Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/wHjjO2qWadt5wyAiAc1hITOM_hk.roa
File: wHjjO2qWadt5wyAiAc1hITOM_hk.roa (raw, json)
Hash identifier: 7SGf3xieS0z2t/mTU2nJ3Wfu9aQ0//u+YxuF5Rt+ZPQ=
Subject key identifier: C0:78:E3:3B:6A:96:69:DB:79:C3:20:22:01:CD:61:21:33:8C:FE:19
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 02FC0237
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/wHjjO2qWadt5wyAiAc1hITOM_hk.roa
Signing time: Sat 01 Jan 2022 09:01:29 +0000
ROA not before: Sat 01 Jan 2022 09:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50070071 (0x2fc0237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 09:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c078e33b6a9669db79c3202201cd6121338cfe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:d2:4a:e0:0d:2d:82:97:76:99:ab:3c:f6:
87:f9:04:38:c6:3c:43:09:bd:cd:14:df:2b:ef:b6:
85:df:74:85:4e:f8:ef:c7:f6:db:03:85:5a:ba:d1:
58:0a:86:c5:f7:a6:f8:cd:66:e5:36:0a:87:af:68:
81:2a:c2:6a:52:86:e6:fa:92:78:e6:15:1d:7b:ab:
23:5c:47:05:5c:3e:04:4f:fc:a2:95:d2:68:d5:4b:
09:58:fe:8e:55:cf:24:ba:19:65:96:93:80:84:ba:
2b:75:1e:45:a9:4f:10:e1:86:d6:8a:6d:94:1f:d7:
d8:b2:1e:74:4d:59:61:2e:42:86:9c:ac:af:aa:d6:
ee:05:bb:2d:0d:54:45:11:7d:e4:1d:53:0d:a0:6a:
cb:4a:10:4a:07:51:61:92:ca:8f:1c:75:9d:50:f9:
9a:5a:65:71:bc:3e:8e:f9:ff:c9:d5:c0:ad:1e:58:
ae:90:ce:fa:dc:56:a2:52:a3:5c:cf:42:f3:e0:28:
73:81:9c:f7:f9:94:b7:d5:5b:f5:6d:0e:93:d0:9c:
d0:9e:ac:2f:72:ac:20:c2:cd:fa:8c:5a:42:d0:6f:
58:32:8d:82:cf:bd:9e:ca:74:3e:df:b0:fb:29:51:
84:e8:c7:5e:95:f1:9c:68:dd:5d:8c:c3:55:1d:fd:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:E3:3B:6A:96:69:DB:79:C3:20:22:01:CD:61:21:33:8C:FE:19
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/wHjjO2qWadt5wyAiAc1hITOM_hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
75:da:41:c3:8c:c8:0c:1c:9c:25:a4:33:f2:a9:b8:3c:94:da:
54:68:32:8f:ce:30:0b:73:d3:be:a2:39:6c:18:cd:26:67:7e:
81:a6:44:1a:72:b3:d8:40:c0:53:01:59:f2:7b:a0:53:7e:5f:
87:70:2e:91:ee:e0:cb:42:17:a5:63:8b:8b:05:94:01:4f:11:
2d:9c:c8:d4:d8:c0:eb:73:7b:b5:78:cb:dd:fa:b7:7d:34:8e:
f3:4f:f3:03:f8:23:60:2d:ff:2b:59:d2:2b:f5:76:9e:c3:33:
5b:90:56:97:bb:bd:7e:c2:e6:0a:c6:79:7f:4b:61:d1:45:4a:
aa:30:85:e5:28:19:05:9e:b9:0d:c8:7e:c5:0a:80:94:90:43:
bf:f3:22:f7:29:ff:9b:f2:5e:1f:ce:9b:ed:ef:b2:99:6c:81:
9b:0e:65:c5:78:b8:25:91:14:d6:85:90:40:6c:37:b7:01:de:
c2:2c:17:b9:3e:66:43:ec:22:b5:d4:79:42:c9:43:59:a7:fe:
a4:b2:a9:a0:d0:d3:49:38:84:55:18:5d:31:2a:de:38:15:d2:
6c:19:c2:f5:5d:2c:e0:37:6e:b8:cf:66:83:81:9b:ef:16:99:
df:1b:9a:34:5c:be:9a:65:fe:cf:1c:36:7e:07:23:81:d3:c4:
71:74:b1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org