Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HREmUtDa4gbAdph9jjzLpkGYGYA.roa
File: HREmUtDa4gbAdph9jjzLpkGYGYA.roa (raw, json)
Hash identifier: dPRZd7XlT9l/ac1yMcNDqsi19eb+odLM++sIWz2a5dg=
Subject key identifier: 1D:11:26:52:D0:DA:E2:06:C0:76:98:7D:8E:3C:CB:A6:41:98:19:80
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 033CF85B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HREmUtDa4gbAdph9jjzLpkGYGYA.roa
Signing time: Sat 01 Jan 2022 00:57:56 +0000
ROA not before: Sat 01 Jan 2022 00:57:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47720
IP address blocks: 45.140.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54327387 (0x33cf85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 00:57:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d112652d0dae206c076987d8e3ccba641981980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a7:0e:b8:41:36:04:2b:f8:4f:c4:8a:96:5f:
a1:12:14:1e:82:c3:d0:93:a7:1d:d4:49:35:64:98:
4d:88:2b:18:98:56:b6:61:30:64:d8:ab:8c:de:a1:
4f:d2:53:ea:76:0d:9d:89:e7:9d:11:2d:87:bb:b4:
df:71:72:06:a3:36:f5:b6:64:49:2c:ee:dd:c2:83:
c1:15:b3:d9:39:4c:39:3e:69:d9:8a:42:0c:d3:21:
ad:95:f2:8a:58:1f:0e:73:74:5a:7c:00:81:4a:4d:
c6:c0:60:5c:39:9f:e2:68:77:9d:e3:4b:d4:4e:d5:
df:0f:6e:cd:c4:66:8c:bd:96:bd:0f:ad:92:2b:c8:
27:0c:0e:d0:8b:59:8d:77:5f:f6:0f:68:d1:ef:f5:
80:f4:89:cd:23:f8:79:5d:24:6f:07:42:92:c4:08:
89:38:1a:19:78:bc:43:43:46:1b:81:e5:43:83:65:
bd:ff:23:cd:9e:4c:b9:1a:61:ff:8c:fa:2a:90:ba:
c0:1e:96:85:ea:64:3d:7c:7b:7a:08:59:65:38:de:
58:3d:eb:10:30:ae:b0:bf:b9:a1:27:7c:69:8f:b1:
4a:23:c6:c8:8d:7d:0f:2e:6b:e1:cf:73:22:d2:3d:
59:de:9f:8c:79:f4:7e:57:f5:b0:d9:a7:f4:3e:ed:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:26:52:D0:DA:E2:06:C0:76:98:7D:8E:3C:CB:A6:41:98:19:80
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HREmUtDa4gbAdph9jjzLpkGYGYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.144.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:f4:c9:3b:7d:9f:8c:93:73:13:30:8b:f6:ba:72:1a:9b:08:
f5:95:a8:b1:0d:14:0f:22:cc:75:fa:98:8d:de:57:b7:cc:17:
ec:11:e2:8e:14:f6:13:ad:4d:8a:14:41:19:ee:18:32:c8:62:
7a:2b:b3:a6:83:e5:1c:5e:2f:b8:61:1f:3c:b9:3d:cb:ce:f2:
4e:49:bd:e0:76:fe:df:0a:0b:f0:97:f6:3e:ef:31:b7:2a:90:
57:74:f8:67:93:a1:ba:ee:53:90:4d:ac:7b:b4:1d:df:cf:e8:
f8:5c:b2:56:08:9a:0c:b7:3c:52:5b:b7:18:25:fc:e5:40:58:
a4:88:e1:bf:28:04:fc:d7:9f:45:cd:fa:93:1b:0b:38:f7:e7:
4e:cc:08:ff:00:03:88:9e:71:5b:bb:8e:77:43:6f:46:6f:76:
cf:e9:17:9f:95:f0:70:a7:42:27:77:17:37:cb:f5:4a:fc:9e:
a8:e0:84:86:bb:8c:39:67:5f:bf:97:15:ce:cd:66:0c:bf:43:
8e:1d:9c:59:3d:bd:a0:fb:46:12:bd:ad:45:b2:e9:9f:d3:33:
fd:fc:48:ec:64:d5:17:db:ba:54:44:4d:2a:f9:83:e5:58:34:
4f:5b:04:38:ec:bd:34:11:78:b6:d8:6e:1c:a7:3d:c4:5d:02:
31:e4:a4:53
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAzz4WzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Zjg0MTEzNTQ1ZDkwMDA3NjBmNjYwNjJhNDIyMTkzM2EyZTk1OWQ4MB4XDTIyMDEw
MTAwNTc1NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQxMTI2NTJkMGRh
ZTIwNmMwNzY5ODdkOGUzY2NiYTY0MTk4MTk4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANynDrhBNgQr+E/EipZfoRIUHoLD0JOnHdRJNWSYTYgrGJhW
tmEwZNirjN6hT9JT6nYNnYnnnREth7u033FyBqM29bZkSSzu3cKDwRWz2TlMOT5p
2YpCDNMhrZXyilgfDnN0WnwAgUpNxsBgXDmf4mh3neNL1E7V3w9uzcRmjL2WvQ+t
kivIJwwO0ItZjXdf9g9o0e/1gPSJzSP4eV0kbwdCksQIiTgaGXi8Q0NGG4HlQ4Nl
vf8jzZ5MuRph/4z6KpC6wB6WhepkPXx7eghZZTjeWD3rEDCusL+5oSd8aY+xSiPG
yI19Dy5r4c9zItI9Wd6fjHn0flf1sNmn9D7t87MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdESZS0NriBsB2mH2OPMumQZgZgDAfBgNVHSMEGDAWgBS/hBE1RdkAB2D2
YGKkIhkzoulZ2DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Y0UVJOVVhaQUFkZzltQmlwQ0laTTZMcFdkZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjUvMzBkYzg1LTJkZDgtNGIxYy1iMTUxLTRiZDYzYWRjNzM1NC8x
L0hSRW1VdERhNGdiQWRwaDlqanpMcGtHWUdZQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjUv
MzBkYzg1LTJkZDgtNGIxYy1iMTUxLTRiZDYzYWRjNzM1NC8xL3Y0UVJOVVhaQUFk
ZzltQmlwQ0laTTZMcFdkZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2MkDANBgkqhkiG9w0BAQsFAAOC
AQEA1vTJO32fjJNzEzCL9rpyGpsI9ZWosQ0UDyLMdfqYjd5Xt8wX7BHijhT2E61N
ihRBGe4YMshieiuzpoPlHF4vuGEfPLk9y87yTkm94Hb+3woL8Jf2Pu8xtyqQV3T4
Z5Ohuu5TkE2se7Qd38/o+FyyVgiaDLc8Ulu3GCX85UBYpIjhvygE/NefRc36kxsL
OPfnTswI/wADiJ5xW7uOd0NvRm92z+kXn5XwcKdCJ3cXN8v1SvyeqOCEhruMOWdf
v5cVzs1mDL9Djh2cWT29oPtGEr2tRbLpn9Mz/fxI7GTVF9u6VERNKvmD5Vg0T1sE
OOy9NBF4tthuHKc9xF0CMeSkUw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org