Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/ZbJN12Wu-w1hadxbNuVZoozkVY0.roa
File: ZbJN12Wu-w1hadxbNuVZoozkVY0.roa (raw, json)
Hash identifier: n0KvdBYeGUmgSzIdWXlbQAXt6nnM6tW7gAd6xgQtTV0=
Subject key identifier: 65:B2:4D:D7:65:AE:FB:0D:61:69:DC:5B:36:E5:59:A2:8C:E4:55:8D
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 08FDE7B6
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/ZbJN12Wu-w1hadxbNuVZoozkVY0.roa
Signing time: Sat 01 Jan 2022 08:02:26 +0000
ROA not before: Sat 01 Jan 2022 08:02:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137
IP address blocks: 151.100.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150857654 (0x8fde7b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Jan 1 08:02:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65b24dd765aefb0d6169dc5b36e559a28ce4558d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:fc:6e:cf:46:b4:c5:00:68:52:48:d8:c0:
ec:79:9a:d4:59:4f:46:47:18:bd:d6:eb:b1:66:6f:
2c:04:e2:c4:7c:48:28:db:d0:b9:79:90:af:c4:f4:
cf:63:b2:9a:27:d6:74:ef:4b:06:f0:88:64:9e:27:
e6:a4:9e:22:19:98:da:0f:82:11:7a:97:7b:a9:7b:
98:af:e7:4e:94:75:a4:7b:ab:45:17:ab:9f:5d:3c:
56:1c:05:e6:8f:12:98:84:21:88:4b:46:02:13:bb:
d7:d0:c3:94:4f:d9:3d:fd:41:be:d6:6e:45:7e:c5:
02:64:6a:e6:8c:4e:49:a7:c8:da:d4:a5:77:76:a8:
54:14:42:59:fa:8d:48:e9:bc:1e:c5:be:a2:7f:08:
47:5d:ff:e3:88:94:15:e7:9c:c0:5a:f8:c9:87:20:
f4:ea:4f:4b:a6:20:31:40:3c:b0:25:29:b9:7c:71:
a3:91:1f:d7:6b:e7:56:ef:2e:e2:aa:91:8f:78:89:
72:2e:3f:ac:19:62:50:cd:b0:f7:17:cf:cf:4a:d1:
cf:11:1c:3a:0a:93:24:cf:31:6c:ab:d0:29:4c:67:
87:27:68:cc:53:b4:0d:4f:9f:3e:f7:9a:e2:d3:cd:
7c:9b:f4:1b:82:93:a0:aa:ae:a3:8c:6e:11:b0:6f:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B2:4D:D7:65:AE:FB:0D:61:69:DC:5B:36:E5:59:A2:8C:E4:55:8D
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/ZbJN12Wu-w1hadxbNuVZoozkVY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
01:06:d8:7c:61:34:c4:81:6b:c2:18:a3:96:fb:fb:9a:d9:2c:
62:e8:9c:a8:6d:10:da:b8:f7:a3:8f:85:68:c4:e2:c5:c8:3f:
8b:82:0a:09:62:d3:bb:3c:43:95:7d:02:96:ee:c5:3d:d6:17:
8f:eb:7c:0d:c5:9c:69:34:16:39:99:02:4d:f6:97:1b:34:32:
03:3d:ad:38:86:46:3d:34:60:7f:d5:ec:eb:fc:25:01:55:17:
53:1f:4e:fd:82:84:f6:c6:77:bc:4d:de:b9:13:a8:9e:4e:e8:
d5:41:25:f1:fb:6d:b0:bf:d8:68:82:44:e6:bb:3b:c9:6f:76:
8a:0e:7c:30:82:f9:4a:7d:6e:68:d2:1b:e9:6f:55:84:c5:4f:
8a:ea:1f:d5:f5:e3:9e:e7:e9:af:89:4b:e0:d3:25:47:e5:f4:
a3:26:30:8c:27:94:2c:22:07:53:b9:8b:f6:8d:c5:ee:4d:f5:
d2:03:0c:94:40:7e:54:af:f7:0d:28:ef:3a:c0:17:9b:99:c0:
09:a3:21:44:7b:f6:c8:05:5e:9b:11:d7:62:71:6a:ed:e5:f8:
89:9b:e9:1c:5d:a8:7d:c1:0d:ba:86:c2:7a:02:57:0e:02:f9:
2a:1a:e5:f8:8f:96:02:42:e6:13:a5:3b:44:2f:b1:c2:69:7c:
5c:ec:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:44 2024 by rpki-client on console-ams.rpki-client.org