Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/Hv_upFJH2YdCfagAFPVAUHfCZfU.roa
File: Hv_upFJH2YdCfagAFPVAUHfCZfU.roa (raw, json)
Hash identifier: PoOWyKqY9I31QTwDvqhuKUUTWiI0V7mIiIrWhxERn24=
Subject key identifier: 1E:FF:EE:A4:52:47:D9:87:42:7D:A8:00:14:F5:40:50:77:C2:65:F5
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 089C81A4
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/Hv_upFJH2YdCfagAFPVAUHfCZfU.roa
Signing time: Sat 01 Jan 2022 09:04:26 +0000
ROA not before: Sat 01 Jan 2022 09:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207054
IP address blocks: 45.15.92.0/22 maxlen: 22
185.167.112.0/22 maxlen: 22
185.231.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144474532 (0x89c81a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Jan 1 09:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1effeea45247d987427da80014f5405077c265f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:df:06:e3:c0:6c:45:42:26:d2:97:d4:de:
43:79:fe:f8:2c:bb:67:06:93:70:99:46:29:dc:34:
1f:3e:73:bf:32:36:f8:7d:ac:2d:d9:78:ed:b6:b9:
05:45:33:85:08:e9:b0:84:4a:f1:13:b3:88:84:2c:
2e:5e:ab:69:b7:f6:1d:4d:a8:69:96:ce:17:12:82:
53:02:85:d4:9d:f2:de:4e:f6:fb:80:53:ed:b5:7f:
5d:37:5e:6c:1c:50:4c:66:b8:b5:7e:86:84:78:51:
18:31:5f:23:89:cf:fc:b5:b4:08:bc:79:4c:bc:3c:
ef:ed:4d:4b:ae:b7:34:15:71:17:04:cc:d1:6b:e2:
86:f9:32:25:7a:9d:83:c2:92:d0:45:b1:7c:f1:45:
15:fb:4e:95:3e:d9:6f:92:01:d5:16:dd:51:96:4a:
6b:cf:ec:d8:2b:a9:46:7b:6c:4c:f1:b9:84:91:d1:
a1:de:e1:43:db:80:51:fc:d3:3b:7c:57:a7:0f:51:
0d:76:43:8d:b5:dc:e4:c0:1a:9c:d3:09:79:89:c0:
0a:9c:fb:6f:32:81:67:84:07:f3:d0:4e:7f:42:33:
84:3a:00:9f:67:d4:91:31:77:fc:a8:5c:0f:5e:06:
b9:0b:30:83:db:c7:8c:8b:17:e0:ca:64:d0:be:77:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:EE:A4:52:47:D9:87:42:7D:A8:00:14:F5:40:50:77:C2:65:F5
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/Hv_upFJH2YdCfagAFPVAUHfCZfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.92.0/22
185.167.112.0/22
185.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:c3:22:bf:4d:ea:dd:dc:90:f1:96:dd:50:79:ca:1d:7e:81:
71:90:ba:c5:4c:3f:3d:f3:42:63:11:d8:41:58:e7:5e:bf:0e:
7c:4a:ab:cc:39:8f:89:4c:10:36:53:ac:30:1b:bf:5d:a7:9a:
6a:c5:08:8d:9c:a7:0d:d2:24:8f:18:01:e3:88:b2:a9:b7:0a:
f3:e8:d7:1c:ff:1b:42:a4:92:6e:e5:c9:eb:43:8b:b0:24:15:
5c:55:c7:52:d1:4e:37:f6:33:23:01:48:12:5c:b3:c1:40:f5:
8a:0e:d9:cc:14:42:75:79:51:c8:a1:6c:9a:92:37:dc:a6:4d:
ed:49:19:f0:15:40:e6:7d:aa:91:fe:39:53:fa:40:21:5a:fa:
a0:30:0f:d7:13:73:84:0b:4e:39:aa:c9:91:63:a2:9f:3e:b6:
17:cc:82:a8:0a:1e:3b:86:3f:9c:66:44:3d:53:48:3d:82:03:
57:7f:0e:e8:2a:5e:34:52:a8:3c:7d:2e:b1:c9:4d:ee:85:2d:
d8:a0:26:ed:f5:4a:d2:d3:75:d1:f8:14:9b:dd:b3:ed:31:e8:
b4:98:09:e0:39:ea:c1:1b:5a:c1:27:ec:f5:5c:87:61:2a:3c:
60:85:4a:d7:4a:1c:2a:cc:bf:d6:a6:f1:0b:2b:51:35:27:01:
9a:8a:46:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org