Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/ZgAVKNrl8GH-Pwc0-e9F6_nn6nE.roa
File: ZgAVKNrl8GH-Pwc0-e9F6_nn6nE.roa (raw, json)
Hash identifier: AmIYWk8r3fbA2+O0va9nU1Mnyks7ERVwBpDyIfdYcGs=
Subject key identifier: 66:00:15:28:DA:E5:F0:61:FE:3F:07:34:F9:EF:45:EB:F9:E7:EA:71
Certificate issuer: /CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Certificate serial: 01850D34F70BD9F2FB01ADA733304AA95439
Authority key identifier: 4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/ZgAVKNrl8GH-Pwc0-e9F6_nn6nE.roa
Signing time: Tue 13 Dec 2022 20:37:32 +0000
ROA not before: Tue 13 Dec 2022 20:37:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197444
IP address blocks: 91.217.52.0/23 maxlen: 23
91.221.148.0/23 maxlen: 23
2001:67c:2038::/48 maxlen: 48
2a13:50c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0d:34:f7:0b:d9:f2:fb:01:ad:a7:33:30:4a:a9:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70a3a6c4a85725037598b3913e21869dbdd38d
Validity
Not Before: Dec 13 20:37:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66001528dae5f061fe3f0734f9ef45ebf9e7ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:f2:5f:88:1e:40:c5:52:44:01:55:a9:2d:
fd:b7:e1:96:06:08:12:dc:36:ee:12:75:2c:4d:27:
7f:a8:64:54:cb:18:e9:31:8e:34:2a:ba:65:2b:4d:
94:68:08:80:27:cd:86:23:81:07:8a:ba:8f:2a:79:
78:9a:27:ab:c7:b4:ee:d4:f2:0b:6d:5f:27:92:a3:
3c:7e:a8:81:b3:67:49:dd:d6:87:d7:35:6d:f9:e0:
01:c8:ec:e5:d8:b7:39:a7:82:8f:4d:9e:60:68:86:
82:4f:8b:1c:54:78:d7:64:76:03:92:0f:86:f5:00:
d7:e2:41:04:c1:63:cb:a7:0e:31:c2:ca:cb:64:6e:
40:7e:37:64:07:73:8f:bc:f8:30:5f:55:eb:eb:50:
76:bf:74:8f:2f:2c:90:b5:f8:95:5f:c8:d0:34:36:
6b:2d:e9:87:ac:0b:01:82:a1:61:09:33:2a:28:69:
69:82:c1:93:05:74:70:eb:f8:7d:1b:b9:eb:bf:1c:
5d:11:6f:f1:8a:16:86:17:e0:6d:01:05:a1:1c:5f:
41:f5:98:ce:1f:bd:92:30:0a:32:9a:0b:da:26:9f:
ad:f1:5c:e6:d5:bd:24:88:44:72:b6:d7:b8:6d:22:
a4:d3:a8:f8:c0:f0:25:db:46:d8:7e:d9:23:34:b2:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:15:28:DA:E5:F0:61:FE:3F:07:34:F9:EF:45:EB:F9:E7:EA:71
X509v3 Authority Key Identifier:
keyid:4B:70:A3:A6:C4:A8:57:25:03:75:98:B3:91:3E:21:86:9D:BD:D3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3CjpsSoVyUDdZizkT4hhp29040.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/ZgAVKNrl8GH-Pwc0-e9F6_nn6nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dc7010-19f9-4768-a615-4825b29dd572/1/S3CjpsSoVyUDdZizkT4hhp29040.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.52.0/23
91.221.148.0/23
IPv6:
