Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/mzq8F_UXuq_RUr2ZOQDbj3XKZFs.roa
File: mzq8F_UXuq_RUr2ZOQDbj3XKZFs.roa (raw, json)
Hash identifier: Pn2IW81M6E90EqEziItfKcnJa9HfL+Kix7JNSfEZ/NI=
Subject key identifier: 9B:3A:BC:17:F5:17:BA:AF:D1:52:BD:99:39:00:DB:8F:75:CA:64:5B
Certificate issuer: /CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Certificate serial: 0184596E7D74F83AE303CF25A0DB31E8315A
Authority key identifier: AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/mzq8F_UXuq_RUr2ZOQDbj3XKZFs.roa
Signing time: Tue 08 Nov 2022 22:48:43 +0000
ROA not before: Tue 08 Nov 2022 22:48:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2586
IP address blocks: 194.204.0.0/18 maxlen: 20
81.90.112.0/20 maxlen: 23
194.150.64.0/22 maxlen: 24
85.253.0.0/16 maxlen: 16
87.119.160.0/19 maxlen: 21
95.129.192.0/21 maxlen: 23
62.65.192.0/18 maxlen: 18
91.213.43.0/24 maxlen: 24
94.246.216.0/21 maxlen: 22
94.246.224.0/19 maxlen: 19
145.14.32.0/20 maxlen: 20
178.23.112.0/21 maxlen: 23
185.13.16.0/22 maxlen: 24
82.131.0.0/17 maxlen: 17
146.255.176.0/21 maxlen: 23
145.14.16.0/20 maxlen: 20
2001:1bf0::/29 maxlen: 29
2001:1530::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:6e:7d:74:f8:3a:e3:03:cf:25:a0:db:31:e8:31:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2cf03e44da28b7319ea7b7b5b110b9b8cb7a70
Validity
Not Before: Nov 8 22:48:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b3abc17f517baafd152bd993900db8f75ca645b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:2a:53:51:50:f9:b7:84:da:f4:16:3c:e9:
5e:ea:1f:f1:5e:92:34:d7:3b:8d:ec:c6:89:ab:20:
87:e8:08:ea:36:14:c1:00:7c:bc:fd:6c:1f:87:57:
d8:79:6c:02:f6:2f:f8:0c:94:bc:b7:af:42:92:e9:
f4:4c:82:c6:5a:85:8f:eb:e3:63:46:1f:c2:40:f6:
0b:b2:c1:26:b0:27:79:3b:98:04:94:7d:cd:fe:3e:
38:c2:50:20:95:02:67:fe:8a:aa:69:5c:d3:9c:65:
7e:8f:41:d5:37:29:0b:83:40:66:29:00:c9:d8:05:
57:40:42:c5:d3:07:5d:61:ef:1f:9e:35:8c:ed:9e:
03:ac:1c:b9:c4:e8:66:bc:8b:c6:5c:c4:9c:fe:ba:
fc:77:1e:91:4e:7a:d2:5a:c2:10:b3:73:49:40:eb:
3f:c8:28:0b:1c:fa:a1:6f:22:70:cd:74:23:fc:16:
f5:d5:41:8a:6b:1b:28:5c:7d:dc:e6:a8:b9:4d:da:
9f:cc:fd:7f:8d:f9:da:6a:80:1c:84:0e:21:72:54:
b1:f5:5a:87:c9:0e:2a:25:ea:8e:e7:d2:ef:9e:de:
0c:42:7b:21:2d:65:84:d7:03:00:79:7d:ec:2e:4e:
da:d5:97:30:b7:c9:5c:27:84:d8:fe:a3:e6:b1:70:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:BC:17:F5:17:BA:AF:D1:52:BD:99:39:00:DB:8F:75:CA:64:5B
X509v3 Authority Key Identifier:
keyid:AD:2C:F0:3E:44:DA:28:B7:31:9E:A7:B7:B5:B1:10:B9:B8:CB:7A:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzwPkTaKLcxnqe3tbEQubjLenA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/mzq8F_UXuq_RUr2ZOQDbj3XKZFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/cae319-5571-46f9-b57d-be065e1ac067/1/rSzwPkTaKLcxnqe3tbEQubjLenA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.192.0/18
81.90.112.0/20
82.131.0.0/17
85.253.0.0/16
87.119.160.0/19
91.213.43.0/24
94.246.216.0-94.246.255.255
95.129.192.0/21
145.14.16.0-145.14.47.255
146.255.176.0/21
178.23.112.0/21
185.13.16.0/22
194.150.64.0/22
194.204.0.0/18
IPv6:
2001:1530::/32
2001:1bf0::/29
Signature Algorithm: sha256WithRSAEncryption
05:36:35:07:43:a4:a5:85:eb:8c:e9:77:e8:0e:7c:6f:4d:19:
b2:30:8d:37:0d:e7:e8:3d:58:e5:71:f5:d4:ca:23:58:51:ec:
ae:ba:78:78:ec:cd:53:39:ab:61:17:dc:4e:45:e4:9d:12:d9:
ab:96:a0:76:99:14:87:ec:8f:99:a1:63:db:4e:f0:a7:4c:e4:
50:b7:dc:3f:ba:b0:74:d2:b0:a0:94:83:48:98:93:c5:a8:3b:
c9:d4:b8:d1:8e:46:8a:35:d7:f5:79:49:4a:84:cd:f3:05:b9:
e6:7f:3e:93:c8:a8:7f:fe:9b:4b:0a:0b:76:4c:02:55:c0:18:
50:8f:d2:55:9c:2f:86:01:17:24:c6:28:86:78:a6:e3:58:ea:
c2:a3:e6:dd:8f:6b:1f:81:72:93:fe:53:04:88:8c:97:b2:36:
66:66:88:a8:ec:23:f4:b0:fa:da:61:71:af:0e:a3:d9:fd:19:
57:1f:e9:ec:dc:27:62:86:0c:a2:9f:1d:e7:a6:8d:6d:3e:fa:
8b:b7:ab:ef:22:f2:a9:bd:bb:0d:76:40:fd:cc:bd:52:ab:3d:
5c:31:8b:d6:05:d0:0c:70:b1:56:8f:7f:3e:a5:84:e6:d4:1a:
ce:db:98:d0:0e:a5:21:da:07:3b:63:bd:fd:77:a1:b2:e7:c2:
39:9a:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:44 2023 by rpki-client on console-fra.rpki-client.org