Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/vZnzyDRfevV9vVhrSSGqt-oILzE.roa
File: vZnzyDRfevV9vVhrSSGqt-oILzE.roa (raw, json)
Hash identifier: z6eK75pr/GGkJkQ4ZR81z3Hr+dpkbRkV3VqkvC5XwVk=
Subject key identifier: BD:99:F3:C8:34:5F:7A:F5:7D:BD:58:6B:49:21:AA:B7:EA:08:2F:31
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 0189BBE33C15CB24AECEE0E77141DDBF4449
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/vZnzyDRfevV9vVhrSSGqt-oILzE.roa
Signing time: Thu 03 Aug 2023 14:52:58 +0000
ROA not before: Thu 03 Aug 2023 14:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207281
IP address blocks: 45.128.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:e3:3c:15:cb:24:ae:ce:e0:e7:71:41:dd:bf:44:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Aug 3 14:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd99f3c8345f7af57dbd586b4921aab7ea082f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:cc:b5:1b:e8:1e:88:23:09:6f:c9:cf:ec:
18:d5:99:3e:d0:29:f4:e3:44:fb:11:0c:94:8c:f8:
f2:8c:78:48:2b:6f:76:f4:e8:57:ca:45:0a:03:7a:
56:9b:82:0b:f0:58:ff:4c:d1:43:20:fd:ce:1f:a0:
61:bb:91:ed:e0:29:e2:6c:d0:0c:0b:8f:6f:21:7f:
9f:79:6e:e5:b6:23:26:2f:78:60:02:40:ee:52:0b:
ad:21:8c:15:72:52:1f:b0:66:98:04:5d:e6:f7:d2:
87:8a:cf:d0:0f:78:81:44:df:96:84:d9:1d:90:f8:
2b:9c:c9:c1:be:0a:58:d8:0b:74:b8:ff:17:7a:1c:
92:b4:41:fe:f2:3e:82:c2:b5:ff:e4:33:97:a0:cf:
e6:fa:3f:fb:3d:c0:e4:c6:3b:fb:f3:64:4e:de:c6:
f6:1d:98:ea:39:0c:1f:1b:6b:d3:70:85:51:02:ae:
52:2c:b8:65:b5:fa:7d:cc:1d:ac:3e:1e:f7:8e:9c:
22:d9:7e:aa:c4:ff:19:ca:ce:7b:15:ce:18:31:57:
87:a0:a8:67:47:bd:7b:cc:9f:c1:a9:43:f7:ec:b3:
5e:ec:21:11:6d:40:14:fc:99:c6:1a:58:16:88:1d:
a0:bd:e0:ec:9c:5c:6e:ad:83:dc:cb:7d:84:ba:0a:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:F3:C8:34:5F:7A:F5:7D:BD:58:6B:49:21:AA:B7:EA:08:2F:31
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/vZnzyDRfevV9vVhrSSGqt-oILzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.120.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:13:97:da:26:3d:01:ba:ad:4f:1b:ae:e7:8e:46:a9:f8:f7:
da:35:63:89:f9:eb:cd:3e:3d:a4:5d:6b:51:4d:0a:e0:e8:8b:
2f:3d:d5:63:5b:0d:d4:8a:1b:80:5c:1d:81:be:84:8a:68:b7:
df:fe:bd:a6:6b:36:b5:9b:46:b2:e2:7c:61:37:09:4c:f6:f6:
b1:c3:15:ff:c8:d9:93:2f:82:94:f0:4b:2d:7e:b5:5f:95:38:
4f:4a:6e:c8:ed:cf:77:94:fc:97:3e:72:04:c5:95:83:9c:a9:
2d:ce:ac:8e:9c:51:32:5a:db:f5:69:76:4b:82:fe:e6:fc:ea:
17:3b:eb:bf:d0:ff:78:83:4b:67:22:35:da:11:34:5d:37:02:
19:af:6f:16:fa:83:71:ef:d3:df:aa:1a:56:80:2c:37:9a:e9:
1c:0c:d1:36:30:d7:6e:cf:f3:90:3f:f1:e6:31:72:fd:44:09:
ee:bd:6c:f9:d5:6c:80:50:10:12:f2:bb:12:b0:06:33:e4:f1:
97:4e:a6:14:2a:3e:47:95:d3:85:5e:a0:60:fd:86:ec:2f:34:
43:42:11:e7:a0:72:b3:11:52:dd:e2:76:76:a8:6d:b8:76:cc:
35:a1:3e:d1:f5:7f:7a:c0:01:3b:4c:3e:7c:70:10:86:8c:ce:
c4:03:6f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:33 2025 by rpki-client