Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/HP8aoryto-Acd67tk4RzkAlA6rE.roa
File: HP8aoryto-Acd67tk4RzkAlA6rE.roa (raw, json)
Hash identifier: a1RASBLhLXh4G0POp2/j6Jd6TU3zhh7QPStOWDEW1Ik=
Subject key identifier: 1C:FF:1A:A2:BC:AD:A3:E0:1C:77:AE:ED:93:84:73:90:09:40:EA:B1
Certificate issuer: /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial: 0EB55C2B
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/HP8aoryto-Acd67tk4RzkAlA6rE.roa
Signing time: Sat 01 Jan 2022 02:00:32 +0000
ROA not before: Sat 01 Jan 2022 02:00:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64404
IP address blocks: 94.45.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246766635 (0xeb55c2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Validity
Not Before: Jan 1 02:00:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cff1aa2bcada3e01c77aeed938473900940eab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f3:02:9e:fb:dc:7f:56:28:1d:41:21:92:c7:
90:e5:07:ea:7a:6c:45:83:ce:ad:88:62:a9:88:f6:
99:19:19:29:fb:ba:94:05:df:52:54:37:2f:f5:e4:
b2:00:03:9d:df:3b:8c:e5:d4:7e:0c:9d:b0:63:34:
7b:a4:54:17:a5:df:57:74:21:66:c7:68:b3:b6:4e:
63:cf:66:7d:a5:92:a4:15:01:c5:54:52:16:a7:c7:
4e:fc:59:0d:0b:08:1c:76:4e:65:00:36:16:02:75:
77:c0:97:80:45:7a:bb:35:4e:67:d6:39:89:bf:cc:
fe:9d:fd:48:d8:3f:a6:2e:b9:b2:17:55:40:ed:99:
56:1d:b8:c2:5b:7d:64:40:f4:51:b0:e7:cc:79:33:
33:a4:84:a3:33:34:22:29:ce:95:37:b0:1a:7a:c3:
d7:ba:cc:67:ef:0c:c7:4d:7e:18:40:f4:89:eb:d1:
ae:aa:8d:96:38:6b:9b:54:32:a7:a4:ca:a9:60:49:
98:27:4e:1e:5c:1f:d2:4d:73:3a:96:3c:47:50:23:
de:32:6a:e0:63:5b:9a:88:21:2c:57:b6:7e:b6:ef:
d1:c4:db:1d:e4:7b:34:07:33:41:26:bf:d1:45:2d:
ba:40:17:8c:46:d8:74:30:c2:83:f1:4d:d6:29:d8:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FF:1A:A2:BC:AD:A3:E0:1C:77:AE:ED:93:84:73:90:09:40:EA:B1
X509v3 Authority Key Identifier:
keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/HP8aoryto-Acd67tk4RzkAlA6rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.224.0/19
Signature Algorithm: sha256WithRSAEncryption
64:84:2e:5b:9e:92:c8:34:cd:28:f9:e7:1f:96:ae:7f:f2:4c:
50:b9:85:f6:2e:a7:51:0b:7a:71:15:32:67:67:47:ce:b9:54:
76:c3:6a:0c:0a:53:d5:d8:1d:1f:8c:98:5f:ba:24:f5:12:04:
44:f1:08:80:af:0d:c2:ff:4b:1b:e4:e6:92:61:d3:cd:54:3a:
70:38:ad:5b:99:87:2d:0f:2d:b5:21:64:b2:d6:9b:e5:aa:19:
66:0a:10:b5:4f:54:22:1b:4d:3b:6c:2f:47:d4:62:aa:9e:4b:
49:85:16:c6:6f:71:91:27:70:dd:20:d3:ae:e6:b3:30:bc:29:
1b:4f:e9:43:03:22:e6:a6:79:44:4a:44:87:8b:77:c4:80:1e:
77:2a:68:8a:e0:9f:0a:19:53:8f:ef:95:fe:02:c8:06:73:87:
a0:1f:ad:11:94:06:a0:21:cf:b9:e4:36:dc:22:f4:71:46:b8:
55:2d:9b:a0:92:be:9d:18:b7:53:b5:12:0a:dd:f5:c7:b3:25:
8c:da:c2:78:8f:5f:0c:c9:40:4d:10:ce:f9:e5:e6:cc:19:d7:
86:f9:4f:a0:af:2e:63:2f:cb:a1:ea:52:d4:b9:34:06:ce:f3:
a0:84:fa:69:a0:e3:e0:03:45:25:99:d1:27:c7:8c:2f:e2:2f:
c0:4d:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:28 2024 by rpki-client on console-fra.rpki-client.org