Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/htEB-upY6vKdgp-txp7S8G5xzqg.roa
File: htEB-upY6vKdgp-txp7S8G5xzqg.roa (raw, json)
Hash identifier: HVjuzPhfY50Cm+ffY6yUGky6o9/GHbdxh4YYKFllQwc=
Subject key identifier: 86:D1:01:FA:EA:58:EA:F2:9D:82:9F:AD:C6:9E:D2:F0:6E:71:CE:A8
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 02FD5201
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/htEB-upY6vKdgp-txp7S8G5xzqg.roa
Signing time: Sat 01 Jan 2022 09:01:29 +0000
ROA not before: Sat 01 Jan 2022 09:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.252.0/24 maxlen: 24
45.81.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50156033 (0x2fd5201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 09:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86d101faea58eaf29d829fadc69ed2f06e71cea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:3e:37:79:a2:8c:7a:80:8f:2a:4e:12:f2:
28:1c:a6:13:03:ed:65:d8:39:db:b4:20:f4:b0:af:
d7:39:60:d1:ce:04:57:f9:3d:b7:35:2f:95:a6:e1:
86:34:9e:ba:8d:40:74:39:3a:b6:a0:30:43:ba:c2:
bb:46:9e:0b:55:c6:08:e9:2b:8b:78:e2:a2:fa:ef:
9f:5d:58:4f:da:53:ae:01:e5:91:4e:40:b8:e5:a9:
03:8a:cb:87:70:79:84:85:8e:ec:fd:3a:a1:6e:c5:
be:c2:b8:11:83:07:d7:ac:28:f1:1e:b2:a5:4d:7e:
bf:9c:fa:de:af:9f:dc:38:cf:bb:66:9a:70:d5:0e:
29:77:f0:6a:9d:35:04:7b:3b:e3:9d:69:37:6e:e3:
da:1d:5a:71:07:22:e3:0b:06:4e:a3:52:53:08:3e:
16:a9:0c:3e:8e:9b:79:23:b5:73:ba:29:4e:6e:40:
02:6b:10:61:fc:20:22:84:c8:60:ab:c4:ce:61:d8:
b2:0d:1f:86:69:41:12:0f:43:2e:ef:ee:26:8f:b1:
da:24:8b:1a:26:9a:09:5e:31:12:bf:69:c9:56:29:
5f:08:55:bc:34:54:b1:38:7f:df:ce:3e:7a:6e:b6:
34:50:03:8b:40:a3:02:ac:a7:9d:37:4d:b1:88:5e:
14:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D1:01:FA:EA:58:EA:F2:9D:82:9F:AD:C6:9E:D2:F0:6E:71:CE:A8
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/htEB-upY6vKdgp-txp7S8G5xzqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.252.0/24
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:44:28:ac:a3:e8:58:85:f0:18:3f:57:44:96:73:11:09:93:
aa:61:0d:9e:48:52:d8:37:1b:04:ec:57:09:ca:81:7b:77:8a:
c6:44:08:45:63:dc:cd:3b:de:22:71:8e:1c:1d:09:08:b1:3c:
48:1e:6e:51:79:79:ba:ae:04:62:05:ab:9d:37:7c:4a:57:70:
31:0a:8d:a6:0d:eb:2d:0c:7f:8a:91:0d:69:12:69:6b:c5:83:
01:f6:0c:2a:e5:56:a8:38:f1:62:68:13:6d:9f:ea:c3:7d:bb:
66:cc:72:84:0e:58:cd:60:fe:59:d6:5b:98:1d:3c:17:f3:e1:
ba:6b:7e:0e:8f:8d:db:1e:87:d4:f0:e9:76:7b:c8:7d:d3:32:
49:53:b7:47:8c:e3:e6:b3:4e:3f:b6:4b:20:c8:98:87:4b:e0:
06:16:2d:6c:5e:5c:af:44:70:3b:15:82:c6:5e:08:35:06:74:
8d:d7:e8:7a:ae:4e:91:31:36:d3:76:b4:2b:24:7c:69:80:3f:
d4:af:ea:90:47:40:96:5e:56:5f:65:ae:dd:10:b7:7b:84:e6:
1f:c5:32:fe:1f:ed:4f:f4:71:41:c6:ae:d8:b4:e8:58:f9:2f:
52:1a:ee:e5:b0:00:f2:c0:ac:0b:de:9d:9e:5d:a7:5e:99:57:
0f:4f:68:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org