Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/ZLmlBTmSFSqowDNBMClgDf6WnQE.roa
File: ZLmlBTmSFSqowDNBMClgDf6WnQE.roa (raw, json)
Hash identifier: rxOHXvXAS0tDZGMkCJwRHAnS0SuXNcN9trTP/aTL3ds=
Subject key identifier: 64:B9:A5:05:39:92:15:2A:A8:C0:33:41:30:29:60:0D:FE:96:9D:01
Certificate issuer: /CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Certificate serial: 04CE91B8
Authority key identifier: 30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/ZLmlBTmSFSqowDNBMClgDf6WnQE.roa
Signing time: Sat 01 Jan 2022 01:59:48 +0000
ROA not before: Sat 01 Jan 2022 01:59:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211720
IP address blocks: 185.56.83.0/24 maxlen: 24
2a06:e80:3000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80646584 (0x4ce91b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=306c0866dc25208e6c07d4a21d7d8050b508d6a2
Validity
Not Before: Jan 1 01:59:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64b9a5053992152aa8c033413029600dfe969d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:74:09:98:76:fa:17:01:e7:65:1a:20:06:54:
46:3a:6f:00:8d:dd:0e:47:fe:2c:1a:70:8f:01:60:
d0:9a:87:be:7a:56:bf:f5:3c:89:f7:c5:b1:3f:5e:
4a:a6:83:1e:4e:03:c4:f8:33:d5:c1:67:19:31:c7:
9b:fb:d3:7e:ea:9c:d7:c4:de:cc:ab:d3:f6:c0:d8:
3c:f4:c7:38:4a:6b:57:85:cd:0c:b4:7e:25:fa:35:
5a:6d:13:ae:f3:f0:df:b9:03:00:b2:35:19:97:26:
19:45:0d:12:a3:fc:e4:6b:bc:b6:29:91:11:bc:8a:
b1:22:a2:1b:bc:7b:aa:d8:d6:26:5f:55:f4:ee:10:
66:f7:5b:94:ee:ae:64:24:ae:27:81:6a:8f:c7:a0:
6b:f2:9f:dc:a5:10:da:78:4f:34:b3:6c:ba:d1:bf:
f2:46:40:d3:2c:97:90:ff:71:e5:ec:72:57:bc:b5:
89:60:20:5d:bb:94:aa:24:fe:a4:1c:ac:fc:d5:e3:
3b:33:e6:4e:1d:11:eb:17:ca:6e:ad:31:80:ca:32:
c1:52:28:e0:34:df:89:46:1b:31:48:7d:c8:d6:29:
0a:c1:3d:54:af:4b:b0:c1:36:0e:e4:7b:50:fe:ff:
9b:ce:a4:25:00:93:fa:5c:da:30:76:ae:b1:a4:a7:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B9:A5:05:39:92:15:2A:A8:C0:33:41:30:29:60:0D:FE:96:9D:01
X509v3 Authority Key Identifier:
keyid:30:6C:08:66:DC:25:20:8E:6C:07:D4:A2:1D:7D:80:50:B5:08:D6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGwIZtwlII5sB9SiHX2AULUI1qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/ZLmlBTmSFSqowDNBMClgDf6WnQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/badedf-d0e9-45a9-af75-10edb541e6ff/1/MGwIZtwlII5sB9SiHX2AULUI1qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.83.0/24
IPv6:
2a06:e80:3000::/36
Signature Algorithm: sha256WithRSAEncryption
8b:f1:3f:10:9c:65:7c:14:11:9e:8e:9e:ba:d0:a1:ce:6c:96:
