Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ZWTBAGYx6Cye-6GHizSx2WtsePM.roa
File: ZWTBAGYx6Cye-6GHizSx2WtsePM.roa (raw, json)
Hash identifier: DG0/MlzXZWEgzebwkarteRg545u1iDI6+TvY8/93KuA=
Subject key identifier: 65:64:C1:00:66:31:E8:2C:9E:FB:A1:87:8B:34:B1:D9:6B:6C:78:F3
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0183B47E078E1D33DEBCC87972D1EC50F28D
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ZWTBAGYx6Cye-6GHizSx2WtsePM.roa
Signing time: Fri 07 Oct 2022 22:08:21 +0000
ROA not before: Fri 07 Oct 2022 22:08:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 45.65.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b4:7e:07:8e:1d:33:de:bc:c8:79:72:d1:ec:50:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 7 22:08:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6564c1006631e82c9efba1878b34b1d96b6c78f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:cb:2a:cf:a8:d4:0e:f9:14:f4:f2:cc:ce:
6b:de:58:e9:cb:80:77:16:3c:18:b2:5b:d6:df:30:
9b:93:21:4f:68:b3:93:b4:91:8b:36:09:45:ba:41:
9c:a1:61:12:c1:d8:2d:40:81:c8:bb:7b:07:7e:1f:
e5:30:1f:c7:f9:de:84:fb:84:6c:87:6d:59:79:b0:
2c:e1:ff:e4:ee:b1:55:45:4d:bb:a8:37:5f:47:66:
39:7f:1d:8f:a0:60:e9:dd:74:27:49:3f:f4:55:46:
7e:76:9d:e4:af:9c:86:58:55:62:e6:ee:3a:38:2b:
d5:01:ab:17:b6:4a:ab:a3:9e:d2:23:db:4a:cc:3e:
ec:01:ac:d5:29:73:68:d7:7f:db:fd:f9:32:46:ba:
1e:7c:72:60:31:06:fb:3d:52:71:7c:69:65:ee:df:
aa:01:08:da:fd:91:16:7e:11:1a:9b:f0:c4:89:0c:
d3:d2:e3:40:42:5e:9c:a4:b5:8d:dc:70:6c:98:23:
ef:c1:e3:3b:cc:03:83:f3:bf:77:2b:3a:4a:a7:9a:
30:4f:f6:ab:db:33:a2:43:39:f1:0a:19:fb:83:b4:
3b:62:5d:af:91:23:00:97:e9:81:fd:19:e0:69:79:
9f:ff:3b:37:c1:27:99:1e:1b:e9:d5:56:28:8c:0f:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:64:C1:00:66:31:E8:2C:9E:FB:A1:87:8B:34:B1:D9:6B:6C:78:F3
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ZWTBAGYx6Cye-6GHizSx2WtsePM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:dd:b8:fa:ad:37:ba:cf:57:09:34:e7:d5:f6:01:98:73:12:
cd:88:fc:9c:5f:d6:b9:3b:8f:40:6a:0a:86:d1:29:0c:df:39:
0e:19:24:5b:f8:6b:21:6e:f2:e5:9d:d1:c7:0c:b9:eb:b1:98:
68:c3:54:9f:c9:0f:88:67:29:10:dc:e7:df:f8:c4:a2:01:27:
30:f5:5d:f0:9e:13:07:12:b8:c1:6b:fd:07:bf:a5:ec:84:9e:
f1:77:27:fe:5e:c2:1a:21:ba:21:29:0e:d8:29:f3:47:c7:36:
30:c4:4f:20:e2:39:b5:88:bd:d7:10:a2:a2:38:76:e7:9e:66:
f2:2d:58:9b:a4:7b:25:e5:49:f0:91:82:59:80:74:63:f2:7a:
f8:d4:d5:94:1a:81:0b:6d:0f:8e:aa:5c:a0:3b:9d:54:dc:41:
ad:4a:e5:ad:e4:04:b3:c7:f8:9a:25:89:c0:ae:56:af:36:13:
35:a3:17:83:4c:65:05:63:60:43:19:ea:23:29:ae:06:e7:bf:
82:80:d4:20:a3:4f:d4:ac:57:bd:59:73:d5:bb:b4:63:f8:7e:
8c:bb:c9:d2:1b:d6:5b:7c:9d:9b:89:19:b5:6c:c2:73:32:41:
7e:53:6c:69:d1:94:49:bc:8a:e9:66:82:b4:03:5c:c9:66:c1:
7c:ca:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org