Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/HMCil0S8z9_1_CCMb2OtLPX2GOM.roa
File: HMCil0S8z9_1_CCMb2OtLPX2GOM.roa (raw, json)
Hash identifier: mX5UM2uSUXPjq3YUPF+cTh3CetIIkfTBTRsZkwQTYEk=
Subject key identifier: 1C:C0:A2:97:44:BC:CF:DF:F5:FC:20:8C:6F:63:AD:2C:F5:F6:18:E3
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 02C76BC8
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/HMCil0S8z9_1_CCMb2OtLPX2GOM.roa
Signing time: Sat 01 Jan 2022 06:05:57 +0000
ROA not before: Sat 01 Jan 2022 06:05:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212832
IP address blocks: 45.152.69.0/24 maxlen: 24
45.152.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46623688 (0x2c76bc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 1 06:05:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cc0a29744bccfdff5fc208c6f63ad2cf5f618e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:33:e5:b5:e3:20:55:32:1f:35:f6:41:e9:
4b:1d:6d:45:70:2a:96:93:f8:cb:0f:68:76:c6:82:
c9:2e:df:ae:0b:b8:f4:12:57:ae:35:f3:04:d8:a9:
6a:7e:8f:22:7d:c3:a8:fa:c4:d1:b2:05:50:2a:27:
96:d8:b0:93:a5:f5:b6:51:7c:ea:cb:82:45:ee:b2:
f1:66:e3:3b:21:e1:c3:5a:1c:bc:98:a7:80:b7:91:
e1:f0:5d:53:7a:09:d4:79:7b:bb:04:d2:7c:4b:b7:
64:4a:15:9a:cf:bd:e2:0f:c1:4f:0c:c0:ef:07:12:
1d:19:5f:a6:7e:c2:25:b7:fd:5e:5b:b7:37:19:d5:
dd:11:f4:c0:80:bf:4c:89:5a:24:de:00:b9:44:8c:
ba:eb:ab:3d:f3:e8:9e:a7:e2:89:c0:37:7c:c7:3f:
41:9f:ae:f0:8f:37:bc:41:f5:86:21:78:50:b1:35:
06:09:c7:47:9b:93:b5:88:7c:f9:89:fb:66:f3:b9:
bd:67:01:81:51:d7:10:b1:73:27:8f:8f:97:ef:c1:
a4:c4:dd:66:1b:45:af:9f:9f:8b:9b:68:02:67:7b:
ab:ac:40:77:90:85:75:3e:58:95:cd:cf:ef:ee:48:
ee:1c:e8:34:65:56:7f:19:2c:df:42:24:f4:68:cb:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C0:A2:97:44:BC:CF:DF:F5:FC:20:8C:6F:63:AD:2C:F5:F6:18:E3
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/HMCil0S8z9_1_CCMb2OtLPX2GOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.69.0/24
45.152.71.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e5:48:a4:9f:c5:93:33:17:48:0f:ad:17:71:95:6f:3f:bc:
4f:ee:20:3d:3b:b1:b9:ff:43:01:67:4e:d1:7b:de:ad:92:be:
d5:14:9e:63:0c:06:25:ce:1f:82:5f:ed:f0:ad:bf:2b:68:6f:
d2:03:bc:cd:9c:fc:ed:ca:03:3e:5a:fc:12:8d:2d:d7:4b:71:
2c:95:6a:94:25:9f:5f:23:36:65:74:7a:1a:53:78:78:39:b8:
d1:77:34:33:cc:ad:03:3f:4f:d9:38:14:2d:20:f7:c6:cc:20:
d8:b2:22:af:62:96:71:4e:87:48:d8:f7:de:19:12:19:54:28:
9d:13:75:34:ed:d7:a3:a7:83:98:59:7c:89:e3:6a:e8:8e:36:
dc:8b:37:a8:69:b0:73:c0:60:26:6a:43:35:4e:ab:89:a8:5b:
ab:7a:0c:fe:f8:02:e8:1c:b7:e4:ea:6f:4a:70:4d:d2:d9:5e:
9b:44:e5:32:fe:d0:2b:89:38:49:25:79:41:f9:28:ab:77:4d:
d0:c8:3a:51:fd:20:39:be:c4:24:69:91:a3:da:62:fa:c3:cd:
2c:fc:9a:af:19:34:9d:4f:e4:eb:ff:71:67:f1:a4:9c:e5:9a:
40:76:2c:76:98:ad:ab:b9:f7:f6:22:ab:c9:9f:93:38:32:91:
e4:b9:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org