Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/ZOSM_hwFzr-ES-x6pGqtFyHE1lk.roa
File: ZOSM_hwFzr-ES-x6pGqtFyHE1lk.roa (raw, json)
Hash identifier: g9vGK6MVkwROjVKOHSr6C7ubV7VoVfV6+mOdJqaufVo=
Subject key identifier: 64:E4:8C:FE:1C:05:CE:BF:84:4B:EC:7A:A4:6A:AD:17:21:C4:D6:59
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 1590EB63
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/ZOSM_hwFzr-ES-x6pGqtFyHE1lk.roa
Signing time: Sat 01 Jan 2022 15:55:46 +0000
ROA not before: Sat 01 Jan 2022 15:55:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47616
IP address blocks: 160.40.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361818979 (0x1590eb63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Jan 1 15:55:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64e48cfe1c05cebf844bec7aa46aad1721c4d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b2:13:f1:a6:2c:50:58:27:15:9d:96:4b:f6:
51:3f:c4:0d:ad:b3:54:24:de:f0:a9:09:33:5f:8b:
ac:e6:d6:7b:6d:6c:0a:01:77:08:74:2b:11:de:77:
57:3c:4a:50:99:92:d3:61:47:e3:52:d0:54:10:06:
33:4c:7f:2a:f6:ba:7b:9a:bd:d6:97:b4:c7:f2:c8:
c1:32:bf:02:2d:ce:14:a7:6a:46:55:b3:be:4e:1c:
f6:4a:52:f3:33:bd:f8:52:23:a9:94:e7:8b:0c:98:
61:c9:f2:46:39:f6:c2:28:47:21:f4:0d:cf:0c:ff:
36:d3:a9:22:f9:09:dd:85:b9:d5:ee:95:71:00:3f:
96:98:4f:91:56:a2:cf:a8:a8:b0:62:9d:7f:f1:df:
b8:14:91:af:9b:33:1c:ce:2e:c0:73:df:52:72:e2:
72:05:e9:98:8d:a7:96:63:fd:de:b6:50:23:ce:0e:
77:b6:5c:f9:03:1b:9f:ab:49:e1:c6:d6:b5:ff:d5:
f1:5a:e4:84:3e:ed:95:2a:b2:51:25:39:d8:41:ec:
0a:a4:30:17:cd:23:56:56:85:b5:99:05:ee:41:4d:
e2:ec:0d:a3:ab:3f:d7:72:92:9d:fc:3d:7d:6a:a3:
4a:10:2b:a8:a3:6c:73:52:34:2c:a1:eb:62:69:da:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:8C:FE:1C:05:CE:BF:84:4B:EC:7A:A4:6A:AD:17:21:C4:D6:59
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/ZOSM_hwFzr-ES-x6pGqtFyHE1lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:12:19:45:31:1c:d2:26:fd:0a:29:53:8d:ff:4d:8e:85:72:
69:e9:0d:4f:b8:26:48:f9:2c:ba:b1:a5:b0:ed:0c:2f:47:f2:
69:6e:80:d8:2d:ee:bd:f4:13:01:96:de:ed:c2:b7:8e:98:e0:
da:ec:59:a5:35:6e:43:ae:2c:57:29:af:05:52:76:c6:23:44:
87:ff:9d:f4:ad:b0:c7:84:e9:92:65:3f:ac:f2:14:63:0f:a0:
57:07:12:47:92:5a:7a:fa:c6:0a:b5:02:1b:fa:e4:c4:de:0e:
47:17:ac:fd:91:aa:df:05:cf:3f:40:f7:b1:4f:cb:1a:83:36:
ec:ab:09:c0:b4:f4:ee:6f:7d:a0:6d:67:e6:66:38:3e:82:0f:
57:b2:6c:a0:01:70:f9:cd:46:48:64:c5:04:37:79:44:de:08:
c9:a6:06:ab:4b:46:52:fd:72:2a:24:7b:ab:63:9e:66:4f:65:
76:ee:d1:f9:b5:e1:59:8d:07:4f:b9:02:f7:fd:87:39:58:c6:
82:e4:03:49:68:4e:85:22:c0:ec:af:3d:64:4e:9e:5e:f1:0d:
97:ba:37:97:82:98:24:3f:ad:6b:a5:c8:95:3d:6a:51:eb:57:
dc:22:8f:9f:1b:64:d0:4a:52:03:5d:05:19:2c:e9:05:eb:87:
49:79:cd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:18 2024 by rpki-client on console-fra.rpki-client.org