Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HGCC7K9eh_PB0zybbk8T4wR5jcI.roa
File: HGCC7K9eh_PB0zybbk8T4wR5jcI.roa (raw, json)
Hash identifier: GqWTnGDyjPMmD67+z/JWy/XEdH+FyaSUbutpAGr8Hjw=
Subject key identifier: 1C:60:82:EC:AF:5E:87:F3:C1:D3:3C:9B:6E:4F:13:E3:04:79:8D:C2
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0183A74B8871CEC16AE97DEF30DAAE99C64F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HGCC7K9eh_PB0zybbk8T4wR5jcI.roa
Signing time: Wed 05 Oct 2022 08:38:08 +0000
ROA not before: Wed 05 Oct 2022 08:38:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398127
IP address blocks: 45.133.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:4b:88:71:ce:c1:6a:e9:7d:ef:30:da:ae:99:c6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Oct 5 08:38:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c6082ecaf5e87f3c1d33c9b6e4f13e304798dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:6c:ba:86:ee:dd:45:12:03:eb:31:4a:ae:
da:1d:4d:44:9c:c6:12:69:d6:bc:df:29:5d:cb:07:
98:6b:b1:0b:82:c0:98:0b:ef:a4:4e:4c:f6:c7:fb:
7c:52:76:15:09:a1:27:94:fa:3b:b8:bd:12:3c:fd:
dd:dc:b8:03:aa:40:1d:71:33:c7:34:1b:c1:e6:b7:
94:93:f7:ed:8f:98:80:c3:4c:f9:11:d7:bb:f7:b4:
0c:dd:95:6c:c0:cd:da:78:26:44:fc:37:41:63:d0:
1f:b1:d5:d0:a5:c3:77:d0:ff:6d:79:9a:a8:ba:07:
f8:d3:9e:86:9d:e9:b4:79:b8:69:a3:3c:45:cb:cd:
74:e3:c9:06:c4:ea:ca:2e:37:ae:eb:3a:9d:1a:2e:
8a:60:d0:47:17:3a:33:1e:63:2c:21:73:4d:27:3c:
ee:24:db:7d:9c:dd:96:88:ee:48:ae:7c:e1:14:b9:
23:4d:a0:23:5c:73:97:95:28:b4:bb:e5:02:66:83:
70:14:dd:81:56:54:57:28:66:c4:f6:70:20:72:7f:
9e:62:be:49:6c:28:8d:15:21:db:03:49:d8:4c:28:
ac:4d:89:22:e2:2d:83:89:2a:b4:7a:4d:70:9a:e9:
c9:91:38:0e:a0:3d:e8:00:68:c3:7c:31:c4:89:b9:
4c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:60:82:EC:AF:5E:87:F3:C1:D3:3C:9B:6E:4F:13:E3:04:79:8D:C2
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/HGCC7K9eh_PB0zybbk8T4wR5jcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
36:05:a9:80:20:19:a1:83:ce:e9:31:f7:99:ab:f6:41:62:cd:
f1:96:50:c3:13:1d:e1:ef:c3:73:ff:7f:55:61:8d:16:73:8b:
e6:b3:54:6b:47:b8:e9:2c:c4:9d:18:93:70:b8:6c:78:d8:c0:
46:cf:04:61:da:fd:6a:a6:69:bd:c6:83:13:ec:df:ca:1a:9a:
f0:50:ad:67:8c:23:6a:b9:70:02:f7:b2:97:91:d9:f9:dc:83:
1a:9f:a4:82:6e:bb:99:07:a5:d8:f7:c9:7b:d8:4f:e4:fe:e2:
6d:03:3a:a1:1b:db:58:6b:51:36:2d:2e:eb:9e:18:1f:18:80:
50:49:34:af:9f:bd:c4:fa:4d:4f:b9:ca:d5:2e:2a:5d:44:38:
ca:77:71:17:57:89:aa:b1:55:eb:f4:38:e3:8a:bc:4a:c2:bd:
5c:31:c3:a8:4a:fb:8b:00:ea:22:f7:58:db:a2:02:5b:1c:2d:
9a:97:67:9d:37:38:f6:0b:a7:f4:23:76:bc:81:55:96:9a:67:
1f:9a:32:5e:a3:9c:a8:ac:4c:45:22:06:26:ac:9a:9a:e8:15:
36:55:5a:31:44:a4:cc:ef:ed:0e:3b:85:73:f4:56:3f:8d:47:
f8:27:de:f9:30:b4:54:54:eb:ed:1d:bd:f0:50:a7:51:24:5c:
eb:7a:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org