Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/hyHBLRrv1TsqiAGFclK5t7p_o_U.roa
File: hyHBLRrv1TsqiAGFclK5t7p_o_U.roa (raw, json)
Hash identifier: E0peUH97AwthIY6/fSe1kLj4bnZckrBTboRcaT6NWjM=
Subject key identifier: 87:21:C1:2D:1A:EF:D5:3B:2A:88:01:85:72:52:B9:B7:BA:7F:A3:F5
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0183F6A415D9B068C8162F15EBC8FF71AB3A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/hyHBLRrv1TsqiAGFclK5t7p_o_U.roa
Signing time: Thu 20 Oct 2022 18:24:51 +0000
ROA not before: Thu 20 Oct 2022 18:24:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203936
IP address blocks: 185.226.192.0/23 maxlen: 23
217.26.190.0/23 maxlen: 23
89.42.112.0/23 maxlen: 23
77.247.120.0/22 maxlen: 22
185.227.103.0/24 maxlen: 24
45.67.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f6:a4:15:d9:b0:68:c8:16:2f:15:eb:c8:ff:71:ab:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Oct 20 18:24:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8721c12d1aefd53b2a8801857252b9b7ba7fa3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:05:a9:df:25:fa:b1:bc:5c:7a:96:ca:d9:
c5:dc:bc:ec:e8:8d:bc:22:09:76:74:3e:f1:a7:f7:
2a:1a:91:d5:4e:8d:6e:b2:83:34:c0:f9:29:32:91:
82:a3:cd:85:dd:35:1b:26:17:45:97:a9:30:8a:5e:
92:a7:dd:03:92:01:18:69:0d:4e:bc:bb:13:b6:75:
20:51:ca:96:f7:d3:09:bc:21:eb:a7:a9:b1:0f:b2:
75:06:88:6b:f2:18:e7:12:e7:cb:8d:55:78:d8:6c:
fa:e2:80:ee:66:f2:e9:2b:d6:7a:7a:03:92:48:b1:
b8:7a:d9:43:b9:30:9b:3c:1a:3b:85:1f:66:66:bd:
01:f1:48:de:0d:28:51:fd:7c:84:3f:e8:51:95:e0:
36:6d:30:bf:7c:ba:e6:e3:3b:49:55:6f:9c:7c:0c:
02:ac:69:a3:54:bf:69:18:43:b2:d1:3d:9d:63:82:
fa:7d:82:a5:15:5b:ed:ce:3e:1d:bd:37:b4:6a:60:
89:7f:8d:be:65:88:56:89:51:c8:cd:7a:11:73:4e:
9f:e0:fb:38:39:fb:56:da:77:ad:1d:5b:8b:4b:a8:
ee:97:fe:da:d3:39:17:b8:10:96:ac:9d:10:42:4d:
f0:dd:dd:7c:1d:46:24:5d:29:40:1d:8d:21:13:7e:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:21:C1:2D:1A:EF:D5:3B:2A:88:01:85:72:52:B9:B7:BA:7F:A3:F5
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/hyHBLRrv1TsqiAGFclK5t7p_o_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.244.0/22
77.247.120.0/22
89.42.112.0/23
185.226.192.0/23
185.227.103.0/24
217.26.190.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:0c:cb:52:87:9e:4b:34:73:0a:77:82:1b:11:f1:29:d2:76:
aa:27:ca:43:a7:e5:01:28:e7:87:d9:6b:e6:58:9e:18:35:28:
57:14:c6:3e:3f:6b:98:fa:f1:c1:8b:94:b6:cb:3b:a4:f7:54:
90:e5:63:23:0f:d5:db:6f:c4:f8:25:be:a0:9e:fc:9d:dd:44:
b7:28:30:46:7d:70:ce:d3:bd:9a:fd:bf:79:b6:d2:4b:ce:fc:
6b:07:06:a7:d7:9e:38:87:83:bb:8c:3e:6e:68:f1:e1:f1:b6:
74:9c:72:76:08:5c:93:43:fd:b3:e1:ac:e9:0a:2f:85:4b:a0:
53:ae:51:df:0b:f1:62:ac:da:1b:bb:aa:44:91:c0:7d:fb:b0:
d6:76:ab:67:ee:c2:7b:79:8a:7d:3e:df:c9:77:2d:5d:ed:ec:
1f:17:15:50:b9:4a:c7:45:25:29:b2:73:82:f6:8b:d1:3d:19:
53:a1:96:b0:4b:ab:32:89:47:79:56:d5:4b:91:ee:e4:ad:2f:
79:1c:1e:35:17:44:17:91:3d:40:77:2d:8f:7b:31:6a:b4:be:
7b:a6:66:d1:7e:83:82:fc:bd:e2:15:e8:02:c1:a1:85:7b:83:
f6:fb:bf:fc:16:93:d9:7d:41:7f:a7:ae:e8:dc:8e:99:44:df:
77:f5:45:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org