Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zH-0NdAbjJbFMSDPkDwwp8iXBxg.roa
File: zH-0NdAbjJbFMSDPkDwwp8iXBxg.roa (raw, json)
Hash identifier: cCJBFp7qxVAH2fJKb/w0P9UWzpCGVq+OO7bAP0mUNqo=
Subject key identifier: CC:7F:B4:35:D0:1B:8C:96:C5:31:20:CF:90:3C:30:A7:C8:97:07:18
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0498038A
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zH-0NdAbjJbFMSDPkDwwp8iXBxg.roa
Signing time: Wed 25 May 2022 17:07:13 +0000
ROA not before: Wed 25 May 2022 17:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210512
IP address blocks: 45.130.68.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77071242 (0x498038a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: May 25 17:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc7fb435d01b8c96c53120cf903c30a7c8970718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fb:6c:f9:53:3b:fa:36:bf:7c:51:32:3a:09:
ca:26:47:e5:6d:1c:75:ef:84:1b:ff:30:d1:42:3e:
fb:91:47:91:54:d7:31:50:a2:59:1a:a3:74:45:e8:
55:a0:04:80:77:4a:75:94:15:64:aa:d1:50:0e:5b:
b4:38:dd:ce:22:0c:5d:fc:e8:c5:eb:8d:39:bf:a2:
c0:54:78:8f:90:e0:59:a4:97:f4:66:72:5a:29:eb:
63:05:38:16:32:ef:d2:6e:b4:6d:38:5f:75:4e:8d:
e9:23:6e:92:fc:22:a8:8e:ea:7f:7d:62:9e:6d:0d:
04:30:19:13:c0:0e:6e:22:e1:7d:e7:41:50:a1:66:
cd:ba:d1:74:00:68:40:c7:39:2e:b4:7b:7a:f7:aa:
75:61:f9:e3:7d:b6:1c:2e:91:94:4f:9b:8c:f3:04:
ea:30:3b:14:56:e0:73:55:7f:f3:30:2d:3b:ac:34:
94:88:30:0f:92:31:e0:06:40:c9:27:8f:fa:83:45:
5b:72:44:41:74:54:e7:21:ff:5d:61:28:d2:75:46:
d6:2b:7f:81:a3:9c:fb:c8:06:81:89:62:d2:33:3f:
b5:b8:74:56:ba:15:d6:1b:ee:b2:b2:5c:a5:a4:66:
52:d4:4d:ba:49:3e:fa:68:f5:c8:e2:74:f1:f4:6a:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:B4:35:D0:1B:8C:96:C5:31:20:CF:90:3C:30:A7:C8:97:07:18
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zH-0NdAbjJbFMSDPkDwwp8iXBxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.68.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e2:16:b1:9c:0e:9a:48:83:d9:af:95:25:53:c6:65:4f:7e:
08:60:40:21:85:20:e3:cb:49:83:e0:47:28:81:1e:73:0a:c3:
ee:d8:77:03:41:83:7a:48:a2:2c:cd:96:d1:a9:ad:02:ad:2e:
a4:5b:26:df:c0:40:39:45:eb:26:56:52:17:da:ff:9e:84:5b:
16:dc:8d:5b:3b:88:39:7a:37:6a:45:62:f1:e6:78:1c:0c:5e:
39:10:0d:ee:98:cb:82:b8:79:89:a3:c9:42:c0:af:81:ac:16:
e5:2a:78:9e:48:70:ed:a4:b5:22:03:23:ff:ee:6a:5f:ef:48:
66:26:cb:69:9b:a4:d3:ee:c0:be:25:9a:bc:4e:25:2c:7a:16:
41:a2:82:78:d5:f6:4d:03:17:26:aa:1a:5e:c4:ff:2c:68:bf:
7f:3a:fd:5c:af:af:63:79:c1:80:6e:b8:53:c9:4b:dc:d8:48:
1a:35:62:24:38:41:61:b9:ff:48:9e:34:a1:68:84:93:a9:27:
70:be:0e:16:cc:f5:ae:74:97:30:d9:3e:d5:26:7b:12:90:ce:
46:bc:4c:c1:03:48:eb:33:f6:c5:e8:3e:6a:b8:eb:71:f3:c4:
f3:93:57:d2:91:7a:fc:b1:9e:41:74:11:bc:29:66:ed:d1:4e:
2d:92:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:39 2024 by rpki-client on console-fra.rpki-client.org