Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/ZTKuXGM8b5IiqW7lPzZmgNaqGVg.roa
File: ZTKuXGM8b5IiqW7lPzZmgNaqGVg.roa (raw, json)
Hash identifier: jcQIV//JeZnYbW1mzUuBUm0UFvpA2rk7tO6BCQcSKyc=
Subject key identifier: 65:32:AE:5C:63:3C:6F:92:22:A9:6E:E5:3F:36:66:80:D6:AA:19:58
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 085D0C54
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/ZTKuXGM8b5IiqW7lPzZmgNaqGVg.roa
Signing time: Mon 02 May 2022 09:05:11 +0000
ROA not before: Mon 02 May 2022 09:05:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 45.148.4.0/24 maxlen: 24
193.104.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140315732 (0x85d0c54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: May 2 09:05:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6532ae5c633c6f9222a96ee53f366680d6aa1958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:56:db:02:5e:dd:26:b0:b7:51:fe:41:33:
a1:2d:58:dc:98:23:9b:c9:40:cd:0e:bb:74:26:17:
22:08:a3:0a:4d:b8:a8:f9:5d:9e:b4:21:66:27:76:
86:c9:0b:89:d0:9a:d1:10:9d:40:70:62:e3:2e:89:
34:97:65:da:0c:49:c6:f8:50:74:94:3a:0d:42:56:
c1:e7:19:ec:95:b3:a6:93:ee:6d:08:5c:96:fb:40:
1d:cb:ef:57:2d:7e:b3:0d:6d:06:cc:b1:f3:fb:1c:
59:f7:d4:7a:0d:a2:9a:c2:b7:d1:43:5d:ca:6f:b5:
15:17:12:40:3b:9b:a5:fc:27:22:a8:13:ac:c2:82:
32:99:68:6f:0b:63:f3:47:21:ae:e1:e1:e2:e4:fb:
f0:e6:9f:f1:e6:63:d7:28:ea:54:a6:48:4e:a3:1e:
99:14:e3:57:2e:4e:14:99:2e:d0:36:00:86:e7:bf:
ec:88:cb:5b:38:3d:be:46:2f:cc:01:ce:9c:a9:07:
99:20:d3:37:1a:65:05:9a:d8:91:cd:02:2e:94:da:
4d:5b:2e:75:26:38:0f:ad:22:bb:23:fb:f3:c5:ba:
c4:8e:6f:9a:73:04:1b:c4:5f:64:64:47:a6:96:86:
5d:5f:e4:16:6e:bb:e1:85:fb:bd:73:50:ca:b4:7f:
2e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:AE:5C:63:3C:6F:92:22:A9:6E:E5:3F:36:66:80:D6:AA:19:58
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/ZTKuXGM8b5IiqW7lPzZmgNaqGVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.4.0/24
193.104.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fe:80:0b:77:2e:52:c2:4c:fc:7a:2d:57:b6:70:c4:d1:ec:
2a:1a:45:61:63:5e:65:10:1b:84:a2:81:de:34:f1:05:8d:5e:
ff:a5:e9:ac:70:85:68:91:b6:c0:4f:d6:26:50:96:3b:29:2b:
cb:46:e5:18:65:e7:ad:11:96:f2:f7:f0:f5:7a:e7:bb:b8:ee:
7c:b6:cc:b3:89:48:11:b4:54:90:6e:ba:6a:4b:46:19:d0:e4:
84:59:ba:81:5d:c5:ea:f3:7c:75:93:fd:78:1d:77:df:bc:9d:
3e:cd:26:46:9f:02:2b:9e:25:6a:bb:ae:7d:9e:bd:60:b1:3d:
fe:eb:65:5d:80:d5:4a:17:48:04:83:01:3d:3e:bf:63:22:b9:
dc:de:69:0c:e1:a9:50:9b:8e:5f:87:ed:d2:1b:26:d1:a0:22:
d9:83:f3:17:4f:d3:e1:68:8a:ba:65:d3:b5:33:c6:f4:c7:c1:
be:d7:0a:2a:5e:2a:46:e8:d2:17:97:3a:bd:f3:0f:c9:f3:60:
94:be:93:b7:b4:64:9f:24:a9:13:53:d3:9a:69:7d:c0:7a:68:
b2:bf:0b:c5:25:b0:03:fc:99:77:f5:f3:48:11:a5:6c:73:dd:
1d:73:15:12:0f:28:6e:ac:f8:0c:76:bd:cf:05:ec:3c:0b:79:
f4:44:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:37 2024 by rpki-client on console-ams.rpki-client.org