Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/zjAhW7YRGUGfXpDjvm1adJHtyEM.roa
File: zjAhW7YRGUGfXpDjvm1adJHtyEM.roa (raw, json)
Hash identifier: 2EdbcduUdmvwWQuZ5UYcxJr61ng/sDYEMQwyXDkWSR4=
Subject key identifier: CE:30:21:5B:B6:11:19:41:9F:5E:90:E3:BE:6D:5A:74:91:ED:C8:43
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 077041E9
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/zjAhW7YRGUGfXpDjvm1adJHtyEM.roa
Signing time: Sat 01 Jan 2022 00:56:41 +0000
ROA not before: Sat 01 Jan 2022 00:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202391
IP address blocks: 45.142.188.0/22 maxlen: 24
185.141.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124797417 (0x77041e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Jan 1 00:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce30215bb61119419f5e90e3be6d5a7491edc843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:fc:86:d2:90:89:de:05:d8:91:21:72:38:
63:c3:c5:cd:6d:e0:19:82:f7:33:5e:4e:23:d6:ce:
a7:b0:84:e7:79:1d:74:bb:ce:c3:12:a7:48:95:b9:
f5:01:84:71:07:6f:7f:ae:1f:13:f1:3e:a0:93:e5:
b7:c9:bd:25:2b:58:7e:1e:2c:8f:6f:b3:53:17:03:
2c:cb:33:db:cc:fa:37:94:d3:42:d1:ee:b3:ef:c3:
af:c3:ee:66:8f:f8:47:96:a0:38:2f:a2:cf:91:af:
c4:2c:de:59:05:53:ae:b5:09:1b:a6:2c:6b:5d:49:
ff:98:9b:c1:11:6d:cb:d5:68:5c:c0:6e:42:07:03:
e4:db:f3:4d:54:8d:a9:ff:8b:da:fe:cc:20:22:14:
a7:27:e8:48:71:49:55:d1:79:ca:0d:8c:d7:5b:84:
3a:2e:ac:9a:c1:a7:53:0e:da:44:74:46:5a:2c:05:
a0:9b:a5:42:03:04:3f:2d:d6:73:f6:f2:b3:ae:33:
59:f5:5b:36:d1:0f:34:49:45:78:ef:9d:01:3b:c4:
c2:de:72:6a:fa:85:ed:82:94:bc:c3:9f:fe:e3:44:
fc:9f:ac:28:4c:f3:bb:d5:b7:6f:ce:0e:42:72:5b:
20:8a:84:37:fc:a1:6e:5f:da:d9:af:a5:1b:be:e3:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:30:21:5B:B6:11:19:41:9F:5E:90:E3:BE:6D:5A:74:91:ED:C8:43
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/zjAhW7YRGUGfXpDjvm1adJHtyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.188.0/22
185.141.36.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:f5:5e:80:dd:c3:56:62:7f:7a:36:92:21:75:11:f5:9b:2d:
70:2a:c3:b8:c2:4e:4c:f8:b3:e5:22:35:c6:d8:ff:56:d5:d7:
cf:ae:0c:54:cb:07:55:b9:d5:7b:d3:23:10:5f:64:68:d7:78:
37:68:38:26:10:77:4b:4d:64:43:0b:15:66:90:73:50:08:23:
15:46:da:7e:17:ac:16:f0:28:fb:64:23:41:3e:e6:5b:db:88:
08:20:fc:c0:f2:72:d6:1f:02:55:22:65:04:b9:34:f4:4b:3c:
c2:3a:43:f8:a6:e8:b4:61:db:93:5b:6f:8c:f8:e7:65:fd:fd:
37:c0:1e:c5:38:cd:6b:f4:ad:9d:25:d5:0c:13:76:03:33:36:
14:5d:3e:6c:ce:02:b9:a4:aa:fc:43:34:46:fe:04:51:3f:fc:
c9:1b:49:0b:5b:6f:07:02:b5:fa:fb:2f:f4:15:90:cc:42:50:
0d:b6:97:c2:3d:8e:68:66:98:06:ea:a5:52:a3:99:2e:79:5e:
90:91:ba:57:d6:77:fc:78:4b:b2:05:13:59:35:a6:a3:b0:ec:
bd:cb:29:41:9e:93:ca:e7:43:4c:a5:e4:65:98:13:d1:8a:4f:
21:44:8f:17:e4:c2:0e:87:b1:86:8f:dd:4d:cc:c5:af:61:2c:
7c:b8:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:42 2024 by rpki-client on console-fra.rpki-client.org