Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZlLtwBuWVLJJyJ3Ac5SZ_JPt5Ug.roa
File: ZlLtwBuWVLJJyJ3Ac5SZ_JPt5Ug.roa (raw, json)
Hash identifier: s8oAYOWwaEuS2XN9WU19ERtliAZn3d3BEFIVzn0S9UI=
Subject key identifier: 66:52:ED:C0:1B:96:54:B2:49:C8:9D:C0:73:94:99:FC:93:ED:E5:48
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03238340
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZlLtwBuWVLJJyJ3Ac5SZ_JPt5Ug.roa
Signing time: Sat 01 Jan 2022 16:04:19 +0000
ROA not before: Sat 01 Jan 2022 16:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50214
IP address blocks: 45.138.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52659008 (0x3238340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6652edc01b9654b249c89dc0739499fc93ede548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:7f:76:55:bd:d6:1a:f9:89:73:6b:a7:53:
26:f3:a3:34:24:28:9f:83:fc:80:c3:2c:d8:01:f5:
c3:51:5a:5a:5a:18:5c:f7:76:0e:c9:33:f6:26:ce:
98:d4:77:ce:89:bd:8b:69:3e:c4:8e:8c:0e:c1:1e:
52:f3:17:ff:d0:20:73:6f:8b:ba:5c:62:d1:54:c9:
6b:c3:33:21:eb:58:8e:14:de:d1:1b:2b:6c:de:c1:
73:9d:70:f1:80:ea:b3:4d:5b:8b:67:e7:83:98:16:
0c:e6:cd:09:78:75:4b:f8:eb:1c:24:7a:44:d1:5f:
86:98:e0:9a:ab:a4:07:17:13:ca:71:03:6a:8b:0f:
3e:7a:61:44:d8:ae:f6:a8:ae:fb:ce:1e:b3:53:09:
ff:7d:a6:4f:13:81:ac:e3:a0:64:c0:fc:d9:0b:bf:
97:99:cc:ae:aa:ce:e4:8e:4c:ec:ee:99:90:38:37:
6c:52:fa:c3:26:ad:40:40:30:87:d2:45:7e:ba:a6:
e1:54:7f:7f:15:d6:a9:32:14:10:44:00:d0:46:b7:
24:8d:4e:53:5c:20:05:e9:21:e2:ce:bd:60:b0:ce:
d2:ed:3b:70:0f:1c:6f:38:50:5a:25:3c:92:21:69:
19:30:c4:41:db:64:25:44:85:ea:d1:0d:e5:f6:f7:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:ED:C0:1B:96:54:B2:49:C8:9D:C0:73:94:99:FC:93:ED:E5:48
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZlLtwBuWVLJJyJ3Ac5SZ_JPt5Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.73.0/24
Signature Algorithm: sha256WithRSAEncryption
40:76:e2:43:bc:c4:82:b0:ee:e6:2f:ef:0f:ef:2c:03:a7:ec:
2e:c0:e5:4c:a1:09:53:f3:1b:a6:22:e2:49:3f:f1:f2:bd:76:
9e:e0:36:31:fa:12:18:e6:93:07:58:1c:ce:70:88:84:99:56:
1f:7d:7d:07:34:4c:19:b8:20:10:ea:cc:63:71:22:4d:18:32:
bb:df:43:d0:56:77:aa:d8:04:09:d0:d5:0a:77:63:f9:3a:13:
c5:79:e8:eb:44:fe:58:9c:b1:44:5a:fc:f7:cd:38:47:1e:b4:
a8:88:aa:67:b3:7b:ef:ef:5e:dd:44:2a:0d:31:4f:30:e1:c9:
95:aa:c8:76:f6:9a:bc:2f:70:62:01:5f:22:9e:4a:a0:2e:20:
fe:c6:ef:08:3b:8d:d3:9b:3d:89:35:7b:7d:83:d9:6d:41:64:
eb:e6:8f:97:f7:9d:30:99:e9:78:ab:06:6b:8d:44:58:bc:52:
74:0c:96:9d:f9:36:7f:33:97:21:6d:4f:9c:7c:f8:51:8f:e7:
d5:1f:d3:c3:29:b8:80:8e:ec:6b:bc:53:0c:84:d8:9a:bc:06:
0a:59:6b:ca:ee:b6:12:88:5f:2a:bd:b5:10:76:04:ae:23:0a:
df:4f:fc:f4:65:14:50:bd:2d:f9:d3:65:fc:7c:86:c6:40:b3:
11:a4:03:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org