Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/kz2M8sIorOXpyWq4in_JmWTCzNI.roa
File: kz2M8sIorOXpyWq4in_JmWTCzNI.roa (raw, json)
Hash identifier: 1cHpNKjlza9Nah1nS5i0rUb7oIC7j8OZ+b3xCBuSj84=
Subject key identifier: 93:3D:8C:F2:C2:28:AC:E5:E9:C9:6A:B8:8A:7F:C9:99:64:C2:CC:D2
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0183AF59FB02A8113BFF320A56F7BF6CF665
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/kz2M8sIorOXpyWq4in_JmWTCzNI.roa
Signing time: Thu 06 Oct 2022 22:10:53 +0000
ROA not before: Thu 06 Oct 2022 22:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210703
IP address blocks: 45.150.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:af:59:fb:02:a8:11:3b:ff:32:0a:56:f7:bf:6c:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Oct 6 22:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=933d8cf2c228ace5e9c96ab88a7fc99964c2ccd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:f3:e2:dd:56:9f:fc:46:dd:66:7d:ac:2b:
aa:f5:7e:38:8b:f7:e5:7d:3c:53:f3:f5:5f:5b:30:
82:82:e9:8a:f0:e5:df:a2:40:07:40:31:e1:f9:ae:
95:7f:49:9c:b5:97:f0:81:06:1f:bf:06:73:48:3a:
f0:fa:e0:1f:89:cf:25:8e:3a:a9:18:69:64:3d:de:
67:fe:d9:2a:ff:0d:12:a2:f4:90:60:38:2b:6f:b2:
60:4b:e0:aa:80:3d:a8:6c:75:2c:7f:9b:3c:5e:80:
22:b9:1b:cb:86:14:f3:a8:fc:02:46:f1:0e:8b:13:
2a:12:13:a4:9f:bf:c3:f9:8b:b0:c7:a3:bf:bf:9a:
ab:21:a9:c0:92:10:79:fd:c3:e9:97:4e:b9:51:d6:
8e:ef:25:5a:76:84:af:cc:48:4b:37:aa:d8:32:01:
0a:9c:74:42:dc:06:cc:26:7a:a4:b9:41:34:42:34:
6c:42:90:0f:fe:54:68:bf:14:e5:9a:75:1a:c0:ec:
a2:6e:35:40:93:4f:f0:95:48:8f:71:b9:e1:65:2f:
87:8f:9f:fa:9a:d2:ec:5a:b5:a3:09:d6:80:34:a0:
a1:3d:7f:32:38:83:21:04:fb:5a:21:62:a4:1d:b6:
ed:09:6b:c1:c2:6a:55:c7:cb:cb:f5:9d:9a:71:7c:
e0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3D:8C:F2:C2:28:AC:E5:E9:C9:6A:B8:8A:7F:C9:99:64:C2:CC:D2
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/kz2M8sIorOXpyWq4in_JmWTCzNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4f:c1:7e:ee:f7:e5:03:ee:ce:f1:51:52:56:6b:7a:ab:b0:
8f:de:5c:e4:7d:88:26:03:a9:40:f9:c3:57:c4:fe:36:05:69:
a1:9a:39:ee:2d:0f:21:e5:44:94:5f:04:e2:85:bb:9b:84:34:
c2:50:f0:2f:c1:52:b1:78:03:32:03:6e:51:bc:6c:30:46:a2:
a8:2d:81:65:d6:f7:8b:04:5a:b6:33:dc:14:be:64:1d:b4:db:
ea:0d:ca:56:5a:b2:74:1f:df:9b:5c:5e:23:35:9e:83:b6:4e:
83:6f:12:88:23:df:4d:a4:36:a8:13:aa:8d:52:9d:57:dd:ed:
42:66:dd:c7:f6:8a:ea:f1:93:5a:d6:8a:5e:3c:89:ee:55:78:
a2:16:b7:0c:1e:3a:b4:6f:f6:5e:66:82:80:12:49:aa:fd:da:
a4:b6:80:eb:cd:8d:3f:66:77:da:19:d2:f2:05:db:8c:03:08:
c4:7a:05:7d:02:a5:04:0b:57:65:41:08:c4:14:d4:a2:c4:b2:
21:13:d8:2b:59:6d:4b:23:45:28:1f:00:6b:de:b7:48:22:27:
16:3c:22:d6:3b:24:c2:86:48:20:91:f7:17:1e:b9:8f:00:e0:
0a:98:4d:db:56:89:37:9d:a9:48:2c:1f:2d:38:0c:d9:53:f7:
80:13:c1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org