Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/zIB6XVGUFNumFStLZDfFxjDp4Hk.roa
File: zIB6XVGUFNumFStLZDfFxjDp4Hk.roa (raw, json)
Hash identifier: xro515RsTqCZ1N8Oo6qFdBezVNpjnuHAwOs1PByBAQE=
Subject key identifier: CC:80:7A:5D:51:94:14:DB:A6:15:2B:4B:64:37:C5:C6:30:E9:E0:79
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01E0C28D
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/zIB6XVGUFNumFStLZDfFxjDp4Hk.roa
Signing time: Sat 16 Apr 2022 08:20:30 +0000
ROA not before: Sat 16 Apr 2022 08:20:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 45.156.30.0/24 maxlen: 24
45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31507085 (0x1e0c28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 16 08:20:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc807a5d519414dba6152b4b6437c5c630e9e079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:e0:28:48:1f:d8:8c:16:ab:37:63:ef:bc:
1a:b1:81:7b:ce:99:9a:cc:de:a0:c6:40:ad:45:d7:
80:9a:48:6a:8f:c6:35:94:7b:bd:1a:51:f7:e8:3c:
65:5f:08:93:43:26:4b:7a:c4:4d:9b:99:67:ff:40:
96:cb:16:65:9e:42:93:5c:8c:89:bd:a1:9d:71:d4:
00:c0:33:51:35:56:f6:6c:9a:da:29:bd:94:7a:c7:
a9:36:f4:1c:16:b3:1d:5e:fc:79:45:61:3c:55:42:
51:72:b5:82:7c:d3:22:28:d0:52:96:59:bd:aa:ec:
30:69:42:d0:12:06:15:da:fc:f5:d6:ae:b0:ec:79:
95:64:65:5c:88:42:d6:51:c6:99:2b:b3:9c:25:20:
fd:3c:13:55:09:cb:4a:8f:52:42:c3:a6:95:1c:cb:
62:82:2d:08:0d:fd:7c:2b:dc:7e:08:64:b1:f3:1a:
db:9a:52:3e:4a:ee:cb:b2:2e:19:ad:ac:40:88:cf:
94:10:72:b4:eb:48:6a:98:c3:53:aa:e9:0d:ee:f8:
24:4e:6f:d7:74:c4:a6:b4:bc:a8:66:74:39:76:52:
09:8f:89:8a:4f:92:fb:f0:7c:52:fb:05:1c:d2:7c:
12:2d:d6:12:b4:bc:5f:e1:90:c9:71:4f:28:79:51:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:80:7A:5D:51:94:14:DB:A6:15:2B:4B:64:37:C5:C6:30:E9:E0:79
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/zIB6XVGUFNumFStLZDfFxjDp4Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/24
45.156.30.0/24
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e0:b7:4b:fe:f1:16:c1:5d:85:2d:72:e8:a2:1f:8f:4e:2b:
33:a6:06:55:0c:e9:80:d2:8a:6d:cd:97:3c:cc:2e:03:ee:07:
19:ea:a8:fd:69:d3:84:a8:0c:33:b2:e4:d8:4e:74:87:78:73:
74:8a:db:0d:85:01:1e:b8:9e:12:74:96:06:d4:a8:a2:2f:3d:
18:67:7e:be:eb:11:4d:60:34:26:25:f3:74:41:df:42:1d:6d:
ad:19:35:66:67:fa:2e:53:8a:30:57:cf:10:66:fc:87:8e:47:
06:b7:56:c1:54:ca:21:cd:4e:c3:00:57:24:15:9d:a3:be:72:
5a:58:37:80:11:cc:74:05:04:74:75:a7:46:ef:c4:5f:d6:e1:
58:bf:a6:cd:db:50:c7:a9:59:34:19:7c:c7:80:d6:b3:10:cb:
81:f8:64:e2:85:63:eb:c9:db:71:8d:3e:73:4d:4b:09:15:e5:
f4:67:44:6d:72:4e:f3:5f:73:71:18:64:8c:c2:42:cb:ad:3a:
f4:78:31:ec:af:9d:6c:c3:7e:60:59:f6:5b:2c:92:a5:3d:47:
d1:1c:d5:7a:58:48:75:d0:87:a9:94:28:89:21:9e:4e:27:b3:
8d:93:a5:18:67:a5:a2:7d:67:64:f2:0e:a4:72:9b:79:17:27:
32:0b:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org