Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ZcefGNe0LRzODH1XLE9iNsrhyt8.roa
File: ZcefGNe0LRzODH1XLE9iNsrhyt8.roa (raw, json)
Hash identifier: nVEa3oJUej5gBJ9FLcD06fdMpMygoxqwScsQxFmdhns=
Subject key identifier: 65:C7:9F:18:D7:B4:2D:1C:CE:0C:7D:57:2C:4F:62:36:CA:E1:CA:DF
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 018284C72C91BD55A9752C38D9828C020C64
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ZcefGNe0LRzODH1XLE9iNsrhyt8.roa
Signing time: Tue 09 Aug 2022 22:43:41 +0000
ROA not before: Tue 09 Aug 2022 22:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212914
IP address blocks: 185.158.243.0/24 maxlen: 24
185.223.232.0/24 maxlen: 24
89.37.64.0/24 maxlen: 24
2a01:4020:6::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:84:c7:2c:91:bd:55:a9:75:2c:38:d9:82:8c:02:0c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Aug 9 22:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65c79f18d7b42d1cce0c7d572c4f6236cae1cadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:92:d8:44:66:be:ee:6b:89:cd:cc:0a:18:8c:
f9:a0:8e:df:25:f9:d6:46:2b:38:ed:ea:56:5d:94:
20:ec:65:57:a3:f7:1b:d6:f8:20:b2:2e:fd:5e:a1:
6a:3a:68:19:ca:e1:0d:97:71:c9:42:fd:e3:b9:cc:
ec:35:4e:df:6c:35:81:67:e5:e5:87:16:16:c3:8c:
2c:f6:aa:50:ce:7d:11:8f:57:04:09:05:37:43:66:
34:2e:fb:ce:ce:4e:e7:c8:6b:0b:4c:82:76:d6:91:
60:1d:43:37:46:e2:22:31:58:81:3e:e9:8f:5c:73:
3e:80:68:90:a5:29:01:d6:69:ef:ac:2b:06:70:ed:
6f:24:c9:49:fa:4b:62:5d:3d:a8:70:79:b9:d2:48:
c3:75:be:36:e0:04:9a:dd:5c:e8:90:69:d9:92:96:
02:7d:44:18:6c:c9:c2:f1:87:d9:ab:77:52:ff:84:
8c:44:e5:73:90:d2:9b:63:7c:38:1c:a3:c8:6d:c0:
52:75:99:f7:7f:ba:25:0b:76:69:dc:01:ef:74:e3:
80:d8:16:7a:15:a3:19:bb:a8:47:d0:16:c4:5e:e0:
5c:64:e1:81:d0:0e:8b:64:2f:9b:05:9c:84:52:ec:
3e:78:71:20:cc:2f:bc:d3:e8:98:99:03:9c:f9:49:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:9F:18:D7:B4:2D:1C:CE:0C:7D:57:2C:4F:62:36:CA:E1:CA:DF
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/ZcefGNe0LRzODH1XLE9iNsrhyt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.64.0/24
185.158.243.0/24
185.223.232.0/24
IPv6:
2a01:4020:6::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c0:6f:f5:61:15:46:fd:9e:60:33:53:b3:93:41:29:23:1b:
e6:18:e1:73:0f:5e:0e:25:cf:d5:02:9f:d7:4c:bd:d1:2b:ab:
58:ca:d2:36:e8:60:9f:8d:65:9f:65:ed:36:ad:cb:b4:cd:2b:
1e:79:d4:2b:09:3e:84:a9:7d:64:58:a5:af:d1:02:07:23:ee:
37:82:e6:0b:01:de:64:a5:1d:56:7e:2d:7f:a3:a2:92:8e:79:
be:e9:87:32:5c:0d:e4:ed:ec:7d:ce:6b:2f:e5:b4:01:08:2e:
57:8e:f2:59:cb:8e:96:cc:ba:b6:b7:12:3f:4a:f2:7f:ac:4c:
6a:98:f8:f7:85:16:ac:da:f7:eb:7b:23:bf:0a:a9:4c:43:a0:
83:0c:a6:8d:b1:90:91:8e:47:b2:cf:14:23:9c:2a:0c:ca:7f:
ad:72:23:eb:7b:32:df:91:ef:bd:e3:d6:44:c0:fa:50:41:a3:
59:0e:2d:22:80:81:53:29:6d:2e:13:da:e6:4c:38:73:c4:bb:
ad:a5:61:37:b3:8d:cc:11:09:7e:30:4c:5d:d0:80:32:68:8a:
87:55:94:d6:2d:67:4c:1e:35:1d:f0:0e:c1:f5:7b:d9:83:03:
99:2e:b6:29:fa:7b:32:0c:08:3b:33:b2:5e:6c:a1:0a:99:1c:
7f:7c:50:d8
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYKExyyRvVWpdSw42YKMAgxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjIwODA5MjI0MzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWM3OWYxOGQ3YjQyZDFjY2UwYzdkNTcyYzRmNjIzNmNhZTFjYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5LYRGa+7muJzcwKGIz5oI7fJfnW
Ris47epWXZQg7GVXo/cb1vggsi79XqFqOmgZyuENl3HJQv3juczsNU7fbDWBZ+Xl
hxYWw4ws9qpQzn0Rj1cECQU3Q2Y0LvvOzk7nyGsLTIJ21pFgHUM3RuIiMViBPumP
XHM+gGiQpSkB1mnvrCsGcO1vJMlJ+ktiXT2ocHm50kjDdb424ASa3VzokGnZkpYC
fUQYbMnC8YfZq3dS/4SMROVzkNKbY3w4HKPIbcBSdZn3f7olC3Zp3AHvdOOA2BZ6
FaMZu6hH0BbEXuBcZOGB0A6LZC+bBZyEUuw+eHEgzC+80+iYmQOc+UmROwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFGXHnxjXtC0czgx9VyxPYjbK4crfMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvWmNlZkdOZTBMUnpPREgxWExFOWlOc3JoeXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAWSVAAwQA
uZ7zAwQAud/oMA8EAgACMAkDBwAqAUAgAAYwDQYJKoZIhvcNAQELBQADggEBAI3A
b/VhFUb9nmAzU7OTQSkjG+YY4XMPXg4lz9UCn9dMvdErq1jK0jboYJ+NZZ9l7Tat
y7TNKx551CsJPoSpfWRYpa/RAgcj7jeC5gsB3mSlHVZ+LX+jopKOeb7phzJcDeTt
7H3Oay/ltAEILleO8lnLjpbMura3Ej9K8n+sTGqY+PeFFqza9+t7I78KqUxDoIMM
po2xkJGOR7LPFCOcKgzKf61yI+t7Mt+R773j1kTA+lBBo1kOLSKAgVMpbS4T2uZM
OHPEu62lYTezjcwRCX4wTF3QgDJoiodVlNYtZ0weNR3wDsH1e9mDA5kutin6ezIM
CDszsl5soQqZHH98UNg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org