Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Hnu_cjGl06esaGy-LeN1KB_7qHg.roa
File: Hnu_cjGl06esaGy-LeN1KB_7qHg.roa (raw, json)
Hash identifier: v51BYVfDMv2OcJsFYgXbgXfvAD20SoIMib1mA4+hces=
Subject key identifier: 1E:7B:BF:72:31:A5:D3:A7:AC:68:6C:BE:2D:E3:75:28:1F:FB:A8:78
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 14D6D857
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Hnu_cjGl06esaGy-LeN1KB_7qHg.roa
Signing time: Tue 26 Apr 2022 16:56:40 +0000
ROA not before: Tue 26 Apr 2022 16:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19120
IP address blocks: 5.180.4.0/22 maxlen: 22
45.145.40.0/22 maxlen: 22
2.59.204.0/22 maxlen: 22
185.115.92.0/22 maxlen: 22
2.57.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349624407 (0x14d6d857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Apr 26 16:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e7bbf7231a5d3a7ac686cbe2de375281ffba878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:fc:aa:c3:f8:11:00:8e:d4:33:36:36:a7:
0f:4e:5b:6b:05:13:aa:f4:12:a5:d2:87:c3:c9:3d:
41:b9:a5:7b:f7:e6:1b:44:28:82:85:93:d1:d5:13:
15:33:09:58:0f:0c:1a:22:1d:64:f6:69:7b:65:e3:
1f:5d:c7:39:21:e7:94:6d:27:79:00:a7:67:a2:7b:
f3:24:7c:d7:37:d7:32:b4:d3:d1:c3:02:af:e2:e1:
41:20:b9:56:85:4b:cb:cb:d5:c7:cf:ab:0f:d3:2f:
f4:fc:9b:de:6c:0f:ff:a2:e7:7c:2a:f4:95:97:d8:
58:87:7c:8b:f0:ab:be:c7:73:1c:c4:fd:3e:e4:b8:
11:c7:6f:f3:39:83:ba:5b:18:bf:a0:e0:40:19:39:
48:c8:8e:09:6e:30:b5:c6:af:06:d9:0a:b0:35:c4:
c6:41:4e:a2:77:13:51:ec:32:e3:c9:4f:20:81:2f:
5b:b6:fb:a3:ee:51:cf:f3:fc:38:eb:20:0e:a9:d9:
89:70:1e:66:db:41:db:51:98:57:8a:f1:75:ad:2b:
0d:fc:97:0c:c0:fa:07:0b:7c:b2:48:4f:99:28:75:
c4:15:78:59:5f:53:4e:ef:8f:1f:5d:89:2a:7d:1a:
3a:9a:df:fa:46:9c:ec:3a:4c:7d:96:f8:36:cd:ea:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:BF:72:31:A5:D3:A7:AC:68:6C:BE:2D:E3:75:28:1F:FB:A8:78
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Hnu_cjGl06esaGy-LeN1KB_7qHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.212.0/22
2.59.204.0/22
5.180.4.0/22
45.145.40.0/22
185.115.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:44:60:5e:7b:84:06:d0:26:bb:e9:ad:c2:b7:f8:e3:95:be:
ac:3d:f1:33:81:3e:00:c7:93:39:21:5f:5d:87:a3:e7:2f:62:
5f:4c:07:61:5c:af:84:fa:23:d9:fc:b4:f6:e1:f6:a2:64:3d:
46:8a:21:ad:f4:eb:dd:a2:3d:0f:2f:3a:bc:b4:84:22:49:ad:
c3:26:03:9e:a2:f3:5e:0f:dd:8a:95:60:4c:71:a9:33:d7:d3:
cf:a1:80:c5:23:83:c7:e1:1d:63:9b:b4:ad:59:b4:c9:fa:f6:
df:f9:01:09:af:7e:62:30:c2:5a:ff:9e:d4:5b:8b:ed:33:bb:
bf:f2:a6:fe:dc:da:50:82:08:d0:85:f0:5f:05:56:28:d2:8a:
8a:6d:28:45:a5:8e:a4:aa:f9:b0:18:31:6f:ec:bc:5e:66:c7:
12:27:a7:d3:aa:17:a0:b2:1d:87:96:7e:30:64:19:ef:a8:62:
9c:7d:80:c6:6d:2b:12:2e:78:30:4a:47:8c:ef:a1:83:50:9f:
61:92:3b:d2:23:ee:c4:b9:1a:9a:b0:f6:ce:10:e7:5a:23:be:
3a:2c:7c:87:c2:63:b1:d9:61:25:5f:78:63:39:1d:10:89:26:
ad:c4:ad:bf:a8:63:94:24:0d:fb:58:23:ce:fc:ca:0f:41:54:
e1:2e:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org