Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZjJXh_ck35NoUv03t53WVhe5OZQ.roa
File: ZjJXh_ck35NoUv03t53WVhe5OZQ.roa (raw, json)
Hash identifier: cd1chedVqSoPzwPwyKaG6/9zhx96MHoK6IRy3j3HAaM=
Subject key identifier: 66:32:57:87:F7:24:DF:93:68:52:FD:37:B7:9D:D6:56:17:B9:39:94
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0182EAAAE453F39469C5CF6BDC9243CA959D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZjJXh_ck35NoUv03t53WVhe5OZQ.roa
Signing time: Mon 29 Aug 2022 17:34:04 +0000
ROA not before: Mon 29 Aug 2022 17:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398343
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
46.23.111.0/24 maxlen: 24
46.23.108.0/24 maxlen: 24
5.178.0.0/22 maxlen: 22
185.81.216.0/22 maxlen: 22
88.151.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:aa:e4:53:f3:94:69:c5:cf:6b:dc:92:43:ca:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 29 17:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66325787f724df936852fd37b79dd65617b93994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:52:be:55:20:ae:f5:9a:ec:90:fb:7f:17:
24:af:f5:37:37:4e:65:ba:f6:ef:52:f8:09:1d:5d:
1a:d7:7e:27:a1:b6:3f:31:7a:35:5b:08:c7:2c:96:
74:f6:9b:85:ee:20:ad:69:44:10:9c:7c:7f:c3:f7:
db:5d:d7:32:10:b4:5c:cd:26:64:13:90:f3:3d:99:
ef:72:f1:97:a8:fa:e9:cf:97:67:c2:1a:2b:fe:bf:
6f:f4:25:84:37:c6:d4:df:83:f1:38:c6:f7:50:7c:
78:ec:93:6f:60:6f:36:4c:76:d1:b0:6f:86:e8:2d:
64:66:23:c0:65:c1:90:69:0d:d9:49:f6:35:17:4f:
33:8d:af:54:79:63:73:85:33:3e:42:3f:1c:4f:af:
b3:09:1a:85:0f:91:fd:f6:30:9c:21:5c:3b:cd:a0:
3f:79:21:19:83:23:ce:1a:6b:e9:dc:ff:db:10:a3:
e3:e0:a4:5a:2f:79:42:1a:26:f5:06:a2:f5:bd:b8:
29:d6:97:8e:8d:17:12:6d:6e:02:1e:a7:1c:72:aa:
a1:a4:ea:0c:19:32:e5:59:d8:07:3a:0a:85:7e:98:
1f:80:d4:93:ed:3c:e2:f0:37:c4:ac:8f:b0:01:3e:
83:7b:a7:5c:47:ad:e7:d3:b5:b2:5f:c6:0d:42:53:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:32:57:87:F7:24:DF:93:68:52:FD:37:B7:9D:D6:56:17:B9:39:94
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ZjJXh_ck35NoUv03t53WVhe5OZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.0.0/22
46.23.96.0/24
46.23.98.0/23
46.23.108.0/24
46.23.111.0/24
88.151.199.0/24
164.215.100.0/24
185.81.216.0/22
Signature Algorithm: sha256WithRSAEncryption
97:0f:fd:ad:eb:3f:65:13:ec:bc:e7:8b:b8:b1:3e:34:cf:e5:
e4:91:ca:68:05:8e:a5:47:bb:f2:ef:a4:f3:d7:95:06:df:62:
f6:06:6b:91:16:02:f0:cc:4e:07:e4:3f:d1:04:41:44:f5:85:
b6:55:be:67:20:a8:01:f1:4e:98:ba:58:f9:d5:2e:d1:1d:e1:
66:69:2f:b6:ab:56:c1:76:c1:69:89:dd:99:07:41:91:3e:72:
13:f8:f7:cd:cc:9e:90:56:24:bf:23:9e:ac:9f:53:7b:1b:df:
fd:e1:f0:a7:ff:15:96:27:cb:ee:d0:25:72:d1:33:0b:e2:46:
b3:3f:ba:c7:fa:8b:57:60:62:43:76:1b:2c:41:c7:d9:73:bf:
46:fa:e5:c6:b5:fe:a2:7b:7b:17:ee:43:15:46:0f:bb:a2:42:
1d:01:48:e0:df:e3:43:34:03:ba:b4:29:c6:74:a3:62:9f:f0:
05:9f:dc:ab:da:86:76:2b:5a:f7:5f:30:68:61:af:f8:26:0b:
2e:3c:14:92:39:4b:63:29:f1:78:f8:15:40:a8:cd:7a:21:e9:
33:cb:73:17:93:4f:ec:78:da:e4:3f:b8:5a:f5:7b:09:0f:b3:
79:28:38:89:d3:7a:5a:d9:3a:e1:ee:85:f8:a5:5e:cd:61:80:
ef:3f:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org