Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/Z0e_ZLTIRZSmXHpCFv7HeaC3eXc.roa
File: Z0e_ZLTIRZSmXHpCFv7HeaC3eXc.roa (raw, json)
Hash identifier: rhqMc8EEQWiP77gGwukjZ4k+XWKwN4EvyND8xHOdPvI=
Subject key identifier: 67:47:BF:64:B4:C8:45:94:A6:5C:7A:42:16:FE:C7:79:A0:B7:79:77
Certificate issuer: /CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Certificate serial: 06539B51
Authority key identifier: 5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/Z0e_ZLTIRZSmXHpCFv7HeaC3eXc.roa
Signing time: Sat 01 Jan 2022 14:02:35 +0000
ROA not before: Sat 01 Jan 2022 14:02:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41327
IP address blocks: 45.67.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106142545 (0x6539b51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdf516c95dd6eb2d1d9dd4e0e03286c1911f6e1
Validity
Not Before: Jan 1 14:02:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6747bf64b4c84594a65c7a4216fec779a0b77977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:8f:3c:d4:64:f0:70:2e:b7:fb:48:f4:d1:
88:15:ca:43:a7:ba:fc:40:f1:a6:4b:b1:d2:ea:d2:
5b:3a:1a:75:44:37:2c:26:50:85:73:05:ed:3b:a8:
86:85:ac:44:3b:da:a1:51:be:f4:d9:16:a1:3a:ed:
c6:11:5f:f9:46:28:59:a9:3c:97:f8:1c:80:ca:a0:
d9:9d:dd:f9:21:b4:ec:bd:5d:66:7f:ad:a0:b9:f9:
0c:58:72:92:83:e2:c5:0a:51:22:eb:42:0b:31:dc:
14:fd:6b:cb:e0:e0:4f:13:76:34:cd:87:66:9a:6e:
44:a5:f4:d2:71:d2:ee:6c:f5:6f:82:77:ea:d1:b9:
f6:a9:3c:7e:b0:81:68:66:f3:00:f7:08:35:3d:e5:
1c:60:12:96:c1:1f:c2:08:cf:4e:85:df:ca:49:dc:
37:fd:05:66:01:97:d7:4a:3c:9d:d2:df:c6:95:76:
5a:37:a9:a4:bf:ec:e4:e3:a5:e8:ea:20:0b:aa:dc:
00:e8:9c:bc:dd:fc:c9:6e:c0:a2:cd:54:43:e8:27:
8a:0d:05:b6:af:ae:0b:97:01:58:ef:41:50:fa:8b:
cc:ba:f6:42:c0:7e:a7:35:56:45:42:3d:e3:41:02:
6a:23:1c:96:fb:09:b0:04:58:1f:f4:e9:a7:81:bb:
56:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:47:BF:64:B4:C8:45:94:A6:5C:7A:42:16:FE:C7:79:A0:B7:79:77
X509v3 Authority Key Identifier:
keyid:5F:DF:51:6C:95:DD:6E:B2:D1:D9:DD:4E:0E:03:28:6C:19:11:F6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X99RbJXdbrLR2d1ODgMobBkR9uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/Z0e_ZLTIRZSmXHpCFv7HeaC3eXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/665d7d-d170-4df7-acc7-bf3f7951c5ea/1/X99RbJXdbrLR2d1ODgMobBkR9uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.115.0/24
Signature Algorithm: sha256WithRSAEncryption
93:99:d4:f5:ff:70:44:c3:25:80:4a:f9:26:15:70:bf:ee:3b:
f3:e9:41:f3:d3:4b:ee:cf:06:4d:ca:fb:c9:9a:1d:87:37:1b:
8c:c0:44:5d:36:13:12:81:4c:d4:0e:1c:17:90:d5:41:1c:32:
6c:86:ed:68:70:fb:3a:f2:cf:60:af:d7:ea:3b:69:d0:5b:9a:
7d:fb:a9:39:c7:36:9f:9e:c3:d3:5b:0a:f6:74:80:d3:96:3e:
a3:ba:33:56:e1:a6:21:c0:74:bd:4e:bd:f5:ad:ec:be:b5:ac:
30:d7:ac:c1:02:0e:ce:d0:42:f0:2b:36:0f:13:95:1b:cd:58:
20:c8:7d:5c:0f:35:95:50:0b:e0:19:5a:81:a7:e3:a8:fe:42:
2a:5f:76:19:b5:5a:d5:b1:94:7a:72:ce:c6:88:cb:17:8c:09:
39:e0:c7:f1:8f:ac:39:5d:00:c0:e8:83:f3:f9:65:b5:1f:69:
59:4b:df:db:6a:4f:2c:10:75:19:66:26:56:73:76:26:2b:b2:
c3:d0:8c:36:7d:49:f4:72:73:12:53:3f:d8:31:39:e1:e5:f7:
af:98:4c:a0:b0:67:a3:74:c5:46:0e:29:b8:ed:ad:61:db:10:
7d:03:b8:4c:8d:9d:75:14:8c:3f:a6:c8:d9:20:ef:1f:ca:0f:
ec:40:b2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net