Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/H-lj1-6NQEH2ObPxrinGETET4GE.roa
File: H-lj1-6NQEH2ObPxrinGETET4GE.roa (raw, json)
Hash identifier: WSJ0jMGlJIoo3lD6pgl2RSPyEOkWMnxH7J1ly5JedUU=
Subject key identifier: 1F:E9:63:D7:EE:8D:40:41:F6:39:B3:F1:AE:29:C6:11:31:13:E0:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 8E6264
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/H-lj1-6NQEH2ObPxrinGETET4GE.roa
Signing time: Fri 27 May 2022 08:09:13 +0000
ROA not before: Fri 27 May 2022 08:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 45.151.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9331300 (0x8e6264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: May 27 08:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fe963d7ee8d4041f639b3f1ae29c6113113e061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:f2:46:c7:59:1b:5b:13:6b:14:4f:cb:b8:
d4:22:e6:45:45:ff:a6:22:2f:7c:47:4f:cb:ce:e1:
c7:2d:d4:90:57:78:66:da:af:9e:10:f3:c7:29:4e:
57:36:96:32:87:78:60:e6:d2:7c:1e:e8:6c:f4:1f:
de:94:a7:bb:ac:d5:49:06:59:5c:a3:5c:80:58:eb:
37:38:4c:43:98:ab:d9:b9:d6:a9:3e:a6:a8:ad:d4:
77:4e:fd:e8:3c:46:25:0a:2a:97:11:2b:bb:b3:46:
a5:7c:41:54:ec:8c:2c:b9:b2:73:81:a1:f6:a3:73:
4a:35:b1:4e:42:10:8c:96:a3:50:90:20:9a:fb:1f:
cc:2b:52:4f:48:a4:dd:d4:6d:ca:12:1a:cb:c1:ad:
db:3f:e5:d3:f2:a7:6b:7e:3e:b0:69:93:a3:7e:5c:
34:5d:8c:cc:9f:88:e0:cc:8e:4b:d2:d5:c5:5c:11:
d7:c6:4b:ed:19:78:3f:31:30:6d:ff:74:f4:e4:f9:
bd:54:02:13:bf:ee:25:08:ae:f3:b4:83:70:b0:1d:
cf:3f:62:b7:b5:32:3e:0d:75:4f:fa:5a:35:50:d8:
f3:97:bc:58:c9:ed:49:46:86:1c:58:62:74:00:73:
5c:8d:1c:3c:7b:8d:bc:d9:98:d9:cb:5e:c1:1f:c4:
55:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E9:63:D7:EE:8D:40:41:F6:39:B3:F1:AE:29:C6:11:31:13:E0:61
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/H-lj1-6NQEH2ObPxrinGETET4GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.69.0/24
Signature Algorithm: sha256WithRSAEncryption
42:af:37:d5:71:8e:f7:bf:05:1b:cf:3c:0d:9e:19:c4:bf:9a:
c0:f0:a7:5b:a3:b6:73:50:af:be:4f:1d:71:3c:18:3d:5b:2d:
d5:d1:e0:3e:2f:68:71:a7:a7:ef:98:4c:90:73:0c:c0:f0:ce:
2e:99:5e:15:ec:f3:af:42:f8:eb:7d:60:83:a2:17:28:93:13:
c3:20:68:51:dd:b7:6b:1d:f4:f0:62:1e:4b:bf:d1:d2:7e:db:
37:99:89:d6:86:9f:3b:c6:52:b3:f3:94:36:fe:df:34:73:4e:
7b:c2:6f:82:69:0f:95:e2:5a:d6:e6:7c:91:27:41:66:bb:0b:
dd:9c:91:29:cf:0b:cb:4c:ae:c6:4d:aa:fe:81:bd:5c:5e:f9:
94:17:c6:83:c6:13:24:0f:9a:35:44:33:93:fc:1f:61:a5:df:
54:9d:d3:54:af:82:9e:5c:aa:09:2d:de:4c:c2:59:ef:96:4d:
e3:60:08:fb:c6:2f:e7:41:83:04:5e:ca:27:21:ad:a7:3a:8e:
33:02:14:09:d6:50:3b:31:52:6a:2e:ae:3a:99:ec:d1:46:e1:
98:c7:f9:63:16:e7:b8:7c:db:b7:97:bb:e5:b5:c4:c8:7c:70:
e7:46:28:f3:19:12:6f:92:5e:d3:fc:cf:ee:20:53:bd:3b:c6:
10:5c:5c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org