Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZMEEqesNwwcCON0biVwJZh_sg0w.roa
File: ZMEEqesNwwcCON0biVwJZh_sg0w.roa (raw, json)
Hash identifier: qQ8hRhGmSt720XfHpDkmEKNEuR57sL6CijrIPvm4lwY=
Subject key identifier: 64:C1:04:A9:EB:0D:C3:07:02:38:DD:1B:89:5C:09:66:1F:EC:83:4C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0634EAA3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZMEEqesNwwcCON0biVwJZh_sg0w.roa
Signing time: Sat 01 Jan 2022 06:52:29 +0000
ROA not before: Sat 01 Jan 2022 06:52:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 45.8.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104131235 (0x634eaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 06:52:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64c104a9eb0dc3070238dd1b895c09661fec834c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:12:bf:29:2a:26:19:00:81:5f:72:54:f5:
20:07:17:f3:72:f5:2c:67:fc:40:9c:5e:63:92:e1:
98:09:d5:1a:42:c8:fe:07:2c:97:8a:4b:b8:d1:03:
41:82:be:20:23:ca:60:9b:03:d0:35:e0:95:f4:55:
ad:08:bb:6a:5e:0e:97:b6:40:2d:59:0c:aa:7e:3b:
cc:42:f7:50:e0:a0:2b:a7:74:60:c7:89:2c:24:7e:
d2:c1:f3:ee:ae:af:42:c4:c0:e8:be:00:ba:31:6f:
44:bc:c8:f0:e7:7e:a5:17:97:b8:a9:56:a2:30:55:
e4:bb:49:c2:28:e2:ea:2f:24:15:2d:9f:6b:41:e8:
b3:7d:b4:f8:64:6c:6e:88:f2:f7:87:f7:d7:b4:28:
29:e1:02:04:0b:f0:91:3c:f2:22:b0:b2:95:f0:5c:
37:60:7d:aa:47:cf:bf:4b:88:9a:ca:fa:ea:20:f9:
b8:58:bc:6d:fe:af:ff:a4:01:82:67:6e:68:e6:3a:
4d:7d:29:7b:f0:ca:99:a7:7d:1c:2f:41:94:ce:c7:
e4:00:57:0b:2a:48:cf:3d:d0:08:05:9e:cc:77:2f:
92:71:bf:6c:96:67:bb:c4:77:8f:67:8c:cb:dd:6a:
99:1b:23:54:3c:f1:8f:48:61:06:b9:5b:89:d6:c3:
cc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:04:A9:EB:0D:C3:07:02:38:DD:1B:89:5C:09:66:1F:EC:83:4C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZMEEqesNwwcCON0biVwJZh_sg0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
Signature Algorithm: sha256WithRSAEncryption
88:ab:71:42:db:c0:a1:7b:f4:15:d6:c6:38:9c:01:92:6a:8e:
81:55:6e:5e:ed:bb:70:2f:44:64:cc:bc:b3:3e:64:4c:86:11:
3e:e4:bd:55:fd:a4:e0:ae:d4:77:25:29:04:7b:33:4a:35:ce:
d5:3f:d0:c1:00:7a:56:c9:8a:38:78:ec:49:75:f1:94:86:dc:
42:fc:b0:a3:a4:b3:6d:1b:fc:9c:bb:60:a1:21:dc:16:1f:13:
9d:21:5e:2a:ea:bc:8c:6d:18:0a:ab:f4:ab:40:4e:d3:07:1e:
73:ae:1f:92:91:d6:97:22:91:b6:70:b4:c9:9a:49:d0:90:65:
fe:b7:33:33:f0:a2:23:f8:62:cf:57:dd:ec:a0:e7:1e:55:32:
0f:b3:d3:f3:2a:1f:5a:3d:a8:dc:db:a2:6e:55:49:2f:0c:cb:
a2:12:14:3e:18:b9:3b:37:30:ef:40:65:9b:02:db:21:49:a4:
ce:89:32:56:fe:2f:9a:e9:03:94:0c:89:60:08:73:da:6f:00:
7e:b6:8a:0d:4b:03:90:c1:77:d6:e2:a8:a4:64:8e:42:0d:2d:
0e:8f:da:58:5a:f1:f9:1a:0c:8b:2a:95:3c:4a:81:3f:ff:07:
2c:c9:7a:e2:06:e8:da:cd:72:c9:e4:de:20:eb:46:da:3b:91:
c1:31:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org