Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/zwFU3Cg9jlSUe06TWK_bSUbeVQQ.roa
File: zwFU3Cg9jlSUe06TWK_bSUbeVQQ.roa (raw, json)
Hash identifier: yFGu7sktUu0SDyNC9YxnUfPT97q/NZcdwFFFNVpcvLI=
Subject key identifier: CF:01:54:DC:28:3D:8E:54:94:7B:4E:93:58:AF:DB:49:46:DE:55:04
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 094E73AD
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/zwFU3Cg9jlSUe06TWK_bSUbeVQQ.roa
Signing time: Sat 14 May 2022 06:16:40 +0000
ROA not before: Sat 14 May 2022 06:16:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 45.144.88.0/22 maxlen: 24
45.149.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156136365 (0x94e73ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: May 14 06:16:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0154dc283d8e54947b4e9358afdb4946de5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:86:a2:0b:5e:d7:b9:b0:a7:1d:d9:81:a3:
eb:81:bb:e8:47:6b:9b:6f:4f:8d:58:5f:8f:de:2b:
7d:a4:35:e6:8e:2a:57:42:d9:d8:6b:b4:2c:43:7f:
7c:e3:14:e0:bd:f3:39:f6:93:e4:a1:d3:83:59:5a:
0c:ec:ed:46:4e:20:c9:ba:70:89:f5:af:b1:d3:b5:
40:16:1c:57:a6:cc:3e:0f:04:10:52:b6:8d:10:49:
63:08:5b:ac:64:64:aa:f8:1c:d7:e6:e8:3e:bd:c1:
ed:a3:24:b7:0a:fb:1f:d8:a6:43:5b:1e:79:5b:60:
56:05:b0:18:90:2c:18:23:8e:ea:f0:f2:e7:dc:80:
68:57:64:69:1a:c3:67:9d:d6:f6:30:9f:cf:c0:3f:
73:24:69:f4:0f:d5:cd:00:37:37:c0:1f:0d:6f:73:
05:d4:a4:30:b4:75:d9:46:d0:ed:59:92:14:b6:a8:
24:cc:ad:29:37:b6:af:6e:c4:3d:fa:95:bb:dc:e8:
58:d0:90:19:ff:dc:52:83:61:a9:3b:f0:90:eb:92:
7f:90:89:8c:6c:e0:96:60:da:93:14:6c:be:83:d8:
46:15:83:43:1e:23:28:83:b2:fb:3f:9e:9c:16:25:
66:42:e4:77:67:d3:66:49:d1:1a:26:5b:9f:d8:79:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:54:DC:28:3D:8E:54:94:7B:4E:93:58:AF:DB:49:46:DE:55:04
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/zwFU3Cg9jlSUe06TWK_bSUbeVQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.88.0/22
45.149.28.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c9:d4:07:6e:32:5b:d9:aa:c8:45:18:e0:c7:a6:3a:1e:47:
8a:ce:db:a0:ce:0a:62:13:5a:34:35:84:1b:05:a0:0a:d7:b2:
b7:b9:02:62:b5:01:4c:85:9a:87:8a:15:30:9f:0b:37:46:2b:
0b:3d:14:77:2e:29:e5:9a:eb:06:b7:c4:34:58:94:27:f6:98:
6f:8e:bf:ed:38:3e:b0:43:e7:3d:2a:65:8f:c8:bc:ea:7c:e5:
2a:71:eb:d2:17:38:c5:3d:48:cd:87:b1:04:95:5f:14:fe:64:
49:84:23:2b:d7:1b:51:ec:ac:08:cd:33:91:b4:78:5b:cc:a0:
8a:c2:48:84:01:01:18:c7:8e:0c:c1:bd:bc:bf:de:66:22:ca:
d3:d8:58:5f:07:47:fd:c2:f2:f4:8e:e8:01:02:bf:a6:c3:e1:
9b:4c:0e:2d:91:b5:dc:0d:0c:ee:10:74:d5:56:fb:43:95:9c:
7e:53:ee:1b:23:14:15:8f:04:da:ae:66:30:e5:b1:54:8f:72:
3a:2e:4d:73:ce:6a:0f:8d:5a:81:ae:f1:6b:40:4f:e5:4e:c7:
37:48:25:3c:43:49:34:dd:50:8e:f1:ef:e7:53:2f:69:2b:64:
ab:31:ba:3f:56:c2:19:d7:35:b1:74:ac:db:f2:2b:a3:37:38:
4e:88:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org