Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/ZabjxuCGcDbThme8YzGFuH5RVpA.roa
File: ZabjxuCGcDbThme8YzGFuH5RVpA.roa (raw, json)
Hash identifier: jLSMZuzCw+kvPTBzip8SnN09I1u9wCEVGEkb4+l5FZs=
Subject key identifier: 65:A6:E3:C6:E0:86:70:36:D3:86:67:BC:63:31:85:B8:7E:51:56:90
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 0182EE8F64DC088E89EE5F445655D56AB09D
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/ZabjxuCGcDbThme8YzGFuH5RVpA.roa
Signing time: Tue 30 Aug 2022 11:42:31 +0000
ROA not before: Tue 30 Aug 2022 11:42:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199612
IP address blocks: 91.223.43.0/24 maxlen: 24
2001:67c:16c4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:8f:64:dc:08:8e:89:ee:5f:44:56:55:d5:6a:b0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Aug 30 11:42:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65a6e3c6e0867036d38667bc633185b87e515690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:ad:7d:2c:55:55:1e:6b:57:9b:6b:82:bc:
3d:71:e7:bb:2e:fd:cb:c1:31:4e:d2:37:00:1e:c3:
2b:0e:c0:3c:8b:21:3d:e5:dc:d1:44:3c:2d:1d:96:
8a:60:40:a9:77:21:f1:ae:23:dc:41:ab:f2:70:e8:
4a:2b:6f:52:f3:ac:20:45:5e:65:2e:82:ea:75:b0:
ff:b1:84:23:fb:94:5a:80:9c:56:9e:45:c6:38:59:
03:89:f0:75:f5:71:e2:63:eb:08:f0:45:f3:45:4a:
dd:a0:db:c7:f8:06:56:f9:78:e4:e2:32:1c:47:25:
f8:e1:00:f7:51:67:6e:8d:97:c0:9d:38:51:44:eb:
e0:61:e6:f8:b1:73:29:50:b8:89:1c:cd:5b:36:81:
a7:e5:df:82:15:47:c0:d0:21:41:94:ba:a3:4b:6d:
f8:87:03:1a:a6:23:8c:f0:69:1d:98:84:31:02:4b:
29:7b:41:70:46:37:a6:58:e4:3f:2f:f2:1c:ee:8a:
2d:f2:d7:f2:f2:e4:f9:a3:8d:b8:75:9f:62:ca:0a:
5a:90:3a:e9:3a:b9:42:94:af:86:1b:98:97:7a:e8:
1b:29:ac:96:04:d4:94:25:02:48:ec:60:80:32:b3:
72:97:3d:20:35:24:37:d6:58:74:72:61:6c:0f:82:
a5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:E3:C6:E0:86:70:36:D3:86:67:BC:63:31:85:B8:7E:51:56:90
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/ZabjxuCGcDbThme8YzGFuH5RVpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.43.0/24
IPv6:
2001:67c:16c4::/48
Signature Algorithm: sha256WithRSAEncryption
60:a4:83:a6:ff:e3:f3:a3:de:f2:ae:3f:14:bd:a9:e0:65:52:
e7:ad:30:0a:8d:62:ec:1b:0f:df:8b:44:4a:f0:f3:61:88:5c:
61:24:aa:cb:ab:d7:21:38:04:0f:54:1d:92:a5:2a:ca:0d:08:
74:c9:d2:c3:d9:9b:53:1b:4c:fb:03:8b:32:70:8f:7b:48:a2:
ad:81:a7:df:9e:b3:7a:21:a0:c9:bb:90:51:ab:f2:46:ba:0e:
c7:18:3e:97:ff:27:f6:49:ad:a7:71:bc:5c:d7:ec:25:8c:32:
59:e7:f8:22:e9:22:c7:c8:d8:d6:f4:be:5e:6a:7a:ca:a5:d5:
dc:87:fc:7c:d0:0b:6e:4a:af:73:b2:a9:4e:11:01:5f:58:06:
51:5c:3f:95:e8:f2:6c:4a:e1:9c:f4:b2:68:60:7f:68:c8:e7:
95:41:86:39:12:38:12:2e:99:ad:ed:42:30:2d:ab:ff:70:aa:
95:27:c0:e6:cd:69:32:97:2e:04:f3:cc:3b:46:a1:ac:10:8a:
f6:ab:9d:87:50:f1:64:a0:c3:a3:56:fd:52:0c:45:18:ad:ed:
6e:c0:85:27:6b:71:24:97:93:64:e8:a5:48:7a:8c:89:b8:60:
62:a5:6e:5f:02:47:19:55:9b:92:c2:cb:c3:5f:27:ea:77:84:
83:09:a9:7e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLuj2TcCI6J7l9EVlXVarCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDE3N2I3Njg5MTAxM2JhMDI3YjM1ZTZlZGZjMWU5Zjgy
OTVjZWMwHhcNMjIwODMwMTE0MjMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWE2ZTNjNmUwODY3MDM2ZDM4NjY3YmM2MzMxODViODdlNTE1NjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijOtfSxVVR5rV5trgrw9cee7Lv3L
wTFO0jcAHsMrDsA8iyE95dzRRDwtHZaKYECpdyHxriPcQavycOhKK29S86wgRV5l
LoLqdbD/sYQj+5RagJxWnkXGOFkDifB19XHiY+sI8EXzRUrdoNvH+AZW+Xjk4jIc
RyX44QD3UWdujZfAnThRROvgYeb4sXMpULiJHM1bNoGn5d+CFUfA0CFBlLqjS234
hwMapiOM8GkdmIQxAkspe0FwRjemWOQ/L/Ic7oot8tfy8uT5o424dZ9iygpakDrp
OrlClK+GG5iXeugbKayWBNSUJQJI7GCAMrNylz0gNSQ31lh0cmFsD4KlQwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGWm48bghnA204ZnvGMxhbh+UVaQMB8GA1UdIwQY
MBaAFBhBd7dokQE7oCezXm7fwen4KVzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84N2Y4ZGMtOWZjZS00MWFiLThlNzUt
MjI4ZTNmZmE1YmE5LzEvWmFianh1Q0djRGJUaG1lOFl6R0Z1SDVSVnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84N2Y4ZGMtOWZjZS00MWFiLThlNzUtMjI4ZTNmZmE1YmE5
LzEvR0VGM3QyaVJBVHVnSjdOZWJ0X0I2ZmdwWE93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW98rMA8E
AgACMAkDBwAgAQZ8FsQwDQYJKoZIhvcNAQELBQADggEBAGCkg6b/4/Oj3vKuPxS9
qeBlUuetMAqNYuwbD9+LRErw82GIXGEkqsur1yE4BA9UHZKlKsoNCHTJ0sPZm1Mb
TPsDizJwj3tIoq2Bp9+es3ohoMm7kFGr8ka6DscYPpf/J/ZJradxvFzX7CWMMlnn
+CLpIsfI2Nb0vl5qesql1dyH/HzQC25Kr3OyqU4RAV9YBlFcP5Xo8mxK4Zz0smhg
f2jI55VBhjkSOBIuma3tQjAtq/9wqpUnwObNaTKXLgTzzDtGoawQivarnYdQ8WSg
w6NW/VIMRRit7W7AhSdrcSSXk2TopUh6jIm4YGKlbl8CRxlVm5LCy8NfJ+p3hIMJ
qX4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org