Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/1-Zux-PczmP6bm6ew3Zas6NYeHak.roa
File: 1-Zux-PczmP6bm6ew3Zas6NYeHak.roa (raw, json)
Hash identifier: Daqr7NjBGsLpAZ777oE40hIZ5vAov9AJ73PhxjLZVO8=
Subject key identifier: F9:9B:B1:F8:F7:33:98:FE:9B:9B:A7:B0:DD:96:AC:E8:D6:1E:1D:A9
Certificate issuer: /CN=188a460189ee14abceda75997194ccbfe3c58b6b
Certificate serial: 04897DA3
Authority key identifier: 18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/1-Zux-PczmP6bm6ew3Zas6NYeHak.roa
Signing time: Sat 01 Jan 2022 00:59:09 +0000
ROA not before: Sat 01 Jan 2022 00:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199927
IP address blocks: 45.11.12.0/22 maxlen: 22
45.11.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76119459 (0x4897da3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a460189ee14abceda75997194ccbfe3c58b6b
Validity
Not Before: Jan 1 00:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f99bb1f8f73398fe9b9ba7b0dd96ace8d61e1da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:a4:4f:88:38:68:b5:2c:e0:fe:d9:33:16:
62:cb:11:cc:50:bc:69:7b:50:d5:8e:18:d5:aa:15:
e2:ce:be:29:bf:c9:fb:39:5f:71:c4:1a:9c:91:29:
ce:f2:c4:de:7a:1c:38:d5:2c:1a:ea:7f:3f:40:49:
14:ee:a1:2d:a4:ec:73:af:66:72:53:e6:f0:f3:33:
01:0c:74:f8:a7:ce:e5:9f:77:ba:8f:1c:59:fd:78:
85:d9:96:01:0e:ec:76:92:31:0d:f6:91:df:8e:12:
41:34:28:93:4c:90:cd:09:1b:85:90:7f:12:bb:22:
7e:28:12:37:35:95:4a:1e:ad:75:a3:b3:85:65:cf:
cd:50:e9:6f:36:d2:53:1c:c7:5a:bb:f7:48:e4:3b:
26:f0:39:34:39:ed:ad:8b:7b:32:08:fd:84:9c:67:
b2:6d:81:23:5e:60:06:49:9f:d0:fa:9a:15:56:90:
4f:94:87:14:6c:bb:ae:30:68:7e:1c:9a:0e:30:3c:
32:74:68:fd:ac:1e:42:f0:73:e2:1c:e5:bf:b1:a1:
04:45:e8:7a:41:b5:44:2d:b8:35:03:d8:a3:76:49:
9d:8c:7d:72:03:e4:2e:fc:8e:ee:20:f2:c0:b5:bb:
b4:2b:bc:f9:22:13:c6:c7:68:a6:94:47:c8:24:e0:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:B1:F8:F7:33:98:FE:9B:9B:A7:B0:DD:96:AC:E8:D6:1E:1D:A9
X509v3 Authority Key Identifier:
keyid:18:8A:46:01:89:EE:14:AB:CE:DA:75:99:71:94:CC:BF:E3:C5:8B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIpGAYnuFKvO2nWZcZTMv-PFi2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/1-Zux-PczmP6bm6ew3Zas6NYeHak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/36d245-ed0e-4c55-b6ba-bcee5b1be0cb/1/GIpGAYnuFKvO2nWZcZTMv-PFi2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.12.0/22
Signature Algorithm: sha256WithRSAEncryption
67:0c:5e:73:18:f2:48:61:b3:c5:79:e8:43:a2:76:6a:c1:74:
af:41:41:20:ac:7a:6e:be:de:82:c8:98:83:e3:02:fc:18:3d:
81:8e:a8:f4:49:e3:c3:8d:c1:4e:80:3c:ca:ef:36:34:9a:dd:
7c:e7:ad:b7:93:63:49:86:04:97:ef:72:bb:46:43:cd:ae:57:
21:6c:a7:33:3e:29:f3:04:68:2f:e5:ff:fd:a9:7a:30:cf:3d:
66:5b:af:ed:e0:7d:04:e9:75:82:e3:c3:9a:01:c9:05:8c:0f:
61:df:81:16:22:dd:4b:55:2e:06:91:4c:66:68:a9:55:c8:4c:
68:22:e1:d8:c0:e5:9e:c0:39:63:8b:76:2a:56:f3:5b:33:99:
34:a8:49:53:e4:7e:5f:e6:bb:df:cd:23:ac:0d:ec:2d:b2:b1:
f5:55:3f:41:79:92:4c:7b:9e:d4:72:0a:da:a8:09:bf:2f:e5:
b3:0e:5f:9c:12:3a:43:ad:e1:8b:cf:9b:0e:af:5b:c8:b0:c6:
4c:1d:f2:be:80:60:b7:c6:28:48:11:b2:9e:b8:6e:d3:47:5d:
fa:eb:da:05:af:00:b3:09:e7:a4:a1:a4:81:19:d2:6b:41:83:
7a:c4:8d:0e:3b:bf:63:5b:79:9a:56:d3:96:d2:d1:97:26:1d:
8f:b6:26:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:44 2023 by rpki-client on console-ams.rpki-client.org