Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/HcaX2edRRZvfDmDIQR9dyCUBSls.roa
File: HcaX2edRRZvfDmDIQR9dyCUBSls.roa (raw, json)
Hash identifier: xluG3u9LzEFkNmz9m1Hd2k6StCfmL3OuZLx9JGftUA8=
Subject key identifier: 1D:C6:97:D9:E7:51:45:9B:DF:0E:60:C8:41:1F:5D:C8:25:01:4A:5B
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 09958CA8
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/HcaX2edRRZvfDmDIQR9dyCUBSls.roa
Signing time: Sat 01 Jan 2022 14:04:53 +0000
ROA not before: Sat 01 Jan 2022 14:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206294
IP address blocks: 145.22.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160795816 (0x9958ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Jan 1 14:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dc697d9e751459bdf0e60c8411f5dc825014a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:99:2e:3b:c5:0b:6c:dd:db:13:f1:55:22:
70:01:e7:ef:bc:17:83:fa:66:43:16:92:47:cc:88:
56:7a:bd:8f:d8:11:99:9d:bf:c8:d0:7b:99:dc:6a:
95:64:36:36:02:3b:0f:d0:66:b6:c0:ea:1f:07:8e:
6c:ab:d9:83:fe:c9:2a:4d:f0:df:d3:5f:3a:3e:b0:
a5:c9:fc:8a:16:9a:6a:3c:95:11:8a:ca:70:3b:b0:
d4:2e:d5:07:21:94:1e:18:95:d1:c0:59:ab:f3:1b:
58:84:bc:5e:85:4d:f8:99:ce:ab:fc:15:35:e1:5e:
34:d9:69:f4:1b:19:3f:f0:68:68:40:4b:a6:b7:61:
85:95:9c:50:a4:35:3f:54:cb:54:be:50:7a:29:d9:
45:64:62:0f:94:4e:b5:b3:28:91:a2:20:ed:a8:ae:
7f:e9:d2:89:20:a8:b7:26:82:ee:b4:f4:8f:0e:53:
4a:06:87:3a:fe:65:9c:ce:bb:37:95:7f:e0:19:c6:
97:64:f8:04:d9:a4:f8:6f:ac:a7:fb:e7:9c:d6:cc:
f2:43:a0:98:a3:6a:c7:04:4c:52:02:2a:63:a7:0d:
3a:9b:06:5b:ce:07:55:00:aa:ab:6c:b0:09:3b:b4:
d4:de:44:a6:f4:a6:09:b1:ff:35:44:57:d9:93:ae:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:97:D9:E7:51:45:9B:DF:0E:60:C8:41:1F:5D:C8:25:01:4A:5B
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/HcaX2edRRZvfDmDIQR9dyCUBSls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.22.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4f:d5:5c:5d:bc:d3:77:52:20:3a:4f:fa:b9:c5:cf:0b:60:
63:7f:eb:38:1a:f9:db:39:05:b0:80:e7:7f:ca:f4:f5:97:e0:
d6:6a:8d:46:93:c4:a8:b5:f9:c1:e2:5d:37:51:c0:67:e3:5d:
3d:f7:75:8d:92:39:71:a6:1c:86:90:0a:44:98:db:b4:4d:8d:
25:f0:d6:01:59:f7:08:d5:bc:aa:92:4a:6d:56:df:ab:b4:39:
e0:86:22:8c:76:d3:40:fb:18:d2:ec:80:0a:9f:9d:15:6d:a4:
bc:85:03:af:13:eb:80:a3:58:5d:f6:e6:1b:be:44:c7:b7:63:
76:b3:ec:a7:b9:fb:89:06:fa:ce:3d:10:a9:37:8e:56:f7:a6:
c7:50:dd:22:98:b8:c3:14:dd:b7:0a:ed:75:32:22:05:3d:b0:
fb:b2:bb:1f:e9:62:19:66:37:a2:e7:73:be:b2:4f:01:36:72:
5d:95:90:9c:3e:b9:82:74:a6:c6:80:72:d1:17:3c:10:0c:c6:
7c:19:3b:90:3c:f1:d2:98:54:08:b2:56:45:97:7b:fb:0e:94:
f5:c1:5f:80:5d:b3:02:dd:73:82:73:3b:73:25:3c:1e:78:35:
d6:6b:0b:83:88:68:f6:c7:fd:36:33:98:c3:1a:69:4e:a8:ae:
36:8c:fe:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:25 2024 by rpki-client on console-fra.rpki-client.org