2001:67c:2038::/48
2a13:50c0::/29
Signature Algorithm: sha256WithRSAEncryption
04:54:4d:31:4f:6c:bf:e4:a7:f9:2f:7f:91:10:4f:06:fa:05:
81:18:93:5f:84:f0:03:f6:23:19:a4:d9:42:7e:15:c3:f3:e1:
06:20:10:38:3c:ed:b8:bb:43:1d:dc:0e:05:72:c7:78:db:54:
23:94:34:46:87:86:c4:98:92:e5:2c:ea:87:98:6e:cf:b1:a7:
71:3b:5e:35:7f:2c:67:21:2e:34:cd:09:6b:14:b8:18:02:24:
31:a7:9f:ed:64:3c:48:56:88:1a:e8:e9:08:fe:19:71:38:37:
34:98:77:9e:ee:8c:65:10:20:bf:eb:76:87:e5:6f:5a:ee:4b:
88:ea:d9:55:83:b5:a7:ff:20:c6:74:9d:b4:67:4f:66:50:0d:
ca:aa:02:34:d4:6d:77:6f:56:9b:b0:71:31:bf:4a:b6:e1:4a:
93:a7:48:4a:58:78:7e:38:8c:e6:31:34:ec:d5:e6:03:7a:85:
a6:34:72:14:d1:cf:22:d1:c4:33:bb:51:67:c4:1f:fe:8d:f0:
1b:6c:4a:d7:88:da:12:00:e1:dd:6d:93:7b:69:4c:84:0f:a3:
9d:d0:67:b8:48:42:ec:d9:03:24:2d:8b:34:7a:0f:90:3e:be:
71:b8:ed:de:9b:8b:38:89:1d:8b:f6:2e:91:22:48:a9:54:65:
2b:9b:51:fe
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYUNNPcL2fL7Aa2nMzBKqVQ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBhM2E2YzRhODU3MjUwMzc1OThiMzkxM2UyMTg2OWRi
ZGQzOGQwHhcNMjIxMjEzMjAzNzMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjAwMTUyOGRhZTVmMDYxZmUzZjA3MzRmOWVmNDVlYmY5ZTdlYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vbyX4geQMVSRAFVqS39t+GWBggS
3DbuEnUsTSd/qGRUyxjpMY40KrplK02UaAiAJ82GI4EHirqPKnl4mierx7Tu1PIL
bV8nkqM8fqiBs2dJ3daH1zVt+eAByOzl2Lc5p4KPTZ5gaIaCT4scVHjXZHYDkg+G
9QDX4kEEwWPLpw4xwsrLZG5AfjdkB3OPvPgwX1Xr61B2v3SPLyyQtfiVX8jQNDZr
LemHrAsBgqFhCTMqKGlpgsGTBXRw6/h9G7nrvxxdEW/xihaGF+BtAQWhHF9B9ZjO
H72SMAoymgvaJp+t8Vzm1b0kiERytte4bSKk06j4wPAl20bYftkjNLKgwwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGYAFSja5fBh/j8HNPnvRev55+pxMB8GA1UdIwQY
MBaAFEtwo6bEqFclA3WYs5E+IYadvdONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUt
NDgyNWIyOWRkNTcyLzEvWmdBVktOcmw4R0gtUHdjMC1lOUY2X25uNm5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kYzcwMTAtMTlmOS00NzY4LWE2MTUtNDgyNWIyOWRkNTcy
LzEvUzNDanBzU29WeVVEZFppemtUNGhocDI5MDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQBW9k0AwQB
W92UMBYEAgACMBADBwAgAQZ8IDgDBQMqE1DAMA0GCSqGSIb3DQEBCwUAA4IBAQAE
VE0xT2y/5Kf5L3+REE8G+gWBGJNfhPAD9iMZpNlCfhXD8+EGIBA4PO24u0Md3A4F
csd421QjlDRGh4bEmJLlLOqHmG7PsadxO141fyxnIS40zQlrFLgYAiQxp5/tZDxI
Voga6OkI/hlxODc0mHee7oxlECC/63aH5W9a7kuI6tlVg7Wn/yDGdJ20Z09mUA3K
qgI01G13b1absHExv0q24UqTp0hKWHh+OIzmMTTs1eYDeoWmNHIU0c8i0cQzu1Fn
xB/+jfAbbErXiNoSAOHdbZN7aUyED6Od0Ge4SELs2QMkLYs0eg+QPr5xuO3em4s4
iR2L9i6RIkipVGUrm1H+
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:30 2025 by rpki-client