Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/zpl-mDG_lltG-cONQgqhyR9J-8o.roa
File: zpl-mDG_lltG-cONQgqhyR9J-8o.roa (raw, json)
Hash identifier: 2uWAvTOCKe0o6O+IcKlH/01Y3euXNIE/VO+eZiBpf6w=
Subject key identifier: CE:99:7E:98:31:BF:96:5B:46:F9:C3:8D:42:0A:A1:C9:1F:49:FB:CA
Certificate issuer: /CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Certificate serial: 070747A5
Authority key identifier: CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/zpl-mDG_lltG-cONQgqhyR9J-8o.roa
Signing time: Sat 01 Jan 2022 09:57:44 +0000
ROA not before: Sat 01 Jan 2022 09:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 145.221.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117917605 (0x70747a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caece41cbc2c30626ef2a28d1839f2d6c4757f3f
Validity
Not Before: Jan 1 09:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce997e9831bf965b46f9c38d420aa1c91f49fbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1c:d3:42:54:86:04:34:52:a7:62:cd:37:4f:
71:00:27:b1:29:8e:e5:e7:8b:01:5b:e5:4a:ec:ea:
a5:c0:9d:4c:8f:4d:35:9f:36:0f:ae:e6:ac:65:88:
11:e7:be:62:2a:20:4d:0b:2c:d3:f0:c9:db:1f:ab:
71:3d:7d:f2:ba:06:75:0d:aa:45:86:ad:8c:a2:98:
39:d2:22:b3:49:9a:67:9c:a0:39:dd:c0:2e:99:b8:
d6:49:21:90:96:d7:b4:e3:6e:01:b5:9d:ae:eb:7e:
f2:aa:2d:9d:0f:72:93:0f:b5:be:fd:b9:b4:15:56:
af:8c:55:9d:3e:13:00:c1:18:1d:a2:90:31:bb:ca:
ab:48:8b:42:11:5b:ff:f9:ac:56:1c:30:99:6a:4d:
67:24:61:d9:56:fd:02:d9:bd:98:9d:2a:4f:e7:82:
43:a4:10:f2:90:86:1e:32:8a:86:ab:b5:75:bc:d4:
8a:a2:a5:9d:1f:12:de:33:8d:af:61:0d:6a:64:13:
3f:7c:5b:e1:5e:47:32:8a:89:05:32:d3:e8:5b:61:
76:19:f5:b5:26:d9:5b:c9:5e:ff:d6:6d:4f:24:86:
8c:6a:8a:e8:5a:27:de:ba:5b:ab:c9:e8:6a:64:f5:
91:b7:94:0f:9f:bc:96:df:8b:c0:37:c4:88:5d:7d:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:7E:98:31:BF:96:5B:46:F9:C3:8D:42:0A:A1:C9:1F:49:FB:CA
X509v3 Authority Key Identifier:
keyid:CA:EC:E4:1C:BC:2C:30:62:6E:F2:A2:8D:18:39:F2:D6:C4:75:7F:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yuzkHLwsMGJu8qKNGDny1sR1fz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/zpl-mDG_lltG-cONQgqhyR9J-8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/630cbe-ce01-464d-82eb-d851e40d57bf/1/yuzkHLwsMGJu8qKNGDny1sR1fz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
05:26:3e:cb:85:b5:48:fd:21:24:ce:17:f5:63:f8:5f:49:c8:
95:be:b4:73:36:15:8e:1e:5f:b3:f1:4b:70:d4:aa:78:bb:ad:
ff:25:31:f7:99:93:96:80:7a:10:00:fd:4f:f6:17:fc:2a:b9:
d0:5e:99:59:09:f0:53:61:95:21:bb:bb:16:56:2a:0e:42:71:
94:55:a1:7b:de:da:5e:f6:e2:05:05:0f:31:6b:f2:7d:b6:96:
93:ca:7e:c7:9a:6d:55:f0:17:80:e7:d1:0c:d4:0f:eb:8f:9f:
84:04:4d:0d:58:0e:62:60:31:e6:dd:d9:f6:68:6a:a7:39:30:
41:d3:38:a2:ab:87:7e:a1:7b:82:0a:03:e3:00:65:b6:b9:a2:
38:c5:79:a4:e1:84:cb:c5:fc:3e:18:ff:71:fc:19:01:c5:34:
f1:e0:10:19:16:10:5f:ca:a3:ab:37:18:b2:8b:d8:c0:74:86:
e7:ca:d1:96:c4:73:64:52:68:88:fe:0a:60:50:90:f4:92:90:
7e:63:cc:e0:21:f9:b8:4c:1f:7b:3f:d8:ec:db:9b:2f:4d:67:
9f:25:cb:dd:70:32:db:db:aa:b4:22:71:cd:ac:bf:0e:b2:f1:
9f:fd:aa:d2:34:ec:f7:f3:b7:01:b2:a7:d2:f4:e9:b4:59:45:
af:27:2b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:46 2023 by rpki-client on console-ams.rpki-client.org