Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/hkr5x1p8-FditgXwO-L7DxzurqU.roa
File: hkr5x1p8-FditgXwO-L7DxzurqU.roa (raw, json)
Hash identifier: aIRNAKy0owJgeuw3Lnuht7xm9pKQPLiekJtVBZExjQI=
Subject key identifier: 86:4A:F9:C7:5A:7C:F8:57:62:B6:05:F0:3B:E2:FB:0F:1C:EE:AE:A5
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01828241BA794F134F0E5176582F752422B9
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/hkr5x1p8-FditgXwO-L7DxzurqU.roa
Signing time: Tue 09 Aug 2022 10:58:41 +0000
ROA not before: Tue 09 Aug 2022 10:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206176
IP address blocks: 45.135.56.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:41:ba:79:4f:13:4f:0e:51:76:58:2f:75:24:22:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Aug 9 10:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=864af9c75a7cf85762b605f03be2fb0f1ceeaea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:0f:e8:c2:b0:4b:bd:c0:59:67:2c:d7:66:
a8:e0:e5:2f:a3:86:4f:19:e1:82:b2:76:b3:74:e9:
57:28:15:d1:16:9f:b6:b2:d4:14:fe:08:94:9e:1a:
76:41:98:ed:47:8a:ab:c1:87:6f:3e:34:c8:3e:17:
7a:8b:a3:ee:3d:85:02:20:28:f6:31:78:fd:cc:5a:
f5:d4:f0:7c:32:63:8d:11:16:26:ab:ed:40:1e:e5:
40:20:bf:0b:08:a4:cf:ef:14:32:ff:0e:3e:65:aa:
3c:21:9b:1d:a0:50:cd:41:a9:07:88:4f:78:ff:5c:
c2:f8:da:35:ac:9e:bb:9d:66:88:8a:2b:2a:03:76:
9e:49:94:02:79:3d:45:ce:ab:3c:0f:65:77:2f:74:
ae:fc:dc:a5:4a:79:76:af:6c:86:a4:64:45:c5:eb:
93:e8:a6:3c:fb:96:25:84:22:c6:c8:1e:c7:af:4a:
53:c6:4e:b4:14:17:64:29:8b:c1:4f:dc:6a:19:1e:
85:05:dc:f1:7b:c7:e9:1a:d2:52:10:8c:ba:2b:22:
22:71:62:bc:7b:c1:aa:c3:e2:bf:75:85:42:38:d8:
03:3e:19:d2:55:19:03:25:5e:98:6a:2f:19:9d:95:
b2:b6:94:cf:29:bb:8e:b0:f6:9b:a8:06:ff:a6:3c:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:F9:C7:5A:7C:F8:57:62:B6:05:F0:3B:E2:FB:0F:1C:EE:AE:A5
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/hkr5x1p8-FditgXwO-L7DxzurqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:91:5f:a2:07:d0:64:b5:db:b6:47:2c:b6:54:fb:95:7a:01:
10:09:78:c1:27:4e:7b:0f:5e:09:e1:5c:93:a0:4d:81:bb:0a:
fe:e3:aa:fd:8a:c2:1e:bd:66:13:dc:13:07:26:31:a7:20:68:
8e:48:87:6d:27:48:1e:35:c0:c9:b5:0a:19:e7:ba:aa:4c:32:
86:67:ef:c3:0a:35:da:c0:c7:5a:6e:67:7d:e5:44:de:b0:f1:
57:b8:dc:65:5d:7d:6f:24:d9:eb:1c:6e:03:82:89:f1:17:d8:
7b:a5:12:b2:28:9f:dc:d8:57:bc:9b:08:e2:a7:f0:4a:1b:6e:
8c:e5:15:b6:64:06:bd:ff:00:9c:2e:4f:af:15:5e:ea:ac:8b:
91:4e:63:2f:73:4a:0c:09:e6:20:56:5f:7e:83:39:63:72:7c:
44:70:a0:fd:af:4e:1d:9e:22:d3:5a:a1:50:14:8d:d0:28:42:
3e:43:0b:f4:63:8f:d7:15:f7:30:f6:e2:e5:4b:39:92:ef:c1:
84:8e:53:56:59:1c:9c:2c:f9:84:bb:04:ca:af:86:99:76:d4:
01:0a:91:29:b6:d6:b4:ef:81:92:57:4a:61:31:1a:92:dc:8e:
69:7b:34:24:e4:cf:0a:e0:92:75:e5:6c:e5:f7:52:f7:5b:11:
f4:7b:99:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKCQbp5TxNPDlF2WC91JCK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzk0MzUxN2Y1ZTNiNzQ3ZTc1MzAzMjA3ODlhMDM0NDRi
NDM5MTIwHhcNMjIwODA5MTA1ODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjRhZjljNzVhN2NmODU3NjJiNjA1ZjAzYmUyZmIwZjFjZWVhZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndAP6MKwS73AWWcs12ao4OUvo4ZP
GeGCsnazdOlXKBXRFp+2stQU/giUnhp2QZjtR4qrwYdvPjTIPhd6i6PuPYUCICj2
MXj9zFr11PB8MmONERYmq+1AHuVAIL8LCKTP7xQy/w4+Zao8IZsdoFDNQakHiE94
/1zC+No1rJ67nWaIiisqA3aeSZQCeT1Fzqs8D2V3L3Su/NylSnl2r2yGpGRFxeuT
6KY8+5YlhCLGyB7Hr0pTxk60FBdkKYvBT9xqGR6FBdzxe8fpGtJSEIy6KyIicWK8
e8Gqw+K/dYVCONgDPhnSVRkDJV6Yai8ZnZWytpTPKbuOsPabqAb/pjys9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZK+cdafPhXYrYF8Dvi+w8c7q6lMB8GA1UdIwQY
MBaAFCrJQ1F/Xjt0fnUwMgeJoDREtDkSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgt
MmQ5MWNmZDdhYWY0LzEvaGtyNXgxcDgtRmRpdGdYd08tTDdEeHp1cnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xOTUxMWQtNTM3ZS00MjQxLWEwZDgtMmQ5MWNmZDdhYWY0
LzEvS3NsRFVYOWVPM1ItZFRBeUI0bWdORVMwT1JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYc4MA0G
CSqGSIb3DQEBCwUAA4IBAQAckV+iB9Bktdu2Ryy2VPuVegEQCXjBJ057D14J4VyT
oE2Buwr+46r9isIevWYT3BMHJjGnIGiOSIdtJ0geNcDJtQoZ57qqTDKGZ+/DCjXa
wMdabmd95UTesPFXuNxlXX1vJNnrHG4DgonxF9h7pRKyKJ/c2Fe8mwjip/BKG26M
5RW2ZAa9/wCcLk+vFV7qrIuRTmMvc0oMCeYgVl9+gzljcnxEcKD9r04dniLTWqFQ
FI3QKEI+Qwv0Y4/XFfcw9uLlSzmS78GEjlNWWRycLPmEuwTKr4aZdtQBCpEptta0
74GSV0phMRqS3I5pezQk5M8K4JJ15Wzl91L3WxH0e5kV
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:18 2024 by rpki-client on console-fra.rpki-client.org