Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HgvbPf7sMpwI4MGFXLqvmJkxTWo.roa
File: HgvbPf7sMpwI4MGFXLqvmJkxTWo.roa (raw, json)
Hash identifier: KlBpc6j6MInWtg6bgdHSWVnhlLNk9KDPe5OksU818RE=
Subject key identifier: 1E:0B:DB:3D:FE:EC:32:9C:08:E0:C1:85:5C:BA:AF:98:99:31:4D:6A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19F0D990
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HgvbPf7sMpwI4MGFXLqvmJkxTWo.roa
Signing time: Sat 01 Jan 2022 15:56:56 +0000
ROA not before: Sat 01 Jan 2022 15:56:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 45.85.90.0/24 maxlen: 24
136.144.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435214736 (0x19f0d990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e0bdb3dfeec329c08e0c1855cbaaf9899314d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:98:bf:39:9e:4f:c3:fe:a2:ed:58:6c:23:
5d:05:ff:90:24:ae:55:59:31:fd:8e:a9:ac:7e:4e:
b6:64:a4:42:97:a1:23:73:63:b3:d4:f1:88:d6:78:
14:f9:83:a9:33:a3:a4:a7:9d:5a:8f:85:ff:74:68:
13:31:24:78:dc:6c:7f:17:a5:cb:49:52:8d:b8:ee:
4f:dd:22:40:05:23:bd:99:58:6d:a1:1a:c1:c2:35:
62:d0:ae:b4:00:be:98:62:be:d9:2a:84:54:86:4e:
15:e5:e7:36:a8:09:eb:39:59:25:c6:ea:6d:52:be:
2f:4f:92:1c:21:7b:a6:7f:e4:4a:18:ef:34:25:68:
70:f2:f9:04:a7:bd:16:39:a7:97:4b:fc:13:5b:16:
8f:49:6e:0e:db:62:9e:61:74:97:9f:e3:c5:c0:47:
d5:2e:94:be:1f:c0:0a:c0:9d:01:97:08:dc:90:f6:
4c:89:d1:9a:7c:f1:e1:8e:dc:6d:ca:dc:4a:e9:3d:
12:53:74:16:c8:e5:f4:62:9a:44:7a:00:57:4c:d5:
7f:15:9f:57:59:de:0c:61:d3:45:ae:08:a8:a7:02:
ec:b8:95:a3:61:3a:cf:e7:6e:1b:df:53:14:05:fd:
f4:c3:3c:51:cf:71:63:f3:25:ce:15:86:48:e9:93:
19:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0B:DB:3D:FE:EC:32:9C:08:E0:C1:85:5C:BA:AF:98:99:31:4D:6A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HgvbPf7sMpwI4MGFXLqvmJkxTWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.90.0/24
136.144.41.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e4:76:c9:be:d9:33:35:89:ee:d9:6b:6b:c6:58:d8:e2:e9:
2f:69:b3:01:89:18:d5:1e:eb:0e:83:e0:49:d8:77:c3:35:58:
d0:d6:21:b4:aa:a3:c7:72:ff:e2:b8:cf:50:09:3a:9a:b9:aa:
5a:bd:4d:13:05:db:8c:df:31:eb:5e:f4:ac:09:09:ea:34:50:
06:17:49:5f:9e:37:6a:97:b8:02:a9:96:e5:7c:4b:8e:25:b4:
74:fe:86:15:36:04:49:96:af:8e:29:ba:f9:12:48:c9:75:c5:
d3:1c:1b:d1:4c:b0:e6:e1:55:2d:ec:78:5e:d8:92:a3:1c:5c:
71:3e:2f:ad:df:30:0b:da:ea:63:60:f2:2d:be:ae:7f:9a:9d:
cb:92:8a:e2:e2:c9:71:22:1d:9c:d8:8a:3d:86:b6:d7:a9:95:
6f:be:bf:1d:b9:8c:c6:f9:28:ab:05:fc:43:29:35:0a:3d:c9:
25:23:4c:f0:5f:1d:6a:c0:8c:28:b0:ae:f8:52:a3:b9:6e:dc:
14:b2:f1:da:06:6d:68:06:f7:de:3a:6d:0d:9a:0b:17:a5:c7:
03:41:ba:e2:63:fd:57:33:06:ea:8e:78:f3:e5:1c:54:55:bc:
0c:e4:25:a0:bf:1f:b4:44:b2:f6:d2:3d:a8:1c:e8:ab:6e:23:
5c:64:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org