Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zDvniMGIS5CF-6zV99bcBnfqQHg.roa
File: zDvniMGIS5CF-6zV99bcBnfqQHg.roa (raw, json)
Hash identifier: 6aXBXzxkR9yGs4F+WP59EM/ijVSdUS6HStzC8PJdMx4=
Subject key identifier: CC:3B:E7:88:C1:88:4B:90:85:FB:AC:D5:F7:D6:DC:06:77:EA:40:78
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01831349213561477ACD60DA6E7801E850B9
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zDvniMGIS5CF-6zV99bcBnfqQHg.roa
Signing time: Tue 06 Sep 2022 14:51:43 +0000
ROA not before: Tue 06 Sep 2022 14:51:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.10.16.0/22 maxlen: 22
193.57.94.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:13:49:21:35:61:47:7a:cd:60:da:6e:78:01:e8:50:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Sep 6 14:51:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc3be788c1884b9085fbacd5f7d6dc0677ea4078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:2f:e3:2f:8a:c5:1d:c5:11:e1:dd:2d:d2:
24:95:de:e7:34:a4:5a:f4:2c:fa:bc:8e:da:8b:b8:
ba:2f:4d:d8:1b:50:b2:92:c8:85:a3:f6:62:12:24:
ca:e3:91:f5:5e:fb:54:19:9b:f8:a5:c0:2d:5a:7d:
30:da:ce:a6:d0:3e:eb:2b:e5:a1:7e:41:df:b0:33:
a0:a0:c5:7e:05:1e:fa:df:d3:30:4a:ef:44:2d:6e:
a0:fa:1b:84:f2:06:2b:be:33:2b:d3:f9:96:bd:ef:
ab:75:68:af:37:5e:6c:3c:b5:d0:d5:74:06:28:3e:
93:10:08:bd:35:3b:99:38:e7:d5:cd:14:dc:33:3f:
27:b0:bd:c2:ad:ac:54:1f:40:7c:ca:43:37:97:99:
7c:f3:c4:cb:64:e6:34:c0:5e:e2:75:31:c9:8f:72:
7a:5a:02:97:d7:05:5e:76:53:b0:43:5a:ea:01:33:
fc:90:ca:5e:ff:c8:96:af:40:a7:2a:e7:2d:22:f3:
08:5c:2a:aa:f7:c1:84:11:fe:e4:71:c4:f1:59:12:
5e:0d:1c:ae:c7:06:c5:3c:61:37:f2:e2:60:bc:64:
43:c5:26:1c:fe:55:b5:4e:15:82:d7:a8:2e:2e:4c:
29:26:40:a8:46:30:00:0a:6a:06:5c:7a:0b:aa:70:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:E7:88:C1:88:4B:90:85:FB:AC:D5:F7:D6:DC:06:77:EA:40:78
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/zDvniMGIS5CF-6zV99bcBnfqQHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0/22
193.57.94.0/23
Signature Algorithm: sha256WithRSAEncryption
77:7e:5b:ac:a3:b3:4b:d2:f3:87:1c:1e:fd:64:e8:2b:a0:ec:
cf:48:ae:70:9a:82:9e:a6:bc:1e:64:93:55:25:9f:f6:7b:36:
6f:9e:74:4b:96:22:9d:24:4c:51:50:d6:26:b7:f9:61:f0:07:
d8:6d:aa:a7:4a:31:0b:19:3c:67:8d:49:5e:4e:3a:32:2a:c0:
aa:81:99:b8:54:c2:a8:81:c0:4a:46:51:8b:52:fb:da:2d:42:
60:91:82:5e:a2:88:0c:3f:f1:d6:53:d2:3f:b8:1f:71:57:1f:
90:d0:7b:ec:f2:de:9b:67:d7:34:29:86:e0:6e:08:1b:f7:00:
71:34:3d:30:dc:17:2e:d6:61:eb:08:62:fe:70:b1:1b:88:49:
f1:94:3c:93:c8:70:b4:b7:aa:3f:25:61:99:5b:1e:3d:ab:54:
fc:83:5f:7f:40:e9:0d:84:55:2e:6e:09:dc:4d:5d:17:32:37:
5e:37:df:1f:f4:e4:e9:6b:07:0d:86:c8:54:ce:ba:a9:28:a0:
f6:e9:08:00:9d:19:f1:81:9e:ac:0f:ab:98:07:ee:1a:be:52:
d2:57:e2:55:b8:78:a4:a4:c2:c7:ab:1e:85:6c:48:85:d8:50:
da:bf:ec:df:7b:fa:cb:09:c3:68:71:ab:e9:d7:8d:7c:2e:ef:
8a:46:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org