Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ZiTz9lPVO6aWta6IBlRZbCoNBvs.roa
File: ZiTz9lPVO6aWta6IBlRZbCoNBvs.roa (raw, json)
Hash identifier: XFLKXNTP9sVmAx8oi1341idOOzXjNxoilDiF3VqwDo4=
Subject key identifier: 66:24:F3:F6:53:D5:3B:A6:96:B5:AE:88:06:54:59:6C:2A:0D:06:FB
Certificate issuer: /CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Certificate serial: 04DA7551
Authority key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ZiTz9lPVO6aWta6IBlRZbCoNBvs.roa
Signing time: Sat 01 Jan 2022 14:05:17 +0000
ROA not before: Sat 01 Jan 2022 14:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207992
IP address blocks: 45.145.164.0/24 maxlen: 24
45.145.166.0/24 maxlen: 24
45.145.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81425745 (0x4da7551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Validity
Not Before: Jan 1 14:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6624f3f653d53ba696b5ae880654596c2a0d06fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:59:47:4d:51:78:83:a7:d3:ba:2a:41:6e:
ab:60:38:31:99:d7:64:ff:37:34:b5:67:19:f6:bb:
64:3f:78:a9:13:8c:76:2b:4b:ea:f5:8a:a3:7b:3f:
10:ba:57:38:d3:20:6b:b2:fe:55:96:9a:b0:e0:dc:
06:d0:03:c8:31:7c:02:7d:50:24:e1:65:9f:92:54:
b6:b7:40:20:f6:11:17:c1:b6:18:37:5c:53:c0:44:
6a:15:5c:dc:bc:7b:b3:1a:0c:49:31:84:2b:6c:bd:
62:c1:e4:40:56:da:d0:5d:e3:65:16:c2:d9:c3:75:
12:fc:a8:24:9f:c6:47:90:b5:ca:58:b4:86:06:c1:
9a:52:18:97:68:24:5a:a5:aa:58:65:be:38:97:bd:
1c:b4:9c:f7:84:c2:41:6b:18:ad:80:07:47:fc:2a:
31:96:a1:4a:c8:df:4b:18:5b:15:ca:f1:15:f8:48:
40:9d:97:29:00:0e:44:89:19:47:ac:df:d4:8a:24:
09:3a:3e:da:4f:cc:70:08:21:fc:59:0e:2e:02:c4:
79:40:fb:db:e3:e7:a8:06:e7:cd:af:f0:5c:ae:44:
5f:a8:5e:da:a0:8c:fb:9b:ed:39:7b:46:78:f2:15:
c4:55:f3:80:09:c5:13:be:7a:b8:bd:f9:84:04:e3:
de:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:F3:F6:53:D5:3B:A6:96:B5:AE:88:06:54:59:6C:2A:0D:06:FB
X509v3 Authority Key Identifier:
keyid:B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/ZiTz9lPVO6aWta6IBlRZbCoNBvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/24
45.145.166.0/23
Signature Algorithm: sha256WithRSAEncryption
80:cb:b3:0b:37:32:25:3d:00:95:a9:0f:7b:d9:08:0b:60:99:
22:9f:9b:58:f4:e4:82:94:92:36:12:a4:c8:93:a7:25:a2:f1:
c7:49:fc:78:b2:ef:49:92:81:09:96:2f:04:16:86:1f:42:af:
59:7e:37:34:f7:72:8a:2a:58:02:28:10:b9:17:7e:40:63:9e:
ea:4a:07:ae:15:0a:df:9c:ac:49:e4:b6:c8:3b:9e:64:29:a1:
0f:95:04:0e:87:72:33:dc:b7:d7:c6:c7:d6:2e:b7:04:d6:2f:
87:d6:d1:c4:b9:06:ae:c2:17:ba:7b:3a:ec:eb:fa:01:18:56:
f1:43:89:c9:de:fc:5a:b8:94:f0:55:b6:4f:c1:b0:1f:4c:40:
41:33:41:28:04:1d:17:92:3c:30:1b:86:6a:1e:e8:42:5b:49:
4d:96:a5:94:d5:b2:32:50:f0:9f:4d:8a:17:75:0a:ab:9d:8e:
ca:16:87:4b:8e:e0:ca:3c:45:6f:20:2a:e7:f3:3c:bc:87:30:
b2:d8:1e:07:34:51:1d:c2:b0:e9:40:a4:f7:f9:6a:4c:cb:00:
36:83:f8:f1:30:c3:ef:eb:3d:52:82:16:42:ac:19:5e:13:3f:
29:a5:19:2f:0a:30:ea:ba:40:34:1b:11:e1:47:f3:62:23:b6:
62:b7:15:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:36 2023 by rpki-client on console-fra.rpki-client.org