Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HHG88MGOL-IJuDHCw0-3lWsla0g.roa
File: HHG88MGOL-IJuDHCw0-3lWsla0g.roa (raw, json)
Hash identifier: jaZ7Vc00SdpYWmd20xCtwFddduLQF1AvRcm0aADdsj8=
Subject key identifier: 1C:71:BC:F0:C1:8E:2F:E2:09:B8:31:C2:C3:4F:B7:95:6B:25:6B:48
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0183B652E006C4D5FB42221A5FBFC39D953B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HHG88MGOL-IJuDHCw0-3lWsla0g.roa
Signing time: Sat 08 Oct 2022 06:40:28 +0000
ROA not before: Sat 08 Oct 2022 06:40:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206286
IP address blocks: 45.137.207.0/24 maxlen: 24
45.140.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:52:e0:06:c4:d5:fb:42:22:1a:5f:bf:c3:9d:95:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 8 06:40:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c71bcf0c18e2fe209b831c2c34fb7956b256b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:08:90:8e:f6:0e:36:20:62:ce:16:29:88:
e7:28:b3:97:71:30:51:53:de:ec:3d:83:82:58:32:
61:a3:70:fb:20:e9:71:f3:0b:14:a1:d0:04:7f:e2:
19:1d:24:e4:f7:09:09:0e:99:0d:0d:eb:5e:6a:d2:
a3:f7:c6:c5:fd:27:c2:80:a5:40:95:3d:24:20:91:
04:b4:b7:7a:93:0e:45:4a:1c:3b:27:10:11:5e:23:
cd:c4:dd:36:69:c6:f2:84:45:29:6f:d0:32:91:80:
38:42:85:4a:57:91:0e:9d:8e:5a:e4:cb:50:8e:d7:
95:13:c0:2e:da:ac:40:00:7f:83:ec:03:eb:1e:ae:
f9:d2:5d:fb:5d:87:fb:1e:88:01:87:e9:60:69:23:
5b:5b:e9:91:59:f5:5c:9c:bf:49:d4:fd:2b:f0:dd:
07:6f:5b:ad:7b:90:72:f5:1b:2a:a1:b1:cc:18:02:
a1:1c:2f:b3:78:7c:bb:b4:31:b1:ec:d8:7c:a5:20:
91:0f:23:1c:ff:c0:8b:6c:d3:49:a6:56:aa:10:c1:
f6:d2:ea:47:d1:94:23:50:42:68:de:5f:f8:13:71:
c8:ed:3b:5e:7f:27:d0:5c:e7:1e:28:96:5d:ce:e8:
79:a2:15:d1:27:cd:5f:be:2b:a3:91:20:e8:74:2e:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:BC:F0:C1:8E:2F:E2:09:B8:31:C2:C3:4F:B7:95:6B:25:6B:48
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HHG88MGOL-IJuDHCw0-3lWsla0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.207.0/24
45.140.213.0/24
Signature Algorithm: sha256WithRSAEncryption
63:68:53:ce:22:21:96:e2:b1:63:a7:4a:c7:34:0f:c5:f9:14:
fa:b2:9d:dd:a5:94:00:6d:10:8e:4b:d8:ac:c3:7e:90:e4:a5:
16:16:1d:3d:e5:9e:09:ca:ee:70:9e:b5:5e:2c:6e:89:ca:f9:
1e:d0:4f:38:6f:f9:cd:67:9f:2d:10:6a:63:24:93:a2:9e:e1:
e9:7e:91:25:4f:76:f3:64:08:11:8a:da:fd:b3:e7:a7:20:84:
ef:2f:2c:c8:69:04:dd:d0:2e:11:da:fb:b6:96:0b:be:e6:43:
f1:93:fa:ab:0a:37:9d:5a:7e:e9:2e:86:ee:d8:2b:a1:41:9e:
4c:16:0e:64:41:6d:47:7f:60:e6:41:59:46:f7:c2:e7:84:a5:
a7:f9:27:21:70:7b:8a:b3:6d:60:42:43:19:cf:a2:45:c0:72:
4d:ab:fd:b8:1d:fa:4e:cd:77:7d:14:e1:80:9b:4d:d9:56:9e:
ee:e6:26:60:f3:6f:96:af:4a:da:88:e7:e7:04:7b:86:ae:a6:
c4:92:94:98:ff:ec:2a:f6:a3:af:56:48:db:03:e0:90:3f:b9:
fa:9e:19:63:86:ed:2a:77:a3:00:82:0d:82:01:53:68:b0:81:
a7:75:bd:b7:d2:9d:0c:43:a7:79:d3:6d:ba:28:52:6e:e0:66:
38:c1:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org