Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/XHUcvxvba0zNAIGUQwHbLpgUGf8.roa
File: XHUcvxvba0zNAIGUQwHbLpgUGf8.roa (raw, json)
Hash identifier: HDHAwbSGyqlBXrPASGfVkFUwZ8v3h/yAsCiCfNjicPs=
Subject key identifier: 5C:75:1C:BF:1B:DB:6B:4C:CD:00:81:94:43:01:DB:2E:98:14:19:FF
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018416DC48A1B3E80FAC4A1A96C1D42C0A6D
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/XHUcvxvba0zNAIGUQwHbLpgUGf8.roa
Signing time: Thu 27 Oct 2022 00:34:06 +0000
ROA not before: Thu 27 Oct 2022 00:34:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:16:dc:48:a1:b3:e8:0f:ac:4a:1a:96:c1:d4:2c:0a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Oct 27 00:34:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c751cbf1bdb6b4ccd0081944301db2e981419ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:f9:69:42:36:44:94:d4:d5:c2:33:40:b0:
d3:f0:b5:77:3e:c8:a0:e3:0a:4d:d0:8b:ad:46:b2:
93:20:79:89:f6:41:6c:ad:24:0c:48:6f:86:a2:8e:
b3:d0:b0:f1:e0:c8:28:6a:3a:a5:ed:6b:eb:a1:1a:
34:23:8c:5f:2e:69:74:56:8d:7d:41:b8:7c:5f:47:
ba:76:a5:f4:42:37:8e:b6:94:d1:41:69:d5:06:dd:
37:8b:5b:21:80:14:71:2e:81:ba:22:2a:af:09:95:
8f:34:5e:05:41:ad:af:d2:a3:76:68:fc:6c:50:10:
bb:a7:3d:b3:b6:be:d0:66:45:99:a7:ea:ad:a6:9f:
86:02:d3:7d:9d:1d:ac:57:1d:96:e2:fa:05:c3:ad:
e3:bd:3e:ab:2c:d3:2b:e3:a2:89:81:4b:42:d3:47:
a3:b4:80:85:4e:48:14:b4:9d:5c:84:91:ab:57:cd:
f3:8c:d8:43:f2:41:2e:5f:ae:0b:98:b2:7a:b5:86:
94:a8:8e:84:08:c4:ad:c3:92:40:87:15:42:29:c4:
99:22:91:55:a5:f7:a8:9e:f5:70:5a:7b:c0:85:dc:
fb:5a:8a:3c:aa:de:dd:04:d6:cc:51:96:94:9c:b4:
c8:fc:06:6b:7d:1e:19:aa:b9:0a:0e:76:8b:eb:06:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:1C:BF:1B:DB:6B:4C:CD:00:81:94:43:01:DB:2E:98:14:19:FF
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/XHUcvxvba0zNAIGUQwHbLpgUGf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
06:53:f2:e6:d8:4d:74:70:2c:07:2c:ac:02:cc:8a:db:19:c4:
5f:88:76:a1:3e:08:b2:9b:68:4e:6b:96:25:e8:ba:2e:e9:8b:
93:62:d9:c0:2c:51:da:5a:db:f6:7b:b1:03:5b:1a:ae:65:21:
01:95:c4:64:1f:66:d2:7f:84:6e:a5:f6:50:46:86:8f:e1:8e:
86:10:df:07:88:1d:45:be:9c:09:e7:6a:10:de:05:66:27:e8:
b1:87:e1:00:f5:d2:08:44:6a:b5:2a:4d:76:73:88:8c:bb:29:
e4:b5:02:89:54:df:21:cf:20:f1:d6:f0:1c:08:0d:69:14:30:
0b:35:60:69:0b:8e:8e:99:57:26:55:00:ba:fe:35:12:0d:33:
c4:58:45:13:c0:ed:47:c3:a2:13:36:09:fd:09:5a:51:e2:41:
0c:e0:15:7d:82:ec:ba:e3:e8:0f:a9:7a:77:28:06:21:68:c3:
4d:3c:92:69:33:b7:fe:4d:a2:2e:a2:c1:79:0f:cc:f3:88:87:
2b:3a:91:73:9d:e0:91:eb:a4:83:1b:c6:f7:cc:c2:fe:28:16:
88:44:f7:ad:e7:6d:64:ca:80:d3:d8:62:90:b8:46:c0:6f:e1:
86:aa:f4:7d:79:d3:61:e4:fa:1d:11:07:4b:f4:be:a2:87:9f:
e2:d8:ce:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org