b0:7e:d6:8b:21:21:07:45:93:b9:d3:d4:2b:8a:db:f4:62:63:
84:f1:eb:ea:6a:87:21:13:44:19:87:2e:b9:02:04:58:8a:1e:
2a:cd:2d:69:3c:40:43:e1:69:ac:7a:5a:6a:40:98:7f:7f:b7:
99:57:29:a2:16:5e:be:e8:4d:e9:d6:31:f4:b0:44:ea:0c:06:
f4:b0:1a:e4:5d:ef:90:cb:1b:12:8b:e0:62:52:f5:5a:41:70:
80:b1:c7:77:37:d4:0e:d1:7d:12:75:3e:73:6d:66:20:8a:98:
a9:e9:2f:19:a0:9e:d2:5d:31:d8:db:2f:cb:c2:56:83:7a:03:
1e:9c:01:a3:1f:ea:2d:bb:cc:f1:a7:18:b0:94:0d:79:0a:1c:
7d:c7:a7:de:a1:ac:ad:cf:52:a6:12:3f:a4:e4:5a:e4:34:b2:
f3:42:f2:56:28:92:4a:d9:2e:a5:78:f5:8d:d4:7b:fc:0e:a8:
36:73:86:30:d5:87:60:b3:8f:b3:3f:ae:12:63:72:b9:56:95:
70:73:4e:3f:5d:61:94:f0:93:31:23:6a:be:19:96:62:ea:7f:
12:8f:28:29:c1:10:9b:29:c7:00:ca:16:ff:46:b8:30:cd:2a:
ad:18:b6:98
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEBM6RuDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MDZjMDg2NmRjMjUyMDhlNmMwN2Q0YTIxZDdkODA1MGI1MDhkNmEyMB4XDTIyMDEw
MTAxNTk0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjRiOWE1MDUzOTky
MTUyYWE4YzAzMzQxMzAyOTYwMGRmZTk2OWQwMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJN0CZh2+hcB52UaIAZURjpvAI3dDkf+LBpwjwFg0JqHvnpW
v/U8iffFsT9eSqaDHk4DxPgz1cFnGTHHm/vTfuqc18TezKvT9sDYPPTHOEprV4XN
DLR+Jfo1Wm0TrvPw37kDALI1GZcmGUUNEqP85Gu8timREbyKsSKiG7x7qtjWJl9V
9O4QZvdblO6uZCSuJ4Fqj8ega/Kf3KUQ2nhPNLNsutG/8kZA0yyXkP9x5exyV7y1
iWAgXbuUqiT+pBys/NXjOzPmTh0R6xfKbq0xgMoywVIo4DTfiUYbMUh9yNYpCsE9
VK9LsME2DuR7UP7/m86kJQCT+lzaMHausaSnk7UCAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBRkuaUFOZIVKqjAM0EwKWAN/padATAfBgNVHSMEGDAWgBQwbAhm3CUgjmwH
1KIdfYBQtQjWojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01Hd0ladHdsSUk1c0I5U2lIWDJBVUxVSTFxSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDQvYmFkZWRmLWQwZTktNDVhOS1hZjc1LTEwZWRiNTQxZTZmZi8x
L1pMbWxCVG1TRlNxb3dETkJNQ2xnRGY2V25RRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDQv
YmFkZWRmLWQwZTktNDVhOS1hZjc1LTEwZWRiNTQxZTZmZi8xL01Hd0ladHdsSUk1
c0I5U2lIWDJBVUxVSTFxSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEALk4UzAOBAIAAjAIAwYEKgYOgDAw
DQYJKoZIhvcNAQELBQADggEBAIvxPxCcZXwUEZ6OnrrQoc5slrB+1oshIQdFk7nT
1CuK2/RiY4Tx6+pqhyETRBmHLrkCBFiKHirNLWk8QEPhaax6WmpAmH9/t5lXKaIW
Xr7oTenWMfSwROoMBvSwGuRd75DLGxKL4GJS9VpBcICxx3c31A7RfRJ1PnNtZiCK
mKnpLxmgntJdMdjbL8vCVoN6Ax6cAaMf6i27zPGnGLCUDXkKHH3Hp96hrK3PUqYS
P6TkWuQ0svNC8lYokkrZLqV49Y3Ue/wOqDZzhjDVh2Czj7M/rhJjcrlWlXBzTj9d
YZTwkzEjar4ZlmLqfxKPKCnBEJspxwDKFv9GuDDNKq0Ytpg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:25 2023 by rpki-client on console.sobornost.net