Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/zwc48rJnRvgXfcxS53zuoNRjMPE.roa
File: zwc48rJnRvgXfcxS53zuoNRjMPE.roa (raw, json)
Hash identifier: msTP3fyNHB98e3fkvQUbaAHNr3FWWPNfPd/VVXfOmDs=
Subject key identifier: CF:07:38:F2:B2:67:46:F8:17:7D:CC:52:E7:7C:EE:A0:D4:63:30:F1
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018439DF0E5B43E3E54DFB2326277CAF9235
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/zwc48rJnRvgXfcxS53zuoNRjMPE.roa
Signing time: Wed 02 Nov 2022 19:43:50 +0000
ROA not before: Wed 02 Nov 2022 19:43:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13259
IP address blocks: 45.151.136.0/22 maxlen: 22
83.171.241.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:39:df:0e:5b:43:e3:e5:4d:fb:23:26:27:7c:af:92:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Nov 2 19:43:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0738f2b26746f8177dcc52e77ceea0d46330f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:72:a9:4a:68:e3:79:e0:36:3e:4d:d2:e5:
a1:42:c8:59:93:64:10:98:47:e6:8d:16:53:7e:58:
3c:22:76:c1:bf:48:ab:8d:b3:3f:4e:69:d0:97:8b:
7a:66:61:65:25:30:80:0b:2e:f5:d7:dc:62:1b:5d:
c0:6c:32:7c:8e:89:41:2a:a8:17:1a:3b:5f:ea:06:
93:8f:83:19:10:c5:48:1b:a6:55:3d:b0:5f:ad:11:
13:fd:99:9a:aa:0c:55:9f:2a:83:33:39:19:42:2d:
50:6c:99:0b:14:75:10:3c:a1:a6:cd:56:2f:ed:58:
7e:1a:1c:a5:74:75:dd:a7:d6:b9:cf:29:7a:c2:78:
a0:35:a6:e1:b9:d7:b4:1f:24:e2:1b:3f:75:fd:a0:
0d:82:f9:63:9b:0c:dd:66:bb:c1:9f:30:7e:3f:c6:
4d:8d:e4:88:9f:40:7e:2c:3f:91:5b:a9:38:78:0f:
90:cc:9e:22:d7:fb:10:4c:77:f0:e4:56:7a:ac:6b:
1d:97:c0:d9:56:07:75:c1:7c:5d:f3:47:ed:44:44:
4c:0c:17:51:ed:79:59:c3:5d:d1:4a:d4:91:3b:d0:
62:d2:eb:40:33:bd:7a:bb:89:63:14:b1:14:0d:78:
b2:7c:7f:a9:a8:8e:98:2c:65:a4:18:25:b8:4e:63:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:38:F2:B2:67:46:F8:17:7D:CC:52:E7:7C:EE:A0:D4:63:30:F1
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/zwc48rJnRvgXfcxS53zuoNRjMPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.136.0/22
83.171.241.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1b:84:f2:19:75:56:2d:b2:f0:0d:64:da:2a:0b:4c:25:47:
cb:5d:e4:47:1d:d0:bb:90:1e:06:e4:9c:64:af:71:75:8f:e2:
8c:7b:ee:f2:52:e3:f8:9e:5b:d2:28:33:48:7e:d9:8f:3a:39:
18:3b:8e:dc:7d:03:fc:cd:b6:98:99:59:59:7b:b1:5f:56:67:
cd:82:c6:79:3a:9e:49:67:34:3c:49:14:5d:6a:9b:96:bd:68:
a2:49:df:87:bc:80:dc:18:8d:25:f1:d3:da:7e:fd:4e:24:9c:
4a:23:e9:01:fb:08:e3:28:62:8c:01:72:c1:9e:c1:d8:17:09:
b1:e5:29:90:87:1e:20:06:8d:3c:57:44:1a:6b:62:ca:96:e2:
af:3a:51:60:7e:21:d6:ba:4f:44:f3:17:fb:47:68:70:93:31:
1c:98:aa:5f:c9:a3:69:e5:67:4a:7f:f8:0a:de:f8:0a:ec:dc:
8c:28:3e:94:61:93:4d:79:60:d7:eb:46:9b:94:f5:de:8a:5d:
97:14:c4:77:24:77:91:8d:51:a8:a2:8b:3a:82:5b:86:71:f9:
25:49:28:72:06:c9:0e:aa:9d:29:e4:57:b1:4a:59:03:e1:0a:
de:bc:d3:89:98:7d:4a:5c:f6:4d:33:e1:c7:e9:cb:a6:82:51:
6a:d7:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org