Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/Z-te6U_xpAajdGaNSXtNbyDSAvM.roa
File: Z-te6U_xpAajdGaNSXtNbyDSAvM.roa (raw, json)
Hash identifier: hDaTbwJDmf3PGjrbf/NVyOfwnZumEyiFgo6vFA2UXK0=
Subject key identifier: 67:EB:5E:E9:4F:F1:A4:06:A3:74:66:8D:49:7B:4D:6F:20:D2:02:F3
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 0398E343
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/Z-te6U_xpAajdGaNSXtNbyDSAvM.roa
Signing time: Sat 01 Jan 2022 03:58:44 +0000
ROA not before: Sat 01 Jan 2022 03:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49447
IP address blocks: 45.9.148.0/24 maxlen: 24
45.9.150.0/23 maxlen: 23
45.9.149.0/24 maxlen: 24
2a0e:fa00:1::/48 maxlen: 48
2a0e:fa00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60351299 (0x398e343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Jan 1 03:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67eb5ee94ff1a406a374668d497b4d6f20d202f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:12:26:e3:45:ad:7c:87:f7:27:67:2e:04:
05:58:b1:c6:e2:64:8c:28:9a:0a:50:c1:4e:eb:2f:
eb:cc:f5:7b:bd:38:ff:88:1f:af:1c:49:31:10:da:
73:a6:4f:ed:a9:bd:c1:aa:70:de:c8:2f:9c:d4:a0:
4a:0d:07:26:97:70:28:ef:da:0a:d5:fb:fb:cf:fa:
7c:38:ea:9d:d1:9f:6d:83:b1:e5:c3:1a:57:d6:5e:
db:e5:a8:56:fc:d2:f9:82:da:5f:d7:3d:bd:ed:53:
fa:02:47:85:64:d5:17:07:12:64:5d:61:22:cc:e1:
e8:e1:ae:2c:a5:68:83:ed:dc:f9:f3:fc:85:a4:9c:
b4:6a:dd:81:30:f9:7d:af:bc:0c:93:78:0d:fe:03:
37:26:2f:fd:3d:8b:15:f1:9d:31:8b:e5:99:23:fc:
9a:0d:e3:c3:32:f8:c3:49:2a:ef:92:f3:75:7f:32:
93:e4:4e:46:4f:09:a0:93:20:e1:85:f1:d6:d2:7a:
df:e2:78:42:4a:9a:4d:0f:90:e4:13:b0:82:f7:54:
90:3a:ef:e8:f1:f9:90:3f:8c:18:33:57:9d:6a:65:
16:48:2b:d7:56:ca:61:a2:db:65:8b:22:6b:9c:7a:
3a:71:2f:30:c7:62:d7:dd:e5:23:37:81:db:24:91:
60:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:EB:5E:E9:4F:F1:A4:06:A3:74:66:8D:49:7B:4D:6F:20:D2:02:F3
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/Z-te6U_xpAajdGaNSXtNbyDSAvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.148.0/22
IPv6:
2a0e:fa00::/47
Signature Algorithm: sha256WithRSAEncryption
86:3e:0c:cf:2a:e8:68:44:cc:73:33:6f:38:96:27:21:a0:63:
1c:43:e8:7d:36:fa:0f:04:ac:74:b2:f3:f0:57:c3:55:33:31:
ea:f2:25:63:c7:7b:3d:a1:49:51:ca:59:b3:a8:83:e6:17:ac:
05:35:d5:37:63:67:32:0f:25:32:66:e4:4b:40:d2:90:64:19:
95:ea:2a:17:b6:43:09:49:3e:17:25:e1:14:24:9e:60:fa:72:
ff:35:fb:86:6c:70:d8:6b:02:28:37:5d:e9:e0:ad:f2:b4:09:
82:05:9f:44:bb:24:d4:d6:8f:9c:f9:dd:56:97:94:51:b1:0f:
c2:dc:e7:7e:52:ed:db:e9:23:ef:08:e6:57:0f:3a:b6:c1:c6:
c3:27:48:f7:a2:9b:c9:3b:46:ad:0e:ff:5c:c9:b9:93:3a:9a:
53:1e:83:aa:67:38:fd:e6:6b:49:af:da:14:07:a2:80:12:ad:
f7:80:59:28:94:3f:18:b0:49:63:95:09:32:94:16:16:96:64:
ea:c4:e0:80:b7:e2:a8:8b:26:10:a5:60:4d:43:62:2f:7e:a7:
91:a1:57:b7:91:ba:49:f2:d6:25:d5:e5:b2:2d:e2:47:3a:0a:
8e:57:36:bb:ba:c6:5e:30:14:ac:17:f4:5e:46:4b:f4:e8:be:
da:b1:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:51 2023 by rpki-client on console-ams.rpki-client.org