Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/tzrqrRO5zw5vF17H8t30XqtPs0o.roa
File: tzrqrRO5zw5vF17H8t30XqtPs0o.roa (raw, json)
Hash identifier: qDLLrzros2fyTPKthLsnzSbrSMM7vgX5XdlFg8ItwwI=
Subject key identifier: B7:3A:EA:AD:13:B9:CF:0E:6F:17:5E:C7:F2:DD:F4:5E:AB:4F:B3:4A
Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Certificate serial: 0988940B
Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/tzrqrRO5zw5vF17H8t30XqtPs0o.roa
Signing time: Wed 29 Jun 2022 07:44:02 +0000
ROA not before: Wed 29 Jun 2022 07:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12599
IP address blocks: 212.64.218.0/24 maxlen: 24
212.64.220.0/24 maxlen: 24
212.64.192.0/24 maxlen: 24
212.64.194.0/24 maxlen: 24
212.64.197.0/24 maxlen: 24
212.64.196.0/24 maxlen: 24
212.64.198.0/24 maxlen: 24
212.64.199.0/24 maxlen: 24
212.64.193.0/24 maxlen: 24
212.64.200.0/24 maxlen: 24
212.64.202.0/24 maxlen: 24
212.64.201.0/24 maxlen: 24
212.64.204.0/24 maxlen: 24
212.64.203.0/24 maxlen: 24
212.64.205.0/24 maxlen: 24
212.64.206.0/24 maxlen: 24
212.64.209.0/24 maxlen: 24
212.64.208.0/24 maxlen: 24
212.64.212.0/24 maxlen: 24
212.64.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159945739 (0x988940b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9
Validity
Not Before: Jun 29 07:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b73aeaad13b9cf0e6f175ec7f2ddf45eab4fb34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:dd:82:4d:e7:59:e1:a3:94:a5:ce:06:b6:
dd:6a:0c:2e:3f:de:b4:68:15:5b:f7:04:03:c2:d6:
ed:77:99:92:83:7e:a2:1b:d1:ed:b4:ab:a8:21:b5:
b5:86:23:6a:49:ab:44:ad:d7:90:92:a6:92:18:c0:
33:20:7b:78:58:13:9c:e4:0b:ad:75:c0:77:7e:76:
3d:b6:fb:49:0f:d1:ce:52:c2:17:7a:47:98:ed:74:
45:6b:11:60:9e:4a:4b:cb:18:32:d5:5b:c4:f3:2e:
6c:9a:8d:67:a8:35:aa:b5:64:ce:d1:a9:aa:35:5f:
9d:03:e1:ed:1c:60:6d:17:f3:58:5c:fc:4c:cb:4c:
22:a1:a7:e6:f0:51:d8:58:e6:ed:27:4b:f0:9c:53:
60:f3:bb:16:bf:d0:d0:75:04:f1:2a:ba:d7:a9:85:
26:02:dd:25:3b:02:a3:bd:d5:fa:4b:cb:06:d5:b8:
d6:46:f5:b2:a7:58:25:2b:f1:fc:0f:19:7b:a5:6b:
c3:cd:92:df:e2:27:35:92:93:fb:cc:e5:57:df:3f:
27:29:07:89:48:0c:10:5e:93:60:47:29:a1:86:c6:
df:e1:89:53:11:ae:60:36:3b:12:dc:5b:8c:a0:48:
52:14:05:8f:02:98:17:0f:47:bd:ad:be:c3:b5:1e:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3A:EA:AD:13:B9:CF:0E:6F:17:5E:C7:F2:DD:F4:5E:AB:4F:B3:4A
X509v3 Authority Key Identifier:
keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/tzrqrRO5zw5vF17H8t30XqtPs0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.64.192.0-212.64.194.255
212.64.196.0-212.64.209.255
212.64.212.0/24
212.64.218.0/24
212.64.220.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4e:ea:6b:4c:11:bf:99:92:db:27:dc:21:91:9f:aa:86:a3:
c8:dc:43:a9:0b:be:87:d1:32:96:26:4b:1d:e5:3e:0c:31:27:
a8:14:89:2d:40:ac:09:2f:96:ff:a3:03:8e:75:ff:65:92:a6:
35:93:f6:3d:70:d3:08:79:2e:2b:48:c8:22:2f:31:93:43:c7:
73:c6:a7:5e:ab:08:1b:01:18:27:2f:1a:b4:5d:11:9c:d4:25:
d1:86:ff:88:8e:cb:f4:1c:36:53:9c:e2:0d:b5:d6:3e:d2:8c:
aa:36:f8:f4:0f:7e:04:67:d4:f3:17:7f:e7:49:bd:61:48:b8:
43:a9:43:5d:f6:46:63:95:56:52:7e:73:2d:a3:3c:6e:ab:fc:
70:3d:cb:99:55:5d:1e:88:73:c8:eb:44:48:10:2d:d7:86:12:
3a:71:41:fd:38:13:b2:ab:b0:44:77:01:b5:77:61:ed:12:19:
a3:be:ea:bf:2b:40:06:8a:ed:50:cf:a5:8b:59:27:2e:c2:26:
22:d5:e1:9b:26:14:63:69:c5:cb:4f:78:a6:5f:5d:33:17:a9:
3c:fe:8b:b8:cd:c3:88:69:28:bd:bb:6c:df:c5:42:4b:0c:96:
6b:60:9c:82:02:36:d5:f2:ce:70:f7:7b:34:36:15:a8:e0:d7:
0f:92:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:14 2024 by rpki-client on console-ams.rpki-client.org