Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/hhS_TimtgPdBQwbcpsey7yFJ-cY.roa
File: hhS_TimtgPdBQwbcpsey7yFJ-cY.roa (raw, json)
Hash identifier: xwuDb1pVvnH8Vg76Bhjg4Iz5wFo3vwttTk1YWixG5nU=
Subject key identifier: 86:14:BF:4E:29:AD:80:F7:41:43:06:DC:A6:C7:B2:EF:21:49:F9:C6
Certificate issuer: /CN=51f866f32b47c69d478ad95354e257e51a236a57
Certificate serial: 4510003C
Authority key identifier: 51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/hhS_TimtgPdBQwbcpsey7yFJ-cY.roa
Signing time: Sun 13 Feb 2022 00:00:08 +0000
ROA not before: Sun 13 Feb 2022 00:00:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39288
IP address blocks: 158.255.92.0/23 maxlen: 24
158.255.92.0/22 maxlen: 24
193.138.118.0/24 maxlen: 24
46.21.208.0/21 maxlen: 21
46.21.208.0/20 maxlen: 20
46.21.216.0/21 maxlen: 21
94.232.152.0/22 maxlen: 22
94.232.152.0/21 maxlen: 21
158.255.88.0/21 maxlen: 24
158.255.88.0/22 maxlen: 22
94.232.156.0/22 maxlen: 22
2a02:2928::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1158676540 (0x4510003c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51f866f32b47c69d478ad95354e257e51a236a57
Validity
Not Before: Feb 13 00:00:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8614bf4e29ad80f7414306dca6c7b2ef2149f9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:f3:e7:02:31:98:93:e7:c3:ce:0e:c5:a4:
ca:b5:80:c3:29:ea:45:b0:e8:e2:23:1f:e7:f9:3c:
64:09:f6:98:c6:0b:d1:1c:02:b2:a6:57:10:0a:c8:
66:5f:b7:eb:d2:59:cb:a4:28:d3:73:8d:37:5f:83:
c0:7a:38:fd:b7:98:60:61:c5:d8:8b:3e:0d:20:f3:
ec:1f:16:fa:2d:2b:83:82:db:e9:f8:3a:13:fb:ab:
3d:86:3c:af:10:da:ef:0b:68:fe:a2:86:bc:73:28:
a5:d1:0b:75:44:b8:e0:1a:35:82:bb:47:4c:d1:d9:
6e:3f:e2:eb:ca:8f:e4:b7:a0:a4:84:a1:cd:ef:51:
e7:28:b6:12:e7:cf:5e:bb:79:6f:86:74:d3:a9:ca:
9d:26:3e:fa:9c:bb:81:99:83:9d:c1:30:29:bb:0a:
6d:8b:da:c5:a1:ee:4a:f3:ac:b7:b9:eb:c6:64:19:
1c:5d:22:1a:a9:7a:1c:a2:89:29:43:a0:51:39:6f:
69:95:cb:e0:15:b3:a9:e0:d0:5f:d9:41:00:e6:68:
fa:cf:98:bb:0c:d9:40:3c:d5:14:3d:28:b2:65:81:
15:e6:ae:17:fb:4d:1a:cc:07:da:b7:63:c0:af:07:
cf:72:ff:49:e9:a8:74:16:a6:e0:db:fa:7a:24:a9:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:14:BF:4E:29:AD:80:F7:41:43:06:DC:A6:C7:B2:EF:21:49:F9:C6
X509v3 Authority Key Identifier:
keyid:51:F8:66:F3:2B:47:C6:9D:47:8A:D9:53:54:E2:57:E5:1A:23:6A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ufhm8ytHxp1HitlTVOJX5Rojalc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/hhS_TimtgPdBQwbcpsey7yFJ-cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/dcb6fb-0e86-4d34-adc3-d93fd49ae8ef/1/Ufhm8ytHxp1HitlTVOJX5Rojalc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.208.0/20
94.232.152.0/21
158.255.88.0/21
193.138.118.0/24
IPv6:
2a02:2928::/32
Signature Algorithm: sha256WithRSAEncryption
1a:f9:46:86:aa:55:1a:b1:e2:5b:59:fc:f6:60:4d:3d:f2:05:
a3:19:9e:89:05:68:80:c7:a3:c7:41:91:b8:03:88:e2:e9:c8:
e6:29:22:57:94:cd:d5:e7:c9:3a:7b:69:20:f8:72:ff:e0:f2:
04:03:91:84:6a:58:5e:15:91:c6:e3:0e:48:14:5d:5f:be:0a:
63:3e:84:1c:36:fa:c2:8c:66:5e:5a:05:60:f1:88:31:e7:80:
3f:d4:88:ae:3c:59:f1:0a:f5:fb:11:7a:f1:46:f1:05:da:92:
c1:c6:cb:0f:4c:cd:cd:16:cb:fa:7d:22:30:12:48:e5:26:ec:
18:e4:cd:ae:5e:24:c3:d9:76:8c:39:30:51:d8:14:ab:b8:e4:
e9:28:4e:09:67:47:be:16:7b:3c:b9:e7:e0:6f:10:bd:54:d0:
40:dd:b9:57:92:31:9b:80:d8:d8:cb:7f:08:fc:17:69:38:e3:
35:33:93:30:82:5d:0a:81:f8:3a:0c:4e:1c:7a:9e:7c:9e:41:
84:0e:69:c3:54:a3:46:5c:e6:eb:cd:f4:bb:67:28:a4:b3:42:
58:d8:9a:2b:8c:5c:c9:4b:21:b3:3c:33:3d:a2:33:e8:35:f9:
04:69:fb:15:18:b0:0a:05:67:80:67:33:86:78:02:15:b0:fc:
ef:85:42:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:06 2023 by rpki-client on console-fra.rpki-client.org