Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hyps-ETZozc2DusgORbg5s1uuD0.roa
File: hyps-ETZozc2DusgORbg5s1uuD0.roa (raw, json)
Hash identifier: F8o5Eqwz3b/gzWePLo7+JD/au/ZvcFJTBqCpMJg/XDE=
Subject key identifier: 87:2A:6C:F8:44:D9:A3:37:36:0E:EB:20:39:16:E0:E6:CD:6E:B8:3D
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 1685D8ED
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hyps-ETZozc2DusgORbg5s1uuD0.roa
Signing time: Sat 01 Jan 2022 06:01:54 +0000
ROA not before: Sat 01 Jan 2022 06:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.84.240.0/22 maxlen: 24
62.56.208.0/21 maxlen: 24
213.170.145.0/24 maxlen: 24
185.104.12.0/22 maxlen: 24
85.208.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 377870573 (0x1685d8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 06:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=872a6cf844d9a337360eeb203916e0e6cd6eb83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:07:f4:1c:4c:18:a9:14:98:6a:67:99:dc:
0b:41:ef:47:8b:b7:e5:a1:76:5f:67:d0:c7:2b:a6:
63:b3:c3:eb:b2:4e:2e:70:63:95:a1:1b:b8:a3:c0:
a9:3e:f4:01:dc:78:43:f3:50:1d:6c:5b:b5:19:56:
82:fa:db:54:67:d4:62:ef:9e:68:a3:53:af:6c:ae:
ed:3d:72:e9:70:d7:43:d8:40:92:d1:72:d2:8f:ae:
4d:2e:42:00:1b:48:42:d3:da:51:b3:c8:17:cb:48:
03:9c:9e:64:6a:23:50:49:5e:74:67:b8:b4:4d:12:
8c:c9:88:3a:6f:e6:6f:43:c5:6a:a0:ec:52:a8:aa:
05:13:d1:93:4b:d8:be:1b:0b:29:00:d7:da:8e:47:
d7:85:38:0a:da:e2:4d:ac:df:32:d9:95:63:a7:95:
50:8f:35:0c:62:f2:ad:3b:4d:bd:0c:ab:01:4e:b5:
25:2b:54:30:d6:f9:02:ed:ae:04:94:a1:92:6a:78:
c0:da:86:aa:23:d6:c6:14:fb:21:24:80:25:9b:5d:
96:72:6d:21:82:54:d7:af:f1:65:59:fc:17:75:e4:
53:d6:69:11:95:8b:f1:bd:50:09:d5:4d:26:f6:06:
a0:d2:b8:ac:19:e1:f0:cd:9e:c3:8f:27:29:0c:91:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2A:6C:F8:44:D9:A3:37:36:0E:EB:20:39:16:E0:E6:CD:6E:B8:3D
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hyps-ETZozc2DusgORbg5s1uuD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/22
62.56.208.0/21
85.208.44.0/22
185.104.12.0/22
213.170.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2e:17:33:39:6b:ba:a9:5a:16:ef:88:ad:95:5e:5f:b8:82:
68:e9:c4:8f:22:af:c0:68:dd:67:ac:2c:cb:9a:a2:52:aa:2e:
11:e5:44:97:e1:2f:74:03:a5:cc:bd:66:04:10:3f:a4:46:82:
2e:b5:fe:67:fe:4c:b4:c3:42:5b:ff:a3:e1:59:4b:0b:59:24:
6e:5e:c2:15:27:40:22:c1:b5:4b:e3:11:b6:70:0f:3a:78:e7:
75:ed:ed:08:1b:75:2e:77:38:d3:15:41:92:a3:91:08:a5:71:
b2:69:43:2a:be:00:b1:5d:31:f6:ae:5f:a8:a6:dd:2c:e4:8c:
33:63:b8:79:cb:15:63:bf:19:3e:74:4c:63:7b:b7:33:bc:db:
f9:90:58:3d:46:b2:14:2a:10:be:c5:73:d7:86:74:1d:f0:b3:
20:53:cc:0b:0f:69:4b:39:52:de:d5:7e:24:27:d9:ba:26:75:
a6:d7:3c:df:cc:ed:ec:5d:99:38:76:92:31:6a:59:81:e1:60:
50:8d:f6:b3:a6:84:00:ad:0e:df:53:5c:8f:a4:5f:73:e5:dc:
f0:be:36:15:70:6d:5e:72:66:56:e8:1b:b9:ee:8d:3d:24:c1:
c9:01:3f:05:c1:76:9b:48:ff:b2:61:1a:f9:61:c2:f9:86:bd:
3d:d9:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:24 2024 by rpki-client on console-fra.rpki-client.org