Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zRB0jX6FuBKtKW2d8mPGHCbVK14.roa
File: zRB0jX6FuBKtKW2d8mPGHCbVK14.roa (raw, json)
Hash identifier: Kah1wz3TNz6ZRJvAu+sqgpBW4mUPDmU64kGAw6GqTlk=
Subject key identifier: CD:10:74:8D:7E:85:B8:12:AD:29:6D:9D:F2:63:C6:1C:26:D5:2B:5E
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01836A5C7802225EFC377DA8E3CCB1FAF63A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zRB0jX6FuBKtKW2d8mPGHCbVK14.roa
Signing time: Fri 23 Sep 2022 12:39:48 +0000
ROA not before: Fri 23 Sep 2022 12:39:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 45.93.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:5c:78:02:22:5e:fc:37:7d:a8:e3:cc:b1:fa:f6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 23 12:39:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd10748d7e85b812ad296d9df263c61c26d52b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:1b:bf:1a:c1:29:04:67:90:b3:bb:1e:5e:
df:b6:81:bb:68:96:a1:31:b7:c6:d3:0a:4d:37:cc:
c8:84:60:d6:61:ac:e2:d7:0a:0a:5c:80:3a:93:a5:
bb:a7:51:e1:84:e3:cf:7d:64:4c:45:30:5a:c1:cd:
6c:60:eb:d1:91:2e:4a:bc:09:d1:52:93:b6:89:5c:
3a:67:95:85:d0:14:70:50:ef:30:ea:37:f8:0a:1a:
3a:15:60:b1:c0:92:ce:56:39:14:dc:4b:42:f3:3d:
20:58:9f:e1:87:24:28:48:f0:90:87:d8:76:6a:ff:
9b:e2:c5:57:d9:06:78:a9:e6:2d:b4:15:56:70:d5:
70:69:f2:0c:72:ee:54:7a:ff:15:6a:65:af:c4:e8:
66:82:cc:af:c5:b5:1d:75:cf:11:57:b2:b2:20:8f:
30:55:55:3e:05:d9:95:be:9b:f2:d0:ff:97:42:06:
38:d8:47:11:12:e9:3f:f6:61:ae:2f:94:5c:d3:36:
d9:24:a9:36:95:92:23:4d:2c:b4:fd:ea:b2:3a:a3:
4f:7e:78:c8:fc:15:c3:52:13:64:22:bc:7b:be:c2:
f8:c4:59:1c:8f:70:71:1b:62:dd:ea:4f:c3:e9:2a:
7e:d2:ad:92:87:4f:ce:04:81:b2:ee:c3:2f:06:6e:
f4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:10:74:8D:7E:85:B8:12:AD:29:6D:9D:F2:63:C6:1C:26:D5:2B:5E
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/zRB0jX6FuBKtKW2d8mPGHCbVK14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.16.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:73:03:4d:d3:88:de:50:1f:bd:fe:6e:4b:65:d5:fc:ba:4d:
52:e7:42:93:52:dc:ab:37:22:12:0f:c1:06:af:92:20:26:3a:
3c:f4:c5:d8:55:a1:a2:dc:d5:8a:29:1d:09:6b:8a:04:e6:2a:
d3:88:1f:4e:7b:1c:dc:c5:d8:aa:07:12:25:75:87:62:d8:8e:
57:2b:25:0c:bc:06:ca:d0:25:f0:24:e9:52:f2:31:0d:3b:2e:
6f:29:b3:09:b2:fd:44:38:59:9c:f6:44:53:4f:ac:db:22:76:
de:35:7e:20:95:72:5b:e4:bc:54:d3:3f:62:6d:1c:b6:99:23:
99:18:eb:79:be:04:a0:d3:33:1e:76:e0:15:50:5d:2c:a3:c5:
47:b2:db:c4:2b:1b:ae:a5:f6:05:d4:0e:d6:0b:e5:87:f1:dc:
67:29:17:d8:51:31:78:c3:e9:46:3c:2b:a4:5e:e2:9b:15:13:
13:08:0c:f2:b4:9c:b1:15:7d:8e:d9:00:4c:87:57:83:c4:76:
1c:bf:d6:3f:8d:a9:4f:f1:f5:f6:95:54:4d:11:ff:09:8f:3b:
71:4f:61:9b:0e:54:d5:22:d2:dd:3b:01:25:16:0b:c1:7f:80:
3e:74:5c:3f:ea:4d:e9:98:9e:6c:1d:af:18:4d:30:53:cf:e8:
84:87:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org