Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HH_TuSxkxYvk13lFL1rgx6U8Td0.roa
File: HH_TuSxkxYvk13lFL1rgx6U8Td0.roa (raw, json)
Hash identifier: Lff6u+jbAYb0bsjHvVaKZQoqayLisIOWVIG4vqSYKUs=
Subject key identifier: 1C:7F:D3:B9:2C:64:C5:8B:E4:D7:79:45:2F:5A:E0:C7:A5:3C:4D:DD
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018235E090926F5909267C1551B8B32A00A9
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HH_TuSxkxYvk13lFL1rgx6U8Td0.roa
Signing time: Mon 25 Jul 2022 15:01:25 +0000
ROA not before: Mon 25 Jul 2022 15:01:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 45.150.67.0/24 maxlen: 32
45.140.146.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:e0:90:92:6f:59:09:26:7c:15:51:b8:b3:2a:00:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 25 15:01:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c7fd3b92c64c58be4d779452f5ae0c7a53c4ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:98:05:f3:23:50:39:47:32:1f:4c:8f:cf:
c7:4b:9f:f7:32:d6:3c:60:57:81:3a:bd:13:c5:0d:
8d:54:04:fa:36:fe:04:de:c5:a5:1c:57:49:b2:1f:
7d:e1:9a:c4:a0:47:9a:77:59:94:b9:bd:62:10:ed:
65:cf:bf:64:91:8c:7f:88:57:ae:22:b9:67:0e:bf:
8a:10:e3:f0:c9:04:51:27:c6:a6:74:58:0f:29:2a:
75:be:9b:11:c3:87:1c:d0:2d:6c:34:0c:16:a8:e7:
be:e5:70:81:85:38:8c:3f:85:59:fc:e6:dc:30:0e:
67:17:9b:1a:eb:b9:a5:df:b3:6c:d1:0c:19:1d:06:
7a:de:69:14:f3:31:bc:68:88:5e:bf:27:a0:9f:b5:
5f:84:02:f8:6f:8a:e0:81:c5:3c:de:50:a1:d9:85:
70:99:46:f0:4b:0b:68:94:54:ec:24:85:d4:50:03:
84:4d:a5:30:9f:70:db:8b:2a:cb:f9:74:02:24:68:
ef:2c:9e:29:fd:87:5a:7e:56:12:c8:23:d2:55:fc:
45:a0:89:40:93:41:68:0a:1d:7e:db:4e:65:45:28:
ac:5f:0d:5c:ad:d4:9e:7d:01:5a:d5:c4:b2:a0:d8:
d8:9e:75:60:bf:7c:3b:19:7e:4d:40:28:65:25:6f:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7F:D3:B9:2C:64:C5:8B:E4:D7:79:45:2F:5A:E0:C7:A5:3C:4D:DD
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HH_TuSxkxYvk13lFL1rgx6U8Td0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.146.0/24
45.150.67.0/24
Signature Algorithm: sha256WithRSAEncryption
58:b8:bb:42:76:7e:18:ed:da:b2:e2:c8:45:2f:2b:2c:e7:61:
53:b5:39:d3:30:de:9a:98:1a:0f:f1:57:8a:ee:c0:78:cf:37:
3b:ec:39:b9:2c:b5:22:a8:66:f3:bd:15:21:15:d0:14:4a:b8:
f0:60:a3:c9:96:47:c9:b5:8d:95:26:89:cf:b2:04:d2:fa:c9:
41:dd:da:38:06:04:58:a0:56:a1:3b:20:16:3d:e3:7d:3f:1b:
5a:32:0f:d9:8f:32:f3:f9:88:e0:9a:8b:ca:05:c6:a5:34:67:
8f:2b:c1:da:1a:6a:13:01:37:a3:54:1f:2e:0f:b7:c9:fe:a4:
15:a4:69:f5:41:74:31:38:2e:58:2d:0c:46:fd:c3:c1:76:c9:
32:7b:e9:e3:13:50:98:39:ff:95:4a:6d:ea:dd:a4:74:c2:d0:
81:b0:86:c8:41:31:cc:85:b1:35:b7:ea:97:96:c4:2e:de:02:
0e:6d:e9:d7:4a:40:aa:68:66:24:60:e9:ae:c3:e2:aa:b8:c6:
23:41:4b:f5:25:fe:c4:c2:a5:64:c6:d8:c9:fd:ce:5d:c8:6d:
84:cb:a0:00:8d:26:2e:bb:2b:d7:23:4a:98:a2:36:62:b5:26:
d3:65:76:9e:5c:0e:12:9d:6e:b2:f5:9e:49:5a:b5:7b:2f:0a:
fe:63:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:11 2023 by rpki-client on console-ams.rpki-client.org