Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/ZiWlqM2yWbCgPQPRG4-fqFGXGEs.roa
File: ZiWlqM2yWbCgPQPRG4-fqFGXGEs.roa (raw, json)
Hash identifier: s48y2EiZVuc/Oel0A6KYairKKqMpvEBd7+Lo7rPiz2g=
Subject key identifier: 66:25:A5:A8:CD:B2:59:B0:A0:3D:03:D1:1B:8F:9F:A8:51:97:18:4B
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 08304F16
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/ZiWlqM2yWbCgPQPRG4-fqFGXGEs.roa
Signing time: Sat 01 Jan 2022 04:02:16 +0000
ROA not before: Sat 01 Jan 2022 04:02:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208651
IP address blocks: 45.91.152.0/22 maxlen: 22
45.91.152.0/24 maxlen: 24
45.91.153.0/24 maxlen: 24
45.91.154.0/24 maxlen: 24
45.91.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137383702 (0x8304f16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Jan 1 04:02:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6625a5a8cdb259b0a03d03d11b8f9fa85197184b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:1d:41:b1:b5:27:76:9b:24:61:5b:16:69:
37:49:52:28:21:f9:a8:cb:61:4f:4f:0a:4a:fe:fd:
3c:d7:b7:ce:72:ff:45:04:9e:c0:d6:b9:dd:72:19:
5f:2a:64:21:09:ff:a8:6a:f3:16:c5:e0:c7:f9:57:
46:8b:2f:23:46:b5:07:33:6a:18:8d:4f:7d:63:82:
4f:c1:03:8a:3e:c4:e2:77:c2:b2:b3:56:8b:d9:55:
2c:2e:75:fd:ed:01:7b:d4:08:81:34:11:c3:13:13:
22:06:19:ca:d8:e0:29:92:5f:73:0d:a7:0d:99:ab:
fc:bd:2b:f5:38:8c:78:76:be:66:e9:53:1c:f3:22:
21:b7:ec:22:b5:5a:96:8c:52:31:28:30:a3:d4:f9:
ab:b8:95:e1:81:f7:92:61:62:19:ee:b1:3f:50:7f:
9e:65:b4:a6:5e:72:8f:c3:1d:6f:ac:d4:b7:6a:0f:
ef:ae:69:05:bd:95:a3:b0:9a:e5:26:9f:c7:db:84:
dc:f5:e3:12:5d:ba:9d:36:6d:41:86:47:19:70:87:
a3:18:a5:ee:3e:9f:0f:6d:ac:8f:18:23:32:c6:0d:
f7:21:c8:9b:7b:fe:2b:d3:6a:95:5b:c0:e8:5d:25:
0d:8c:68:83:31:16:c3:a4:c2:e8:6b:fd:ac:95:bd:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:A5:A8:CD:B2:59:B0:A0:3D:03:D1:1B:8F:9F:A8:51:97:18:4B
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/ZiWlqM2yWbCgPQPRG4-fqFGXGEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.152.0/22
Signature Algorithm: sha256WithRSAEncryption
29:8c:20:d2:15:ac:3f:ac:ef:14:d5:8a:9f:42:de:c5:85:90:
db:0a:e9:7f:df:6b:5a:73:fe:fd:53:e0:09:9a:fe:51:11:0e:
75:ef:c9:14:5c:f0:83:e4:ab:53:1c:58:d4:3c:61:a8:24:fb:
5d:27:90:33:8b:9f:11:ca:5d:f6:81:eb:cb:5a:8d:b4:a9:67:
72:66:0c:79:08:49:28:64:40:b4:5e:e7:3a:4b:14:58:4c:27:
83:f1:80:67:94:4f:0d:c9:15:09:b0:92:0a:2d:8d:63:be:9e:
eb:40:98:0d:d3:47:df:e2:eb:d2:72:5d:25:2c:fb:4b:d1:b4:
ef:fe:67:3b:ed:85:60:36:57:c2:bf:36:27:40:d5:85:a0:ac:
f0:59:f3:99:c7:45:4e:b4:2d:2b:ed:fc:c5:57:15:4f:1a:a4:
58:96:81:8d:81:15:0c:29:30:b8:af:b4:7b:99:db:bf:60:23:
23:bf:b7:03:5e:f2:53:08:bd:d6:9d:29:24:99:d2:92:39:a7:
6c:91:ba:96:2b:4f:2d:e2:b5:0d:03:d7:07:27:ad:ab:bd:05:
a7:32:4b:9b:6f:8b:44:21:43:81:9b:f0:af:b3:53:61:24:b7:
53:ec:3a:7e:71:ee:11:ec:76:9f:96:0d:48:0d:8a:7d:93:80:
fc:54:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:18 2024 by rpki-client on console-ams.rpki-client.org