Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/ZWOFWIQSuGjiEE4ovdI3OEJs5Rk.roa
File: ZWOFWIQSuGjiEE4ovdI3OEJs5Rk.roa (raw, json)
Hash identifier: HFnvRFwB43fgV+o9OtrBmjF/aA8eDioC9UnmhnL6KPA=
Subject key identifier: 65:63:85:58:84:12:B8:68:E2:10:4E:28:BD:D2:37:38:42:6C:E5:19
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: F9B4
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/ZWOFWIQSuGjiEE4ovdI3OEJs5Rk.roa
Signing time: Fri 04 Feb 2022 10:55:43 +0000
ROA not before: Fri 04 Feb 2022 10:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44341
IP address blocks: 195.211.160.0/24 maxlen: 24
194.140.228.0/24 maxlen: 24
195.211.163.0/24 maxlen: 24
195.211.162.0/24 maxlen: 24
195.211.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63924 (0xf9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Feb 4 10:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=656385588412b868e2104e28bdd23738426ce519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:d7:d5:a8:9d:bd:a7:05:92:1a:2e:f8:28:
21:63:cb:06:90:d2:79:b0:ea:f2:c6:92:de:71:f5:
84:3a:cd:bf:f6:f0:63:16:39:c2:ed:8e:1a:65:85:
81:04:88:e6:da:58:60:1c:16:48:a5:af:59:e1:bd:
4f:ff:29:40:4c:82:3a:15:62:73:ba:a3:bb:e2:6d:
35:58:9f:9e:75:1e:b2:10:9c:77:43:bb:d9:18:d8:
0e:f1:39:50:22:ab:d2:20:1a:a9:f0:59:a7:69:fc:
26:39:91:b0:f3:3e:c6:e6:cf:8e:45:69:df:34:7a:
ee:5b:18:bb:f2:d6:d6:c3:2d:30:12:cb:58:d8:ad:
dc:8e:f7:41:cb:ca:9d:4b:3a:a0:c3:0b:93:5b:37:
73:87:9e:78:9d:b1:3c:c4:29:e2:18:e9:c8:e7:14:
2f:55:cf:d6:19:15:ab:2b:43:1d:3a:6a:e3:02:65:
04:90:e4:e2:91:9b:af:7b:7b:d1:57:69:32:a1:25:
b6:c6:55:9c:30:75:7a:3b:6e:cd:98:a3:1e:4a:b3:
0c:8d:f6:2b:8f:ad:4f:44:01:bc:48:15:57:06:60:
95:94:4d:a4:bb:0c:92:2d:ea:7e:13:6f:e9:5a:9a:
b7:31:06:d1:13:2c:a4:30:5b:e1:e6:4b:74:53:cd:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:85:58:84:12:B8:68:E2:10:4E:28:BD:D2:37:38:42:6C:E5:19
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/ZWOFWIQSuGjiEE4ovdI3OEJs5Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.228.0/24
195.211.160.0/22
Signature Algorithm: sha256WithRSAEncryption
09:01:46:33:db:17:fe:6e:83:c5:8a:24:cc:19:0a:68:ac:33:
42:ce:fd:d0:7a:b2:89:7d:bf:b7:9e:25:2a:67:1a:dd:09:be:
46:eb:41:43:ad:f2:fd:2d:bf:81:38:61:71:d8:36:51:ac:54:
ec:2e:8e:c2:fc:84:87:6f:51:f9:d9:c7:00:8a:78:7e:4f:c4:
b4:27:d7:21:7b:7e:76:92:66:b5:4b:3e:e0:5d:da:40:3d:4e:
eb:c4:0f:e4:43:31:0c:16:0c:64:7c:da:02:56:3d:e2:73:bd:
ee:45:da:77:86:6c:48:92:08:4e:c1:17:07:ae:40:d7:4c:59:
e5:b0:3d:f3:bf:9a:96:a9:cd:7e:c6:0f:4d:80:32:8a:45:d4:
d3:2e:af:06:64:7f:02:ce:97:62:71:4a:f4:64:29:50:13:a1:
a7:96:27:ab:f7:06:92:e5:fc:22:53:b5:ed:8f:9c:ce:d7:83:
12:ba:58:38:38:4b:bf:91:67:36:a4:08:d8:ce:d7:ad:e3:fe:
d0:f5:e6:ff:71:ac:b8:0d:a9:d9:74:d2:36:ec:43:06:49:db:
b2:27:82:a9:93:b7:2e:ec:68:af:cf:51:69:d2:ef:17:55:8f:
f7:7b:2f:62:ed:18:62:94:6f:b3:20:a5:d2:d6:32:ad:99:a7:
19:6e:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org