Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HTCiyjVkKLFQemT0vFo2G3p9QAU.roa
File: HTCiyjVkKLFQemT0vFo2G3p9QAU.roa (raw, json)
Hash identifier: Haez1X8BgFKs0HyJCoTKyw+3+KP2Ddblu/FgEe/aCXE=
Subject key identifier: 1D:30:A2:CA:35:64:28:B1:50:7A:64:F4:BC:5A:36:1B:7A:7D:40:05
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 282C1CF7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HTCiyjVkKLFQemT0vFo2G3p9QAU.roa
Signing time: Sat 01 Jan 2022 16:09:44 +0000
ROA not before: Sat 01 Jan 2022 16:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203680
IP address blocks: 146.158.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673979639 (0x282c1cf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d30a2ca356428b1507a64f4bc5a361b7a7d4005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:f8:b8:54:4a:1d:c4:ec:9e:43:a9:32:cb:
53:98:b9:4e:56:bb:0a:0a:4a:8f:65:98:ba:5a:26:
1b:3e:c9:2c:10:cd:c2:25:cc:db:3d:a3:e9:18:4b:
5d:53:33:29:8f:4f:76:ca:02:6b:c0:0c:1a:1d:70:
f9:01:c2:d6:08:b3:2d:55:56:60:03:51:3e:9f:fd:
97:a5:20:76:b6:77:3d:6c:65:37:4c:32:e4:b9:04:
11:19:3a:aa:5b:3c:43:33:00:12:da:ed:aa:0c:1f:
2e:f5:3b:2a:4c:83:a7:4e:af:49:61:95:12:25:e3:
24:bb:1a:ae:b4:7f:c4:0f:e4:2d:59:a9:66:cd:e1:
d4:ce:2a:41:19:71:c2:74:27:34:03:40:0b:44:c2:
6c:98:4b:b4:28:28:0b:44:c9:3e:d8:39:94:90:67:
b4:79:65:00:81:96:4b:65:82:c6:48:b4:59:67:cb:
da:41:b5:bd:1b:16:61:40:ce:ec:e0:c5:1b:3f:31:
9d:29:36:cf:1c:9e:aa:d7:9a:0e:3c:9d:70:88:0c:
9d:58:63:8b:75:af:1d:64:0c:4d:ea:f0:65:8a:14:
a5:46:1d:33:37:61:66:cb:e4:9c:d4:29:02:51:c6:
b4:66:45:ba:54:05:54:17:ea:91:6e:b6:29:34:80:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:A2:CA:35:64:28:B1:50:7A:64:F4:BC:5A:36:1B:7A:7D:40:05
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HTCiyjVkKLFQemT0vFo2G3p9QAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:dc:f9:5f:e8:6d:84:2d:26:34:20:ab:59:50:ad:e0:02:50:
9d:f3:75:2b:76:61:dd:68:d6:c1:10:1e:75:3e:1f:e3:fb:42:
5d:99:4d:7a:81:81:0a:85:71:21:1f:e6:03:a8:4b:bb:c2:8a:
b6:6f:52:81:c2:9e:fd:41:7d:81:b5:49:89:ee:d7:ce:d1:83:
d1:1c:e3:20:f9:e9:cc:1e:74:05:9c:4f:40:91:53:af:9f:6b:
71:8c:3e:35:ee:80:ea:63:d4:21:cb:e2:ed:9f:29:ac:9a:3c:
d5:d2:8f:58:5d:d8:a9:90:e5:b0:f8:d7:57:37:8d:2a:d6:13:
11:67:60:7f:4a:22:e9:0c:44:53:8b:e8:3b:ed:d1:fd:ea:cc:
b5:43:ee:ac:21:56:25:9b:4a:93:28:7b:81:e1:a6:78:38:f5:
b8:11:7e:7c:2e:db:09:28:89:77:ca:ae:43:a3:4c:78:b1:ef:
9a:64:6e:49:9b:dd:f3:a1:87:c9:d3:44:70:0e:72:78:b9:30:
7b:3f:b9:64:67:be:93:dc:aa:45:0f:d4:f5:3a:e2:b5:db:45:
f2:dc:93:07:78:e8:ca:45:50:4b:ba:84:24:66:d3:15:e7:e2:
6b:1b:35:d2:5c:32:13:af:e6:80:76:0c:a3:88:c6:ff:4e:04:
8d:6c:ad:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org