Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hsXcOD0OvfbaK8lfbbCalTWtu9o.roa
File: hsXcOD0OvfbaK8lfbbCalTWtu9o.roa (raw, json)
Hash identifier: M4nkiOm454yG9ZKQxVfGgXWdLW0M2rUXNdD0DWHj12k=
Subject key identifier: 86:C5:DC:38:3D:0E:BD:F6:DA:2B:C9:5F:6D:B0:9A:95:35:AD:BB:DA
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0182DA96261349EE0FB753B33B1AEBE69FC9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hsXcOD0OvfbaK8lfbbCalTWtu9o.roa
Signing time: Fri 26 Aug 2022 14:37:29 +0000
ROA not before: Fri 26 Aug 2022 14:37:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 45.134.39.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:da:96:26:13:49:ee:0f:b7:53:b3:3b:1a:eb:e6:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 26 14:37:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86c5dc383d0ebdf6da2bc95f6db09a9535adbbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:96:ce:7d:9e:e5:ad:b0:6c:95:a8:b4:4e:
7c:81:b1:cd:ac:00:57:4c:b0:a5:81:2d:f8:0c:7b:
5d:e3:11:37:40:52:f4:78:ae:4b:21:b9:64:12:6c:
ac:03:93:24:77:b3:81:f0:bb:aa:2b:d6:fb:e5:a8:
87:46:4b:7e:22:6c:1e:67:39:78:7c:ea:e8:62:2b:
2a:80:5b:24:a8:ed:f3:aa:f1:fe:98:a3:a1:a0:1d:
eb:37:db:bf:b2:e2:29:dc:fb:2e:12:19:10:d8:e7:
16:22:e4:b7:44:4a:29:90:50:66:48:95:63:bc:d8:
26:12:ec:01:8c:e1:44:38:e0:6e:8d:71:cd:91:ef:
50:ff:a8:53:ad:53:6f:dc:13:a9:af:87:1f:74:99:
d4:2c:07:08:04:e6:45:d7:4f:f1:f2:1c:62:23:50:
84:4b:92:d1:ed:b6:67:3a:55:78:06:c9:2b:19:99:
84:f0:45:47:a6:c2:81:32:08:1a:a1:9a:7f:cb:1a:
19:2a:e4:ea:ba:75:29:30:d9:f2:3f:c0:f6:6e:12:
64:7a:2b:8b:b8:e7:b5:b2:9b:e9:50:c3:73:1b:62:
42:fe:a0:a8:44:46:70:d1:00:85:00:de:59:5c:36:
20:56:c6:f8:af:a2:69:3e:29:59:b4:41:e6:7d:5b:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:DC:38:3D:0E:BD:F6:DA:2B:C9:5F:6D:B0:9A:95:35:AD:BB:DA
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/hsXcOD0OvfbaK8lfbbCalTWtu9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
45.13.227.0/24
45.134.39.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:59:87:a9:2a:9a:cd:3a:f1:cf:14:ea:e4:fc:cc:76:7f:d8:
69:4c:cb:b1:ea:90:08:70:f3:c0:a1:31:81:25:ae:9e:c2:f7:
9b:bc:0d:86:e6:81:a7:11:4e:31:4a:a2:8d:fb:63:71:52:d8:
5c:30:0c:42:fc:7d:7d:1b:82:dd:55:e6:93:62:98:b8:a2:5c:
9c:b2:74:58:34:e0:0b:62:74:89:b2:9e:66:34:91:42:2a:af:
f6:af:3a:dc:53:d4:1f:ea:7d:25:c2:20:33:2c:32:99:8b:52:
c0:fb:74:c3:9f:c5:08:5f:24:83:69:30:f3:ad:72:98:e1:b8:
bb:39:15:4f:3b:2d:99:15:cb:df:ec:6e:2f:b7:a0:72:44:3a:
a1:15:5c:ac:02:80:cf:24:76:cf:b1:59:08:6f:83:fa:01:28:
85:d5:38:3d:88:14:25:d2:82:8b:bf:27:61:df:a9:4d:62:b7:
5b:19:6e:78:f6:1c:3b:6d:6f:84:6e:db:a8:5e:c7:a1:ac:09:
c3:eb:dd:24:e3:36:e2:d2:a1:28:f5:31:ba:15:e6:ae:0b:9e:
5f:40:2e:6d:f8:a0:0b:e0:fa:02:ab:12:1a:93:7c:07:b0:eb:
43:9f:05:86:8c:36:f2:e2:36:e1:5c:3a:80:9a:6b:fc:04:4c:
08:f6:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org