Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/H_NaMmgqZAKmPkybWgEo6fHgGhs.roa
File: H_NaMmgqZAKmPkybWgEo6fHgGhs.roa (raw, json)
Hash identifier: GIfLAyHI1PGJDYOcozHkphBV2h/Low50Avpq6SGy4Mc=
Subject key identifier: 1F:F3:5A:32:68:2A:64:02:A6:3E:4C:9B:5A:01:28:E9:F1:E0:1A:1B
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 33B97C
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/H_NaMmgqZAKmPkybWgEo6fHgGhs.roa
Signing time: Tue 14 Jun 2022 13:19:53 +0000
ROA not before: Tue 14 Jun 2022 13:19:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8211
IP address blocks: 145.72.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3389820 (0x33b97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jun 14 13:19:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ff35a32682a6402a63e4c9b5a0128e9f1e01a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:95:09:99:df:03:78:08:f0:d5:af:df:7b:1f:
c6:f5:45:ce:5d:59:a0:d8:e5:5d:dd:d2:fd:57:e5:
e8:8c:d5:e4:96:20:ab:f3:3b:58:ce:61:ca:02:56:
d8:79:96:af:d6:ff:44:a8:8f:8d:b6:68:73:05:27:
bf:ef:68:8c:ca:66:8b:72:47:35:a9:7a:b3:37:f3:
ad:e2:c3:99:5f:00:ed:61:a1:ea:1b:3f:bf:99:2c:
34:d0:e2:a8:2e:c6:8e:00:33:cf:a9:69:6b:b0:7c:
4d:5e:30:33:1d:a1:6c:79:bf:58:fc:4c:96:28:2a:
c5:52:41:77:cf:fe:24:8b:57:68:11:ff:aa:cf:9a:
c7:7f:27:09:2e:9c:4e:6e:26:b2:ba:94:33:92:3e:
d0:24:90:51:f6:35:11:c4:94:de:8d:9a:26:00:d2:
c3:6b:67:0a:51:35:1a:cb:d0:df:eb:5c:51:9b:96:
b1:99:dd:aa:bc:cd:29:56:0f:ca:d4:eb:3d:b5:08:
28:cd:0a:81:b2:ed:c7:62:2e:42:57:b8:63:80:c2:
16:ff:28:cf:63:1f:b4:8b:99:c2:3b:6e:25:29:d1:
be:93:7c:d3:51:78:17:ac:47:1f:42:1f:6a:cf:7d:
25:28:7d:b3:e3:7f:3a:88:71:68:6b:68:52:48:dd:
5b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:5A:32:68:2A:64:02:A6:3E:4C:9B:5A:01:28:E9:F1:E0:1A:1B
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/H_NaMmgqZAKmPkybWgEo6fHgGhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.72.100.0/22
Signature Algorithm: sha256WithRSAEncryption
31:66:c7:75:7a:0a:34:89:0f:cd:d4:93:f4:06:6b:bc:25:1b:
66:19:40:cb:2f:43:28:f6:39:29:95:59:95:9c:a1:f4:b6:8f:
e8:48:cf:2f:a3:f4:77:8d:e9:04:10:65:9d:ab:a9:1b:bb:3a:
70:c5:f6:a3:0e:be:75:98:f6:27:32:10:fe:d9:3d:88:29:ed:
b9:f3:89:34:cc:b4:70:32:61:79:17:4d:e8:8a:ce:fd:59:bb:
ac:af:8b:eb:f2:21:44:1e:2c:b7:25:f4:dc:dd:f3:17:a1:ee:
75:05:95:bc:29:3d:3f:4f:6e:b5:be:79:10:08:b7:5f:b1:b9:
a7:4b:6a:b7:d9:9d:42:cc:02:d5:4d:85:ce:ec:78:3e:4d:82:
51:f9:03:a3:45:41:89:0f:5e:06:6f:17:4d:f1:61:6f:1e:68:
70:48:28:c8:55:0c:7d:03:32:61:56:df:4e:9e:61:c2:ab:6d:
c1:a8:0f:e3:b6:1a:5d:8b:a1:03:86:91:7b:3a:98:f3:30:8a:
19:66:b8:30:51:78:a3:32:2d:c9:e0:e0:13:ef:47:a7:29:09:
ee:17:ff:37:59:7a:8c:34:1d:2d:e3:f6:bd:ce:49:62:18:8f:
cd:5a:be:4b:72:7d:c5:6c:61:9d:cd:c6:9f:d7:f9:09:c6:ed:
c1:e8:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org