifier:
keyid:9E:C4:48:E1:B1:E0:EB:E4:E9:76:B1:20:D3:98:FE:74:D5:E1:35:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nsRI4bHg6-TpdrEg05j-dNXhNfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/ZjMxUXaYZAOYCCMMVVbX16AL6HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f4ca79-384f-47f2-aed8-a8d00383bcdd/1/nsRI4bHg6-TpdrEg05j-dNXhNfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.65.212.0/22
81.30.136.0/23
81.30.140.0/22
91.123.208.0/20
109.95.232.0/21
109.196.48.0/20
193.17.54.0/24
193.27.210.0/23
193.34.220.0/22
193.150.42.0-193.150.47.255
213.5.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:dd:e4:b3:6b:dd:1f:32:81:1c:47:b9:c4:e7:0f:91:4d:ed:
2a:ad:e2:3e:d3:74:f8:d1:08:b0:4d:b9:ff:4c:ec:01:84:c5:
de:76:b9:d1:77:80:99:a8:35:e9:4e:c6:9d:43:92:1f:09:98:
66:e9:36:b9:5c:fe:81:9a:ec:6a:d2:83:7f:b8:d8:d9:3b:de:
e4:b6:10:1f:be:b1:81:98:b3:43:48:46:58:b5:30:c1:15:00:
2c:30:cb:41:79:da:eb:15:a4:3d:81:89:61:b4:5f:97:5e:21:
a6:38:60:94:a2:cd:5c:2e:02:94:4b:e5:9e:7c:8e:b9:85:16:
2c:46:a9:df:86:a9:58:46:22:ec:1a:7c:31:b8:04:97:5a:2f:
97:34:6c:9e:1c:9a:79:09:1a:73:56:27:37:8c:ef:95:36:14:
f9:94:39:49:ee:8b:9c:c0:3d:1e:00:ff:35:66:2d:1d:29:6d:
fb:e7:7b:72:92:e7:5c:73:57:80:1f:b1:aa:44:00:aa:97:b8:
de:0c:b7:5d:1c:d3:ed:81:cb:e0:95:ba:06:82:e3:4b:80:87:
be:2a:e3:6e:3f:3d:95:f7:86:a1:db:41:aa:67:ed:8f:80:20:
20:f4:15:6f:c4:de:f2:99:28:20:9a:4f:45:5b:47:a7:27:1d:
8e:55:ac:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:03 2024 by rpki-client on console-fra.rpki-client.org