Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1hqh4tNYykdeFJz-hgzAa4DPt8k.roa
File: 1hqh4tNYykdeFJz-hgzAa4DPt8k.roa (raw, json)
Hash identifier: h4xLTHRHZ0aeIgYdsf8Da5TgSQ9V5fTs57UBoEzbdEg=
Subject key identifier: D6:1A:A1:E2:D3:58:CA:47:5E:14:9C:FE:86:0C:C0:6B:80:CF:B7:C9
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 098EF60E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1hqh4tNYykdeFJz-hgzAa4DPt8k.roa
Signing time: Sat 01 Jan 2022 05:04:03 +0000
ROA not before: Sat 01 Jan 2022 05:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48427
IP address blocks: 5.154.56.0/24 maxlen: 24
5.154.56.0/22 maxlen: 22
5.154.57.0/24 maxlen: 24
109.167.92.0/23 maxlen: 23
109.167.92.0/24 maxlen: 24
84.232.55.0/24 maxlen: 24
109.167.93.0/24 maxlen: 24
93.114.253.0/24 maxlen: 24
93.114.252.0/24 maxlen: 24
93.114.252.0/23 maxlen: 23
109.167.58.0/23 maxlen: 23
109.167.58.0/24 maxlen: 24
109.167.64.0/23 maxlen: 23
109.167.64.0/24 maxlen: 24
109.167.59.0/24 maxlen: 24
109.167.65.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160364046 (0x98ef60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 1 05:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d61aa1e2d358ca475e149cfe860cc06b80cfb7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:bf:b4:69:97:4f:bf:c5:0e:fe:ca:3f:1b:
80:72:2a:45:ba:f5:f5:b5:91:a5:c5:7f:50:2d:9e:
5e:2e:c6:a2:a5:b9:d2:c0:05:80:0d:bf:12:e9:a0:
a1:97:30:74:5b:32:6b:97:c2:f1:99:d8:29:8d:81:
c1:b1:05:23:90:8f:f3:0d:92:f7:1a:13:00:a9:38:
d8:fb:fd:b2:ba:5a:f2:3c:12:13:ad:ad:b3:62:78:
7a:36:3d:11:a4:c6:2f:ea:05:2c:6d:bd:08:c5:07:
fd:fd:89:39:4a:6d:32:7b:c9:fb:2e:95:1f:a1:1c:
ff:c0:66:6f:47:45:3d:5b:80:a7:89:1a:07:d3:36:
28:d3:2c:85:23:55:52:06:c8:11:e7:91:ea:2f:9d:
fd:bd:ab:6b:7b:7a:63:6d:e6:87:06:ea:e7:c1:1f:
3c:72:69:57:a6:11:a2:52:85:23:1c:30:63:98:2d:
27:db:f1:47:08:ba:6c:4f:58:40:79:09:d4:6c:77:
dc:ce:7c:52:88:22:7c:84:14:cc:be:17:95:c9:25:
6b:3a:09:57:8d:7f:85:7e:7f:8c:35:7f:5d:4d:8b:
cf:1d:db:1e:64:64:84:66:3c:b8:50:3e:82:68:1f:
22:5c:a2:bc:50:e3:7b:ba:fa:8c:3a:85:10:46:af:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1A:A1:E2:D3:58:CA:47:5E:14:9C:FE:86:0C:C0:6B:80:CF:B7:C9
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/1hqh4tNYykdeFJz-hgzAa4DPt8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.56.0/22
84.232.55.0/24
93.114.252.0/23
109.167.58.0/23
109.167.64.0/23
109.167.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:0c:b4:fa:72:da:40:a2:d2:56:11:38:9b:21:1a:46:4b:74:
7c:23:21:ab:b8:a0:b6:0c:79:ec:f3:69:66:8a:4b:55:7f:d7:
94:5f:28:b1:de:81:e3:f9:fc:14:17:c5:1a:2c:a7:cb:f8:96:
b9:ac:6b:39:71:ca:d9:20:14:36:32:34:c5:94:80:ee:c8:c2:
b7:2e:94:be:f6:4a:d0:b5:51:88:3d:c2:1f:b9:89:9d:1e:a4:
2d:4f:78:eb:81:bc:84:8c:07:1a:9d:da:8e:1a:00:f2:fe:b6:
3e:9f:36:db:99:4f:ab:9e:be:68:b2:09:e5:63:fa:71:f5:a4:
9a:f6:82:87:32:79:09:08:9e:98:4c:1d:c5:fc:f0:40:33:f6:
6c:c4:9b:4e:80:48:f4:08:42:d0:32:a1:ea:c7:56:dd:e0:8f:
06:9b:3d:fc:64:e0:00:07:c9:32:0f:9f:d9:6a:01:e1:d7:c6:
b1:42:92:b1:1d:25:ab:72:d9:fb:c3:93:52:71:1a:e5:84:13:
cf:89:ad:99:79:ba:22:cf:74:45:14:82:cd:b3:f8:aa:bb:96:
d9:46:8c:5b:80:94:7b:5a:9d:b8:1e:2f:51:c8:2e:8c:42:dc:
a5:09:8d:8b:38:b5:bf:66:01:21:4f:47:10:c5:cc:ec:a3:8d:
5f:0b:05:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-fra.rpki-client.org