Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ZvK1JJUOtnFJEL1DQTMUzX0qnTA.roa
File: ZvK1JJUOtnFJEL1DQTMUzX0qnTA.roa (raw, json)
Hash identifier: Wkydh8poIHZwnr4KtBOX4ctQ0L3ImPRZ39KKt6r7YKo=
Subject key identifier: 66:F2:B5:24:95:0E:B6:71:49:10:BD:43:41:33:14:CD:7D:2A:9D:30
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 094F2B98
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ZvK1JJUOtnFJEL1DQTMUzX0qnTA.roa
Signing time: Sat 01 Jan 2022 14:06:43 +0000
ROA not before: Sat 01 Jan 2022 14:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 45.11.40.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156183448 (0x94f2b98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 1 14:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66f2b524950eb6714910bd43413314cd7d2a9d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:29:ec:1f:3c:46:1c:d3:32:4e:f1:17:18:4a:
8e:18:5e:c0:8e:d8:22:de:74:37:e6:df:7b:eb:4d:
a8:d0:b0:3f:41:0d:35:8b:3a:18:34:d9:56:e4:3e:
cc:1f:46:1c:19:b3:5a:c8:ea:67:9b:b1:80:b1:c7:
5a:45:b5:99:e2:45:05:0f:4d:00:b7:07:5d:6a:be:
31:31:70:cf:60:ef:fe:b3:b0:dd:64:6c:ed:79:66:
cd:35:86:22:f1:a2:23:ae:c6:f2:0e:0c:2d:3a:43:
f5:0a:b0:28:49:3a:7e:62:d4:50:e9:74:f5:fc:f3:
81:f6:6b:4c:a5:db:73:34:21:29:0c:c7:07:9e:0f:
a1:65:63:a5:ff:15:03:1b:b6:ed:a3:ba:a4:0a:21:
d0:f3:3d:73:78:b9:8c:f4:dc:06:a1:98:a8:d8:07:
b0:5b:6f:f0:54:c1:e8:78:b0:30:ce:f3:57:09:b0:
8b:c4:25:26:06:a5:41:47:1a:8c:d3:ee:8a:d6:33:
e5:54:c2:97:25:0f:16:2e:b5:df:8d:c5:89:51:04:
64:c6:55:7e:c1:ad:fd:20:f8:fc:ff:76:04:20:e7:
5b:dc:c0:da:4f:2b:c2:1f:2b:d0:a7:b1:63:79:45:
4f:f0:8e:74:88:65:96:e1:3e:70:7c:17:fa:bd:4a:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:B5:24:95:0E:B6:71:49:10:BD:43:41:33:14:CD:7D:2A:9D:30
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/ZvK1JJUOtnFJEL1DQTMUzX0qnTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.40.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b8:f5:7c:ed:1e:d4:ac:e1:01:55:0e:da:b4:77:b8:81:7b:
f0:85:84:5e:36:e2:cc:24:3f:af:41:e8:e4:4b:c4:7c:75:f5:
69:19:cc:a3:26:b6:5e:34:00:f1:1b:18:13:23:9a:52:53:a4:
09:af:3b:76:72:7c:32:3b:49:00:1e:98:7d:ab:b1:2b:6f:d6:
17:88:53:d9:1d:99:58:8d:95:93:e8:5d:36:61:8d:12:26:d1:
dc:84:fd:be:10:99:19:59:3b:d6:eb:67:67:fe:8c:bc:ec:14:
10:6b:97:e5:c1:b1:72:78:98:06:e3:e7:2a:9d:cf:cd:36:ae:
6b:96:17:f3:e9:41:1d:63:da:4c:85:39:80:88:4f:6c:b3:f5:
05:74:ff:33:89:6c:86:23:19:ad:33:7a:56:6e:d1:98:b6:94:
b6:d8:18:a4:18:cf:52:ef:13:db:1e:8f:ad:38:3c:d7:a1:1f:
4f:4d:75:9d:d6:3a:fc:6b:ea:30:47:15:bd:23:3b:74:65:0e:
73:37:95:79:4a:1c:45:27:63:51:5a:cd:8d:2f:bd:d6:42:cc:
e3:40:ae:ce:da:fc:f8:00:ac:d7:3c:7d:9c:88:f6:18:e7:5d:
e8:91:60:92:a8:81:fd:fd:9b:84:b4:78:f1:c2:46:a2:f3:31:
39:2d:c2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org