Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/H8dRSTf5YiYd2eAJzKf7ioLESZg.roa
File: H8dRSTf5YiYd2eAJzKf7ioLESZg.roa (raw, json)
Hash identifier: 3Ieqj+9RC4D5GCzH3Lp2EnROxldSHehvQ5LPvKA83/4=
Subject key identifier: 1F:C7:51:49:37:F9:62:26:1D:D9:E0:09:CC:A7:FB:8A:82:C4:49:98
Certificate issuer: /CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Certificate serial: 01855DC9C76D796A18AFC7893D0D35815C63
Authority key identifier: D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/H8dRSTf5YiYd2eAJzKf7ioLESZg.roa
Signing time: Thu 29 Dec 2022 12:09:42 +0000
ROA not before: Thu 29 Dec 2022 12:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24875
IP address blocks: 2.58.21.0/24 maxlen: 24
2.58.22.0/24 maxlen: 24
46.182.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:c9:c7:6d:79:6a:18:af:c7:89:3d:0d:35:81:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94bddafb5df098419020a8fbc7a90b16e341d63
Validity
Not Before: Dec 29 12:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc7514937f962261dd9e009cca7fb8a82c44998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:af:56:72:f1:a2:3b:da:d8:65:d1:5a:5d:
2a:10:81:52:09:05:0d:b1:64:8d:3a:e1:ea:af:84:
3a:53:57:ad:92:47:f9:c9:74:28:99:6f:07:c9:23:
59:a3:fc:56:f2:b9:97:78:5d:bf:2f:6e:1f:cf:42:
cb:31:39:e3:87:80:59:a9:9e:9a:5f:56:88:27:f9:
ba:80:33:05:ac:e1:40:99:fc:08:8f:63:c4:b9:c6:
f3:b5:30:11:72:cf:0d:df:3c:63:0d:43:92:81:96:
89:25:3b:e3:31:bc:75:5e:3a:44:b6:03:a4:4a:34:
a8:c6:5b:d6:a8:c1:df:d0:43:02:f8:10:06:c1:76:
d0:ec:8a:d1:2c:fb:df:95:60:1c:54:fc:25:85:95:
c9:3e:d9:fa:05:53:6c:5d:0d:16:48:48:1f:3f:32:
84:c9:24:ab:ad:98:ce:c0:f5:dd:e0:22:61:12:e1:
ca:d3:13:14:8f:1b:e4:1a:e5:ed:65:a1:b7:e5:41:
b7:bc:07:c5:fd:53:bd:a9:6f:58:91:9c:79:5b:53:
94:3c:da:ca:54:ae:e1:94:86:ad:3b:5a:e6:11:2a:
dd:94:86:ef:5f:01:97:de:cc:d0:8e:ba:aa:8f:47:
96:dd:e5:6b:ac:6c:91:55:42:04:5b:41:89:30:89:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:51:49:37:F9:62:26:1D:D9:E0:09:CC:A7:FB:8A:82:C4:49:98
X509v3 Authority Key Identifier:
keyid:D9:4B:DD:AF:B5:DF:09:84:19:02:0A:8F:BC:7A:90:B1:6E:34:1D:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uvdr7XfCYQZAgqPvHqQsW40HWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/H8dRSTf5YiYd2eAJzKf7ioLESZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cde757-7672-4720-8ce1-6e26b91f6910/1/2Uvdr7XfCYQZAgqPvHqQsW40HWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.21.0-2.58.22.255
46.182.108.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a4:d7:5f:07:73:bb:fe:1f:b2:35:49:9f:40:f4:db:24:d4:
13:70:25:54:cf:ee:8d:82:00:72:d4:b4:bd:2c:a4:5f:8d:9e:
bc:f8:61:7e:7f:f8:96:d3:a7:1e:6e:3d:c1:c1:51:67:5c:52:
16:b6:a4:33:49:e7:68:09:34:2f:f3:ea:b3:f0:a4:2d:88:aa:
cb:b3:73:01:ac:c0:c6:b6:92:b1:8e:f5:c8:9b:3f:63:e1:91:
14:17:ca:e9:08:ff:17:6c:76:99:83:ac:5f:9d:af:7c:bb:ee:
e9:ee:ad:dd:34:f1:ce:f1:1d:b8:4b:6e:ef:cd:e4:0d:4a:95:
20:1e:7c:89:36:e9:8e:27:3c:50:72:35:78:d7:b7:d9:97:7e:
c8:23:f6:34:20:69:30:50:db:05:b4:fd:f5:f6:25:d3:d8:50:
41:1c:d8:c8:26:de:c6:c0:fc:b4:2b:15:61:43:be:b1:c8:ba:
5e:69:0a:2a:08:3a:dc:95:79:03:5a:d6:b9:16:fe:45:e4:6a:
6b:29:fb:6e:e6:91:d2:c9:97:07:83:65:35:bf:91:32:a2:38:
c1:98:6f:9d:ca:ab:ac:ba:31:e4:61:15:69:47:01:00:3d:d0:
25:34:83:77:f1:cc:fb:08:55:39:76:a9:dd:87:0b:ee:7c:81:
e5:f4:98:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:02 2023 by rpki-client on console-ams.rpki-client.org