Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/zTh_Pf6ku8vM4Jlw1-ed25B8M60.roa
File: zTh_Pf6ku8vM4Jlw1-ed25B8M60.roa (raw, json)
Hash identifier: 0g+RobV2AFwfUGco4IQpcGzwOQEtsXc0yu18kxSER9Q=
Subject key identifier: CD:38:7F:3D:FE:A4:BB:CB:CC:E0:99:70:D7:E7:9D:DB:90:7C:33:AD
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018419BDF6E2EBECF665734231A00C71D670
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/zTh_Pf6ku8vM4Jlw1-ed25B8M60.roa
Signing time: Thu 27 Oct 2022 13:59:50 +0000
ROA not before: Thu 27 Oct 2022 13:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 45.131.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:bd:f6:e2:eb:ec:f6:65:73:42:31:a0:0c:71:d6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Oct 27 13:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd387f3dfea4bbcbcce09970d7e79ddb907c33ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:92:62:7d:3d:18:f1:1c:63:d3:eb:0b:74:
6f:3a:e7:da:5b:e7:b1:7d:ab:e3:79:0d:80:ce:e6:
99:9e:af:7b:d1:9c:d6:71:4a:3d:81:cb:3f:5d:39:
6a:09:97:e1:07:88:fc:47:f9:c3:bb:77:e0:f8:2b:
f2:90:ae:db:21:43:9a:0c:5a:44:b9:8a:ed:40:dd:
30:e8:71:e6:b4:9d:fe:c8:9e:35:c8:6a:20:0d:35:
ea:19:a4:95:c3:7d:d5:4b:8c:0a:66:8f:d5:09:b0:
45:4c:b2:a2:93:ab:3f:8b:ff:9c:f7:b5:33:1a:06:
55:65:30:d1:70:3d:3a:e1:e0:06:75:f3:a3:2f:46:
38:0a:e5:d0:6e:e4:7b:08:5d:aa:50:79:7e:78:90:
62:75:88:b5:71:09:05:f5:0f:f7:d4:20:17:0e:f8:
cb:76:88:c0:30:9a:a8:79:11:8d:3b:fa:03:ce:25:
c6:1a:56:f4:f6:b4:91:af:a3:b4:4a:5e:88:61:79:
fb:1d:8d:35:e9:1f:94:c7:c1:02:bd:01:c8:20:67:
7e:e9:c2:32:84:8c:e9:6e:4d:44:77:bb:05:5d:ab:
a3:f9:9f:8b:56:5b:82:f6:06:8c:d1:1c:0a:40:dc:
5f:9c:29:63:9b:cc:35:c7:b7:37:fc:fd:58:2b:d8:
6c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:38:7F:3D:FE:A4:BB:CB:CC:E0:99:70:D7:E7:9D:DB:90:7C:33:AD
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/zTh_Pf6ku8vM4Jlw1-ed25B8M60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:70:78:27:75:ca:05:03:95:7b:85:ba:5a:21:5d:a0:5d:15:
23:c5:18:fc:e5:64:8c:9f:9f:e8:73:3d:f3:fb:b2:78:b5:17:
46:e3:e7:f7:51:b4:2f:11:09:e9:8c:24:50:ee:45:9c:fa:e8:
e3:29:49:8a:b6:7e:06:cd:14:8c:04:a9:ea:f8:0b:8e:33:4b:
bf:1c:97:f6:4c:32:18:21:5f:11:fa:62:49:31:db:e7:44:da:
e8:7b:f6:44:cf:b5:8d:9e:fa:ef:e3:bb:1c:0d:24:ff:ec:9d:
57:7b:b3:d3:d7:49:aa:2e:1a:a5:1d:81:b6:33:14:9a:19:94:
24:00:f7:28:c9:97:70:81:71:f3:dd:f3:d3:f8:a6:61:6e:67:
d6:eb:5a:c5:4c:3e:2b:64:a9:76:c2:54:d8:91:93:da:a4:7a:
fe:b7:1e:58:76:f7:e2:1a:2d:19:ff:10:20:e9:21:4b:bd:e5:
20:07:6d:ad:ec:28:1c:6e:ed:a6:f7:5c:cb:dc:bd:5b:b9:53:
a5:6f:ed:c9:00:8a:8a:b4:7f:94:46:5a:43:76:c8:85:4a:ed:
a8:aa:c7:d3:5b:a4:8c:2a:3d:2b:50:6a:5e:8d:55:ad:0e:d3:
68:27:6b:df:f8:eb:59:ae:5b:f1:64:bb:3a:d0:d0:26:78:bf:
57:e7:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org