Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zZSUFXJloMsoDvwFo7oss42xHBk.roa
File: zZSUFXJloMsoDvwFo7oss42xHBk.roa (raw, json)
Hash identifier: 3SfTsLwe+VyKOcZkAc4f/Frst8qQAcurAAZBWkt8POY=
Subject key identifier: CD:94:94:15:72:65:A0:CB:28:0E:FC:05:A3:BA:2C:B3:8D:B1:1C:19
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01847AD410537BE653FC1BE30B7EEA0F67CC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zZSUFXJloMsoDvwFo7oss42xHBk.roa
Signing time: Tue 15 Nov 2022 10:27:08 +0000
ROA not before: Tue 15 Nov 2022 10:27:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42708
IP address blocks: 45.13.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7a:d4:10:53:7b:e6:53:fc:1b:e3:0b:7e:ea:0f:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 15 10:27:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd9494157265a0cb280efc05a3ba2cb38db11c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:06:1d:ea:d8:4b:d7:93:64:8d:da:0c:35:
d7:e9:6b:4c:1d:75:ea:23:b0:45:18:d4:c1:1b:e4:
e9:38:d2:c2:7a:46:50:64:60:01:bf:20:89:9a:7e:
82:e7:16:45:e6:7a:0d:d2:ed:92:09:6a:6d:bc:b4:
3a:10:0e:ac:78:b5:f9:5e:e5:c4:af:2a:4c:e0:be:
c8:dd:a1:ec:33:4f:1b:01:64:0b:34:cb:43:31:0b:
56:94:34:de:08:a1:c0:81:fb:d7:3b:da:ae:58:47:
93:79:92:8a:e9:e5:e2:3a:43:db:23:a0:12:30:20:
1b:d9:d2:0a:e2:87:23:e0:e3:d3:5b:bd:4a:86:6f:
5e:17:83:58:8a:05:9f:fd:77:3a:4c:e0:7b:70:2e:
e6:9c:60:d7:21:91:cf:6f:13:51:b1:fe:50:ff:ce:
33:0b:7f:a4:f8:a5:f5:27:e1:10:25:1e:92:24:7c:
77:3e:b6:e4:03:6f:66:57:5f:1d:85:66:aa:80:db:
75:f1:47:f5:4b:ce:78:2e:3d:f0:e5:e4:91:4f:bd:
f9:91:a5:6f:06:f4:e6:d2:d3:02:02:cb:00:e5:6a:
4e:6c:2b:8a:22:4a:e8:f7:df:6d:bd:b9:35:f9:af:
a6:92:39:e5:ed:a9:8f:d4:05:8a:4f:58:be:17:76:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:94:94:15:72:65:A0:CB:28:0E:FC:05:A3:BA:2C:B3:8D:B1:1C:19
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zZSUFXJloMsoDvwFo7oss42xHBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.191.0/24
Signature Algorithm: sha256WithRSAEncryption
67:60:ea:7c:9a:ba:73:73:e4:24:d9:fd:04:e3:22:8d:70:56:
28:48:f8:44:14:23:c8:2a:f8:33:ec:fa:9c:a3:0a:3d:bc:b4:
f6:bd:f5:fd:3f:46:1c:95:a7:87:70:35:fc:99:44:2e:8d:d1:
85:ec:b3:8f:88:b4:3f:75:01:e5:d6:81:06:66:18:08:73:0f:
d7:cb:1d:10:20:7c:83:82:3b:69:c8:c4:dd:f4:d9:a1:fb:55:
42:6a:01:87:ef:af:61:c4:ff:44:49:91:eb:a0:74:2f:37:b5:
f4:4c:75:7d:13:9f:51:80:9d:aa:e3:23:46:17:f9:db:0f:39:
94:fb:28:bd:4c:ce:a4:b4:40:f2:e1:43:0b:51:9a:96:3a:c5:
d0:15:6c:96:5e:cb:2c:d2:7c:cf:58:02:77:13:34:62:a2:39:
e1:f8:d2:80:3f:93:c1:49:a3:1a:63:c6:35:5a:75:18:60:2c:
a0:f2:d6:1d:cc:4a:75:40:d8:59:75:55:19:14:02:c3:50:dd:
b0:75:0a:fb:2a:85:19:f5:0d:5e:4b:b0:15:88:c3:09:b2:42:
61:3b:8e:98:f0:b7:c5:8f:6f:e7:c6:5c:1f:78:65:af:4c:78:
ed:20:0a:0e:3c:96:fa:d1:41:6f:a8:91:8a:03:eb:88:91:1f:
68:c8:1f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org