Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZCz2D5uYiPKzun4vpdJOTZU4kB0.roa
File: ZCz2D5uYiPKzun4vpdJOTZU4kB0.roa (raw, json)
Hash identifier: yEv2al96fn5XgOZUyAqzgXUamaRiY4161ndhkqa3zhU=
Subject key identifier: 64:2C:F6:0F:9B:98:88:F2:B3:BA:7E:2F:A5:D2:4E:4D:95:38:90:1D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0184209C05B745ACB59A449A5D871479A65A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZCz2D5uYiPKzun4vpdJOTZU4kB0.roa
Signing time: Fri 28 Oct 2022 22:00:06 +0000
ROA not before: Fri 28 Oct 2022 22:00:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 45.15.140.0/24 maxlen: 24
45.89.97.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:20:9c:05:b7:45:ac:b5:9a:44:9a:5d:87:14:79:a6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 28 22:00:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=642cf60f9b9888f2b3ba7e2fa5d24e4d9538901d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:05:26:ad:3f:2a:65:1b:f9:77:4d:c0:85:
a2:01:1c:6a:ef:3c:8c:10:05:7d:a3:4b:42:1e:18:
aa:72:e4:da:05:f1:80:85:de:05:24:c0:49:9b:95:
3a:da:b8:56:f1:08:07:da:41:b4:37:26:df:cc:fc:
da:af:a7:0f:d5:6e:2b:95:92:3c:ab:ce:b8:31:46:
95:50:b6:8a:81:96:5f:a8:60:f3:c9:c0:e2:c6:4b:
eb:d9:25:c3:82:7c:89:50:50:35:87:43:7b:90:4e:
8a:0d:82:05:80:af:d5:27:cb:28:24:28:81:c4:c3:
4e:8f:c1:43:43:d1:77:4b:3d:60:f0:1d:52:37:88:
2d:36:f2:6e:4a:b8:c1:c4:70:27:ce:d4:0f:c3:bc:
be:64:5d:60:52:54:69:a7:0e:8a:ee:0f:e5:41:39:
2f:dd:0a:02:49:f4:a6:e1:d1:95:9d:d6:21:0c:dd:
bd:cd:81:14:6f:01:8f:a6:f0:cc:2c:ad:22:5c:05:
86:39:7e:38:ec:27:f0:bb:ed:06:21:3d:bd:78:86:
be:5d:65:ca:16:9e:23:d0:ff:83:a8:35:1d:e8:76:
2c:a4:31:ae:20:aa:86:f5:94:23:9f:f9:58:c0:cd:
c2:dc:d2:33:45:6f:55:5c:11:3c:dd:ad:64:23:02:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:F6:0F:9B:98:88:F2:B3:BA:7E:2F:A5:D2:4E:4D:95:38:90:1D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ZCz2D5uYiPKzun4vpdJOTZU4kB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.140.0/24
45.89.97.0/24
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:16:c2:9e:f6:b5:2e:42:61:12:ac:4b:76:d7:ff:ee:11:5f:
47:da:f4:a1:ab:85:9f:30:bb:52:b6:84:c9:51:e0:18:e9:bf:
6d:4f:9c:8d:29:3f:10:43:f6:80:75:82:b2:e8:d6:83:13:03:
88:98:d7:a1:26:72:d5:d4:2c:9c:e5:db:70:39:3f:19:3e:96:
30:02:b8:8e:e4:d9:cd:e5:f0:e7:76:c7:97:5d:23:67:fd:5f:
b5:1a:9b:f2:53:57:fc:f3:1f:5f:27:9a:c3:7a:55:83:65:98:
f8:bd:41:5d:42:8b:61:26:e3:48:88:40:c7:f2:38:05:75:dc:
ce:38:2d:d8:27:6b:5f:96:77:5e:26:5f:2a:94:83:9b:50:87:
58:eb:97:5c:32:6f:9b:bf:3e:06:71:e2:c0:0c:96:a5:62:85:
e2:73:be:de:f1:0f:2e:e6:09:01:3f:48:30:5a:e7:34:35:2c:
72:81:34:d7:1c:3c:4d:e6:c9:ff:d7:03:cc:74:fb:aa:ad:e1:
bd:ca:74:12:47:1f:99:5f:f8:a8:31:d1:ef:55:3e:17:61:80:
d0:0f:04:70:f4:37:8d:ed:9c:4e:00:9a:0d:be:ef:6d:16:5f:
d3:21:8e:73:c4:47:7c:8c:cd:01:08:fe:8e:3a:f5:7c:77:be:
30:a4:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org