Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/4ZxkYD9Zr-fz_vCh5gghpOL-EWw.roa
File: 4ZxkYD9Zr-fz_vCh5gghpOL-EWw.roa (raw, json)
Hash identifier: /aIETGzZQA4sY/QKzPGZPWERE25qNGAIl0dH26cm/14=
Subject key identifier: E1:9C:64:60:3F:59:AF:E7:F3:FE:F0:A1:E6:08:21:A4:E2:FE:11:6C
Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial: 08A448E0
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/4ZxkYD9Zr-fz_vCh5gghpOL-EWw.roa
Signing time: Sat 01 Jan 2022 13:57:43 +0000
ROA not before: Sat 01 Jan 2022 13:57:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209004
IP address blocks: 45.11.75.0/24 maxlen: 24
45.11.72.0/22 maxlen: 24
45.11.72.0/24 maxlen: 24
45.11.72.0/23 maxlen: 24
45.11.73.0/24 maxlen: 24
45.11.74.0/23 maxlen: 23
45.11.74.0/24 maxlen: 24
2a0e:6700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144984288 (0x8a448e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Validity
Not Before: Jan 1 13:57:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e19c64603f59afe7f3fef0a1e60821a4e2fe116c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:23:54:2c:eb:38:ae:30:ac:56:c9:8b:86:
54:8f:5f:5e:ec:8a:be:33:cc:03:da:60:8d:2e:e5:
d7:f0:44:e7:a2:da:24:49:60:2c:f9:14:36:87:46:
8a:51:b2:c2:fd:49:80:b3:9b:5f:5d:c1:e1:f6:62:
99:07:1c:f6:0e:6c:5a:28:a2:c6:f8:ef:bf:ee:47:
a1:c1:2d:78:1d:26:84:a3:da:0f:0a:8f:fe:ac:03:
c1:37:58:64:93:8b:a7:e5:73:ce:29:35:c8:8b:cd:
48:35:37:6c:24:4e:3f:72:fd:87:af:c0:3d:4f:af:
91:f4:7a:95:91:0d:4b:f5:1c:8c:1f:4c:94:05:21:
6d:ea:51:72:57:df:62:3e:86:06:dc:21:02:9f:5d:
90:8b:55:3f:ac:64:09:1c:09:91:4f:f6:34:a6:dd:
cb:ae:8b:6d:4f:86:f3:21:3d:30:96:92:c8:f7:c4:
de:42:25:0d:a7:fe:d3:66:ab:52:9a:ef:48:56:1a:
69:b4:6f:cf:af:e3:0d:25:4c:2f:13:10:ca:5f:cc:
06:e0:34:f9:89:c7:cc:ef:8e:26:2c:9c:8d:2a:ce:
6b:81:c1:76:38:37:d5:df:17:ce:e0:e0:01:48:0f:
1a:1b:c3:be:60:e8:4f:4b:4d:23:7b:ce:0b:5c:05:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:64:60:3F:59:AF:E7:F3:FE:F0:A1:E6:08:21:A4:E2:FE:11:6C
X509v3 Authority Key Identifier:
keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/4ZxkYD9Zr-fz_vCh5gghpOL-EWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.72.0/22
IPv6:
2a0e:6700::/29
Signature Algorithm: sha256WithRSAEncryption
b1:f7:4b:f3:60:e5:f8:e3:81:16:88:a5:05:20:15:52:65:75:
51:32:36:db:5d:26:bb:74:bb:61:fb:dc:b9:b2:bf:96:8e:7c:
1a:f9:5b:f1:df:5c:92:87:cd:ff:db:0d:eb:02:9e:8b:4e:d6:
3e:f2:1b:13:d0:21:4b:32:d5:4b:59:e4:d3:c4:e1:4a:a8:18:
44:1b:90:cf:6b:b0:f9:f9:29:a0:d8:77:e3:d2:87:6d:f2:64:
83:67:d0:c3:14:bb:9a:ae:f3:41:f6:42:43:cc:cf:e4:a4:6e:
ae:17:80:bf:42:51:37:37:e5:28:20:cb:a0:35:bf:2c:90:96:
e6:01:a8:c1:18:5b:79:10:20:40:44:df:fe:28:d9:29:81:92:
9e:dd:8f:82:bb:81:90:05:54:a0:38:b4:e1:b8:25:9a:04:3c:
77:46:e3:54:20:43:59:08:f7:99:13:7e:4c:48:c8:c0:94:4b:
f1:05:56:7b:a2:20:b2:34:07:33:cd:b0:30:5c:74:6b:ea:94:
60:42:b1:ab:0b:d5:ca:d2:eb:df:79:f8:e3:0c:3f:6c:cb:4f:
a1:8b:1b:13:18:5c:98:15:69:47:d4:fc:bc:de:6d:43:f8:d1:
a4:81:eb:b7:95:4f:ec:2f:dd:d9:b6:77:c8:5e:df:19:94:cd:
8e:12:fc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:22 2024 by rpki-client on console-fra.rpki-client.org