Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/HBDWrzNZt0nBJJj446GTR5-qHDI.roa
File: HBDWrzNZt0nBJJj446GTR5-qHDI.roa (raw, json)
Hash identifier: m0OtVOTEK0H6gl4YHlUJpZoHzd4G1HC0YGWdAUEFrSA=
Subject key identifier: 1C:10:D6:AF:33:59:B7:49:C1:24:98:F8:E3:A1:93:47:9F:AA:1C:32
Certificate issuer: /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial: 015C2AAB
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/HBDWrzNZt0nBJJj446GTR5-qHDI.roa
Signing time: Sat 01 Jan 2022 11:59:53 +0000
ROA not before: Sat 01 Jan 2022 11:59:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61418
IP address blocks: 46.18.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22817451 (0x15c2aab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Validity
Not Before: Jan 1 11:59:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c10d6af3359b749c12498f8e3a193479faa1c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:5f:34:0e:61:42:be:36:52:bd:1f:30:13:
fe:2e:62:fe:e2:a1:03:38:f8:cf:ef:ca:c2:ed:d5:
a6:e6:85:05:18:f9:94:36:20:82:fb:4e:d7:06:fc:
e8:3c:57:f7:ec:b8:4e:b1:e8:a2:31:f7:42:e9:01:
55:24:e1:41:da:06:4b:98:f6:59:62:63:a5:8c:5d:
be:d4:1f:2e:89:69:1b:14:20:0e:84:c4:4b:15:fc:
9e:f0:b2:79:d0:38:56:f4:53:16:e9:b5:7b:92:07:
6b:39:0d:4d:ca:3d:d4:74:64:ce:07:0d:5e:eb:8d:
cd:e1:db:47:83:92:47:c3:65:ae:2f:48:92:31:07:
fa:1d:3c:3f:46:1c:7c:bd:b7:52:2b:1a:6d:6a:c7:
e3:5a:09:a3:09:4a:14:1c:63:a5:f6:74:bf:de:e5:
82:cd:e3:16:12:6b:30:4d:95:99:f7:f1:05:e0:c9:
06:43:76:68:b9:eb:ba:4d:24:08:9c:c2:6f:ca:f2:
b2:51:01:5f:9b:a1:dc:ff:98:6d:cf:f4:0a:4c:a6:
3d:96:90:1a:8a:e2:4d:f6:bb:7b:37:93:64:78:5e:
8b:d4:65:71:73:6b:74:b9:93:90:11:3f:aa:14:02:
78:34:46:c8:c1:ca:16:6b:e3:b2:db:2a:ac:31:84:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:10:D6:AF:33:59:B7:49:C1:24:98:F8:E3:A1:93:47:9F:AA:1C:32
X509v3 Authority Key Identifier:
keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/HBDWrzNZt0nBJJj446GTR5-qHDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b0:02:7b:a9:2b:2a:27:10:06:cf:10:d1:9d:31:af:54:e7:
3e:5d:e2:8f:f4:3e:97:16:03:dd:1d:1e:16:d2:5b:6f:a9:55:
bc:0a:a8:68:09:b3:13:ba:1c:be:1c:4a:10:bd:db:a4:6b:41:
95:7d:a4:a7:06:82:15:c2:da:49:e4:11:ef:84:69:4d:ac:41:
b6:39:6f:f3:49:a3:61:72:5f:51:82:f3:86:2c:bf:4d:32:10:
34:40:9c:1d:a6:df:e7:f5:de:a0:a5:a5:de:e8:88:58:0e:c8:
e5:d5:e8:6f:83:4e:c3:7c:5d:54:bf:3b:ba:48:d3:4a:ad:b6:
2a:bd:38:63:76:67:a9:e5:4c:36:be:97:44:4e:40:9f:7c:e1:
9d:8c:42:a9:8a:2a:60:4f:66:a3:99:4f:fc:5a:6a:1b:23:7b:
09:83:6a:d6:ff:76:b9:09:fc:e7:94:02:b4:6a:68:01:7d:d8:
cc:a7:b4:97:de:b2:c0:76:14:44:d7:04:6c:c7:d8:1d:8c:c6:
48:65:40:b7:fa:14:f9:89:c9:de:dd:e8:62:55:8a:d1:86:df:
c4:30:6a:76:7c:c7:ab:75:9b:36:5a:9a:32:0d:4d:1f:30:e0:
55:f9:f9:8c:6f:c6:dc:93:8e:01:a4:78:8d:b6:f6:61:0d:c8:
ac:45:34:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:46 2023 by rpki-client on console-ams.rpki-client.org