Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ZOAyZObsAjOk7tOda1Zm2Ftc8wY.roa
File: ZOAyZObsAjOk7tOda1Zm2Ftc8wY.roa (raw, json)
Hash identifier: BDrMrDhW7CLKIH3jlv+L/tP+9AOWjzhlxSqYENc2Mcc=
Subject key identifier: 64:E0:32:64:E6:EC:02:33:A4:EE:D3:9D:6B:56:66:D8:5B:5C:F3:06
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018264719B96053ED600AF8DCCFA86199A77
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ZOAyZObsAjOk7tOda1Zm2Ftc8wY.roa
Signing time: Wed 03 Aug 2022 16:02:23 +0000
ROA not before: Wed 03 Aug 2022 16:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44547
IP address blocks: 45.143.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:71:9b:96:05:3e:d6:00:af:8d:cc:fa:86:19:9a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Aug 3 16:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64e03264e6ec0233a4eed39d6b5666d85b5cf306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d1:f3:ab:36:f3:dc:67:09:ef:e2:55:c4:57:
73:6f:de:30:9d:9f:8b:3f:49:c2:3c:d4:54:39:23:
f5:aa:9a:a1:e0:08:3b:95:e5:c2:23:99:fb:a6:86:
ad:cf:1d:84:08:b7:71:eb:8e:40:9e:2d:65:8f:c0:
ae:a6:2b:ff:3c:db:1e:04:ed:e2:33:5b:5b:6b:c0:
66:52:fa:ba:54:17:8f:ee:75:41:e3:d0:9f:2d:28:
e2:91:2b:3e:b5:1b:5d:53:a6:64:0d:e5:7f:20:fb:
51:80:ba:a2:a9:50:ac:84:a9:d6:97:a8:c7:bd:79:
8f:e5:1a:c4:40:e6:7a:84:fe:d6:0b:6c:5b:6c:bb:
1c:57:d1:0c:d9:92:87:53:66:72:c6:ff:82:c3:cb:
86:34:f4:1f:e7:7b:91:a4:b5:59:da:7c:bd:4a:21:
8c:a0:a1:b1:e7:e3:1a:7d:fb:7e:51:6d:c7:7e:06:
0d:89:67:53:47:56:59:41:8a:98:61:9c:4a:ce:02:
ce:c8:8e:f9:1e:ad:0d:e9:00:62:5f:25:9a:f1:f4:
86:d7:1e:6e:4f:51:44:03:22:b9:d6:80:38:9b:67:
01:1d:ee:46:c1:14:74:9d:e6:bf:db:51:b8:d7:c6:
03:b0:56:bc:10:e1:de:23:27:b9:4f:12:3e:84:2d:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:32:64:E6:EC:02:33:A4:EE:D3:9D:6B:56:66:D8:5B:5C:F3:06
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ZOAyZObsAjOk7tOda1Zm2Ftc8wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.97.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:24:c6:19:eb:79:e5:db:8c:1a:f1:41:26:08:d1:13:f9:9c:
10:38:2c:39:a9:55:d3:7e:e6:c6:e1:9c:39:6c:15:d7:9a:ff:
90:61:ea:2a:f0:30:15:89:30:4b:21:75:0c:96:57:17:51:a7:
9f:72:19:fa:e4:de:e2:8a:0f:d7:6f:8c:2c:3b:d5:91:a7:93:
bb:7f:da:72:6a:7f:63:36:c5:9f:e1:ad:99:6e:d2:87:e1:8b:
9e:9c:13:89:45:80:4a:75:5b:9d:51:77:8a:23:6e:19:5a:58:
9e:8d:2a:04:48:fe:22:80:37:34:87:52:40:20:43:4f:55:d1:
e3:0f:37:f3:24:52:76:ee:80:44:8a:c4:c7:3a:54:98:f3:0d:
1b:59:45:82:72:0d:a7:97:f1:9f:7a:3e:bc:b7:c7:5c:72:f0:
7f:e0:cd:ec:32:c4:22:eb:9a:95:5b:a4:01:4f:c9:4b:06:cc:
2b:80:5e:ac:81:b7:43:72:22:e6:6b:32:95:fb:db:0c:3b:57:
78:9d:81:0a:07:6b:03:e2:56:81:6b:c0:66:2f:40:c3:98:ff:
62:9f:c5:3c:cb:08:b9:1d:b7:97:47:e3:30:af:f3:54:8d:22:
ad:bf:b3:52:69:b1:ab:1b:84:a7:0b:58:d9:46:20:5b:8c:da:
69:ad:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org