Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/H0SZ1yn8FUGAz79PneE9ak658d8.roa
File: H0SZ1yn8FUGAz79PneE9ak658d8.roa (raw, json)
Hash identifier: zqhjysEyB2uUpUl7ql16xASRLvnDniT40ufQ12BG6W4=
Subject key identifier: 1F:44:99:D7:29:FC:15:41:80:CF:BF:4F:9D:E1:3D:6A:4E:B9:F1:DF
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0182126BD36FE02591C8ADDEA9D18F5AC636
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/H0SZ1yn8FUGAz79PneE9ak658d8.roa
Signing time: Mon 18 Jul 2022 17:47:12 +0000
ROA not before: Mon 18 Jul 2022 17:47:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:12:6b:d3:6f:e0:25:91:c8:ad:de:a9:d1:8f:5a:c6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jul 18 17:47:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f4499d729fc154180cfbf4f9de13d6a4eb9f1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:bb:07:2e:fe:61:0b:06:45:b6:b5:65:f0:
c2:fb:f8:7a:91:8a:80:19:cc:0f:c5:62:c0:28:00:
ac:70:6b:33:1d:33:98:c9:59:a0:31:be:7d:05:20:
ad:01:31:7a:8d:ab:9a:ba:bf:6f:9f:c9:19:9f:a2:
b6:4e:28:ad:22:78:ba:e2:e6:f1:f1:1e:c3:ee:c9:
2f:4e:ea:aa:8e:6a:01:36:b7:f0:08:1c:ac:59:33:
cd:3a:b4:d5:20:40:9d:86:bb:55:7c:00:b7:f9:8f:
1c:e2:5a:95:73:32:01:ad:8b:4f:a6:a9:eb:11:2d:
62:7a:3b:bb:38:a0:1b:17:07:a0:08:c8:74:a9:44:
74:c7:5c:e9:f7:97:bb:a7:62:fe:ef:19:d6:5e:41:
21:2d:3a:57:cd:57:06:a6:b3:ce:65:f1:bc:62:07:
9d:7b:d4:02:a1:51:6b:84:0c:9a:04:ae:c0:40:d4:
88:68:05:35:72:dc:57:c1:4f:30:62:9b:66:16:30:
fc:7c:38:9a:df:26:b9:ad:06:48:63:34:53:1d:d5:
70:a2:a0:71:22:af:53:02:66:81:51:3f:e9:4f:d0:
96:16:39:56:9f:79:0e:74:ca:66:3d:7e:89:bf:2c:
f6:31:ee:6a:d6:a0:74:47:4a:34:fd:c5:8d:2e:5e:
35:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:44:99:D7:29:FC:15:41:80:CF:BF:4F:9D:E1:3D:6A:4E:B9:F1:DF
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/H0SZ1yn8FUGAz79PneE9ak658d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/24
Signature Algorithm: sha256WithRSAEncryption
66:d9:5d:d2:25:28:60:f0:54:35:e7:2b:35:c9:9b:1e:cc:65:
eb:38:27:83:f4:89:0b:ed:11:2c:ac:c1:d3:af:c8:28:36:8c:
dd:c8:36:d1:80:70:4a:ad:cd:4a:02:4a:46:5f:88:d3:ce:e9:
1a:43:cf:9e:17:00:7c:bf:ab:a7:35:81:ad:23:5e:f1:9e:71:
ec:18:60:3c:32:4d:c3:29:1c:95:98:c9:8e:0b:b9:07:78:86:
23:34:ee:83:ef:3e:49:dd:38:bf:39:b2:e4:86:58:66:fe:7d:
26:c9:11:1b:07:47:5a:ea:ef:bc:39:00:f8:66:5a:bb:31:36:
fc:dc:69:d8:3e:18:a5:21:1f:08:ce:50:74:78:24:ad:93:01:
be:a8:34:6c:f1:81:bf:72:0b:09:ad:22:fa:c3:16:c2:24:d4:
b0:2c:ac:bf:5d:ca:be:bc:ca:91:c9:28:67:cd:7f:2c:1b:ea:
ae:58:32:e8:3b:6b:7a:27:ec:eb:95:18:6d:c7:4d:f7:40:c8:
2c:23:59:98:64:fd:19:ff:24:3b:05:60:cd:80:20:20:ea:d8:
3a:f9:bf:81:9a:8d:2b:12:6e:50:9b:79:f3:3d:af:95:06:de:
0d:5f:d8:9b:ce:22:13:64:05:49:9a:39:21:70:33:5a:b2:27:
f8:72:0c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org