Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/Harl2tLok21A7t8YRWQtYxxX2Sk.roa
File: Harl2tLok21A7t8YRWQtYxxX2Sk.roa (raw, json)
Hash identifier: CurH/0iYjewz6FC5g7NMW4X8uArjhMrXd4ercxGVlFI=
Subject key identifier: 1D:AA:E5:DA:D2:E8:93:6D:40:EE:DF:18:45:64:2D:63:1C:57:D9:29
Certificate issuer: /CN=0265ad94e797135906b3e11a847c8eafd094e745
Certificate serial: 0A171736
Authority key identifier: 02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/Harl2tLok21A7t8YRWQtYxxX2Sk.roa
Signing time: Sat 01 Jan 2022 01:53:46 +0000
ROA not before: Sat 01 Jan 2022 01:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51985
IP address blocks: 185.45.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169285430 (0xa171736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0265ad94e797135906b3e11a847c8eafd094e745
Validity
Not Before: Jan 1 01:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1daae5dad2e8936d40eedf1845642d631c57d929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:47:9d:02:5c:d4:3c:3a:e7:b3:f2:da:a6:
4f:c9:09:6b:97:13:8f:03:5c:0e:1d:21:67:ca:8f:
22:b5:16:05:0b:aa:47:70:73:26:bf:37:8d:8c:6a:
73:a2:fc:c6:3b:fe:94:82:26:b8:b6:e9:40:ad:11:
d1:85:dd:ac:5f:66:72:2c:23:71:83:32:3a:c9:0b:
b8:11:d6:4c:56:5e:52:29:c7:64:14:47:d7:ac:35:
e8:f6:e8:2c:19:ec:eb:80:c0:c6:66:7c:89:c6:dc:
4c:d9:f3:4d:71:7a:0d:10:6b:26:da:bf:92:c5:20:
c2:0e:3f:75:44:53:c1:1c:58:1c:0c:0a:e4:77:af:
4a:b2:99:3d:9b:0e:b2:3e:3d:89:b3:83:34:5c:ca:
61:c1:4f:72:9e:86:ca:2d:10:8a:02:53:cb:71:47:
a4:c1:62:7e:d9:df:2e:4a:5a:34:2f:b5:bb:15:03:
25:57:20:90:c6:0f:1d:74:67:b1:f5:e5:d0:4c:54:
ca:ac:23:95:17:df:f9:41:dc:d9:2e:f7:d0:c2:6d:
30:fd:81:42:a7:04:1c:85:c1:7a:de:28:f1:31:10:
fd:72:8b:22:1d:26:7f:38:39:8b:ed:68:b2:21:cc:
ca:eb:f7:bc:8e:a8:f9:5e:80:ca:d6:da:bf:13:16:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AA:E5:DA:D2:E8:93:6D:40:EE:DF:18:45:64:2D:63:1C:57:D9:29
X509v3 Authority Key Identifier:
keyid:02:65:AD:94:E7:97:13:59:06:B3:E1:1A:84:7C:8E:AF:D0:94:E7:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmWtlOeXE1kGs-EahHyOr9CU50U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/Harl2tLok21A7t8YRWQtYxxX2Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb28b6-2966-444a-8fbd-97fb900d668b/1/AmWtlOeXE1kGs-EahHyOr9CU50U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.172.0/22
Signature Algorithm: sha256WithRSAEncryption
08:c4:96:87:64:66:e9:ad:e3:06:c4:af:88:47:a0:24:45:55:
4d:e1:04:13:7e:30:fe:41:54:6b:da:52:c4:d7:53:6b:96:22:
9d:5f:cf:5c:ce:73:74:19:8c:fb:4e:00:e1:ff:b2:91:46:6b:
21:01:f8:6d:94:80:7e:72:16:f5:d3:01:57:78:1c:e4:f2:d3:
79:21:93:6a:e3:a1:f0:6f:48:0d:4b:af:13:9e:b5:e6:0f:cf:
d9:9d:bb:9d:d9:0c:6e:47:48:29:32:8e:d9:0f:70:96:ed:b6:
0f:37:7d:1b:e5:4d:8b:4e:17:30:f4:15:b6:b3:9a:2b:54:34:
4d:fc:32:81:02:d1:53:d0:c8:81:0e:15:09:d8:33:7d:01:f8:
0c:59:0a:d7:3b:29:b3:3c:77:cb:c1:8b:50:1e:ce:78:87:cc:
46:1f:57:d3:0f:fd:12:de:5f:7a:33:f6:60:18:83:0d:fe:83:
b5:6a:8f:9c:ed:53:24:1a:9a:a1:e9:55:32:8c:a3:b4:2d:f4:
24:9e:68:27:86:ad:30:12:a7:56:9b:79:1b:f4:8a:eb:8b:41:
6f:6b:f4:05:84:19:b2:ef:0f:9f:a8:de:6b:7f:0f:68:b4:64:
09:35:09:3e:45:7a:36:a5:a2:dc:25:28:d6:f5:3c:dd:06:14:
82:23:27:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:14 2024 by rpki-client on console-ams.rpki-client.org