Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Hv-CUcD-w_69krVxeaQQj3mI_rI.roa
File: Hv-CUcD-w_69krVxeaQQj3mI_rI.roa (raw, json)
Hash identifier: +arajxThyQYZjx0LLlcNcdDeHz2YxTo+vNWUeRSFNZI=
Subject key identifier: 1E:FF:82:51:C0:FE:C3:FE:BD:92:B5:71:79:A4:10:8F:79:88:FE:B2
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018356A61D77313CF4F7E2570698E6291E6C
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Hv-CUcD-w_69krVxeaQQj3mI_rI.roa
Signing time: Mon 19 Sep 2022 16:47:50 +0000
ROA not before: Mon 19 Sep 2022 16:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 45.150.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:a6:1d:77:31:3c:f4:f7:e2:57:06:98:e6:29:1e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 19 16:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eff8251c0fec3febd92b57179a4108f7988feb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:54:c3:d5:ef:f9:f2:5f:47:34:62:c6:af:d4:
48:a0:56:12:79:4e:04:50:39:70:66:d7:87:bc:02:
df:af:d2:11:0d:7e:f7:75:9f:52:8d:1f:ad:e4:2c:
7a:00:4c:9b:d9:e9:9b:e4:e8:9a:e3:99:a1:f1:c6:
14:06:f0:34:ba:0f:f7:14:23:98:3c:01:fb:5b:76:
53:dd:21:71:5b:e0:e4:62:2c:24:52:d7:5c:4c:36:
4e:47:3e:47:40:56:c7:c5:bc:5c:0d:4a:c5:e2:9f:
88:1d:6c:be:7f:23:19:e5:d8:b1:0c:b1:44:8e:fb:
b4:6d:51:55:7d:1c:d5:04:61:af:6d:72:19:15:7d:
e0:5d:a9:07:d0:af:fa:04:dd:e7:52:70:5d:ac:aa:
72:26:7b:1e:8d:56:f0:bc:85:c9:b0:5b:87:21:c1:
76:ec:04:74:01:a8:40:50:88:fe:dc:34:6b:32:63:
31:34:90:ac:2f:be:2c:ae:81:64:b1:83:b7:c8:ad:
e6:96:3a:f8:69:39:f4:9b:c5:4b:8e:2d:6e:23:a6:
13:52:8f:e8:10:66:e2:d8:6b:49:44:4e:90:8a:64:
85:85:34:40:95:86:05:fd:46:95:52:20:0f:f2:5c:
c1:63:db:95:6d:b0:8c:96:d2:82:22:3c:52:4e:4c:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FF:82:51:C0:FE:C3:FE:BD:92:B5:71:79:A4:10:8F:79:88:FE:B2
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Hv-CUcD-w_69krVxeaQQj3mI_rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
Signature Algorithm: sha256WithRSAEncryption
79:78:17:0a:ba:93:74:5a:f2:29:53:c8:c0:b0:79:94:c2:74:
de:e4:1a:b4:f3:ed:c5:b3:d8:39:03:ff:d5:ed:9d:46:81:6f:
94:2c:ff:16:8a:21:ea:9a:c8:48:76:68:0a:b2:77:e4:2c:a8:
0d:b5:9f:8b:98:ef:b1:64:1f:9f:03:f7:30:f8:41:bc:e6:2b:
30:c8:9b:e7:99:e2:18:44:bc:fa:1a:d1:a8:a5:b8:ec:03:4e:
cc:0a:d8:b6:20:40:33:62:eb:4b:1b:ba:d5:49:d2:59:a0:82:
35:77:dd:21:64:f4:f3:a9:3e:2c:cd:df:86:d5:ec:70:81:2a:
6f:4f:51:0b:65:69:d6:d2:34:a7:51:a3:6a:28:b8:c4:1b:e4:
15:0f:8f:80:4b:5d:cc:ee:aa:ac:8a:6f:93:8c:72:e8:2d:10:
78:82:aa:c7:9c:ef:a3:1f:db:f7:b2:d1:df:83:b3:15:3e:1a:
5d:d9:6a:82:a9:f0:ce:01:ce:27:bd:16:8f:7f:85:52:00:73:
67:98:c7:ef:b7:cb:e9:f1:d9:10:99:25:0c:1b:82:ba:1c:6f:
3d:4f:be:9f:04:2a:1c:1d:e6:fc:c1:8e:73:f6:f1:b1:d7:2b:
c3:dd:c0:d7:01:98:4f:8d:b2:dd:7d:87:35:59:9b:f3:17:47:
80:d4:98:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org