Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zLpLMJlXi0r-19-hknK2HCCRERM.roa
File: zLpLMJlXi0r-19-hknK2HCCRERM.roa (raw, json)
Hash identifier: BobnY55sxh2aKdHzHTrsvBXJ00DoIEcaSX8qWZ+RDBs=
Subject key identifier: CC:BA:4B:30:99:57:8B:4A:FE:D7:DF:A1:92:72:B6:1C:20:91:11:13
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185104B161BBFE33DA7E2F896231AF8DCDE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zLpLMJlXi0r-19-hknK2HCCRERM.roa
Signing time: Wed 14 Dec 2022 11:00:34 +0000
ROA not before: Wed 14 Dec 2022 11:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:4b:16:1b:bf:e3:3d:a7:e2:f8:96:23:1a:f8:dc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 14 11:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccba4b3099578b4afed7dfa19272b61c20911113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:8c:56:9e:9f:f2:d4:dc:43:2c:8c:76:4c:
15:b0:ee:09:df:c3:a1:47:35:88:53:40:72:16:b7:
3e:cb:1c:5e:bd:b7:fc:17:40:c5:cb:f6:8b:f5:ac:
47:1f:b9:41:3d:be:18:53:65:c5:85:71:1f:7e:e5:
09:05:c1:4b:89:50:71:12:10:06:f7:d9:c2:25:aa:
d7:a4:32:e6:5d:2c:52:80:ab:7d:c2:f0:a3:88:20:
db:9e:83:12:30:d3:8c:c8:e8:34:4d:9d:c1:39:75:
d0:e1:f9:fb:67:0b:a2:2b:b0:91:27:60:4c:5a:6d:
be:ae:3a:2c:f5:78:69:0b:d3:19:71:1f:d8:c6:16:
23:f5:bf:d7:4f:54:e5:66:88:0f:40:a1:a2:36:43:
37:ff:0f:05:e2:68:00:8c:e1:c9:34:aa:49:30:cb:
9f:f1:d8:3f:33:c4:88:de:b2:20:ad:8d:f6:69:f9:
b3:f9:9a:b9:0b:02:05:fc:a4:a4:da:ac:5d:ef:b6:
b4:34:10:93:b4:b3:15:d3:e0:10:1b:05:18:78:e2:
3d:2c:59:ac:31:a0:d6:c9:fd:88:ab:43:6c:11:6f:
11:93:28:e9:7d:e4:f7:34:80:e6:68:1e:7c:d4:6e:
77:61:4a:5c:09:10:79:b9:9c:1a:a3:0d:74:e8:71:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:4B:30:99:57:8B:4A:FE:D7:DF:A1:92:72:B6:1C:20:91:11:13
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zLpLMJlXi0r-19-hknK2HCCRERM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cf:02:20:77:0b:46:18:b9:87:a6:90:88:0c:db:2b:aa:36:
d2:3b:3f:0c:a5:6c:b9:53:9e:15:a0:a9:50:a7:3c:57:23:2c:
96:16:a9:9f:bf:a2:19:21:b0:9c:39:d7:c7:58:5e:9f:5b:24:
28:db:f9:27:10:ec:24:80:eb:4d:15:6e:cf:77:f7:7b:04:24:
6f:8b:c3:8d:ca:4f:0d:50:98:14:3d:dc:a5:39:c9:77:52:af:
35:ba:0e:16:1e:bd:47:bd:d6:83:4e:39:31:f2:7a:7e:4b:3b:
97:9f:ec:3f:f6:02:ef:27:3e:7b:dd:c4:80:ae:43:d2:39:ce:
f6:76:33:3a:6b:ee:4d:de:ad:1c:38:9a:50:ae:03:61:ac:37:
82:9d:1f:1f:66:5e:7a:8a:66:82:5f:64:0f:b0:18:be:fb:98:
f1:af:af:d4:1a:39:d9:13:05:1f:3d:2b:74:fd:22:e9:26:17:
60:58:21:e3:26:ea:4c:9b:2e:de:7a:e3:29:64:f4:8c:ac:1c:
58:d7:79:c0:bc:8e:8e:7b:de:1b:2f:53:8d:73:1b:07:66:5f:
31:b0:83:21:58:c9:cf:c7:6e:91:05:7b:6f:71:06:6e:33:b0:
ca:9d:23:c6:20:37:76:0c:74:f6:ed:2e:f1:61:e6:d7:4f:bc:
18:7b:00:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org