Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/hZd2C-lGZWSEo_MYjM7nAOajmmw.roa
File: hZd2C-lGZWSEo_MYjM7nAOajmmw.roa (raw, json)
Hash identifier: dslZdBFZsuh8jE2AVgPqm3GyG80oFSlub2eq8dyhjng=
Subject key identifier: 85:97:76:0B:E9:46:65:64:84:A3:F3:18:8C:CE:E7:00:E6:A3:9A:6C
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 0182C890988831E546311F8714250070DA32
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/hZd2C-lGZWSEo_MYjM7nAOajmmw.roa
Signing time: Tue 23 Aug 2022 02:38:15 +0000
ROA not before: Tue 23 Aug 2022 02:38:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 45.150.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c8:90:98:88:31:e5:46:31:1f:87:14:25:00:70:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Aug 23 02:38:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8597760be946656484a3f3188ccee700e6a39a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2a:ff:5d:5b:28:98:87:4f:d3:6f:a5:a1:e1:
73:a5:d6:d2:c5:5f:4a:d3:8b:f0:80:48:d0:ad:a9:
23:ff:c0:86:e3:8a:34:72:ab:06:35:b9:4c:f2:71:
72:b7:4d:d3:f4:37:54:93:a4:73:7f:0e:a3:66:62:
82:68:d8:98:3f:d7:32:41:8a:07:2d:a4:f3:c2:93:
dc:a9:5b:f6:7c:c6:4c:f8:06:26:18:9d:61:01:03:
d3:2d:ce:fe:9e:db:7a:ab:2f:0c:dd:36:3f:c2:1c:
06:ec:2f:bc:8f:34:58:c0:a0:89:43:60:d8:57:ce:
6b:33:cf:86:27:43:77:b5:69:b5:a5:b8:3d:7f:9b:
df:b1:86:c2:02:4c:f6:0d:8c:b9:6c:97:36:a5:d6:
b4:31:ed:28:64:71:f3:e1:4d:99:dd:53:0b:1e:4b:
ac:99:52:03:89:08:8b:74:f9:51:a5:77:f2:c2:b7:
4c:f8:bc:36:58:c6:fd:3f:2e:af:06:6d:7d:22:f4:
67:bd:ed:ce:b0:8e:e9:a2:68:ef:91:44:d9:7a:c0:
9f:ef:ad:fe:7e:cf:fd:37:e1:08:77:18:da:48:89:
83:b1:74:f1:12:4d:43:3f:14:70:da:57:27:ac:37:
78:28:4c:55:9a:5a:b7:64:1c:10:02:08:be:bb:aa:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:97:76:0B:E9:46:65:64:84:A3:F3:18:8C:CE:E7:00:E6:A3:9A:6C
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/hZd2C-lGZWSEo_MYjM7nAOajmmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.196.0/24
Signature Algorithm: sha256WithRSAEncryption
00:56:8c:3c:a5:b4:c9:7a:11:15:a7:db:02:af:75:59:5d:b4:
fb:b1:68:32:f7:13:e3:c7:7e:13:f9:86:65:3f:a1:19:7f:f3:
ed:03:5d:8e:25:07:ba:2f:97:1b:3c:de:8d:2b:a3:f4:59:88:
e2:4b:13:40:41:f7:23:11:de:30:6b:9b:f1:18:e1:16:0c:6b:
d0:c3:da:8d:e8:51:2c:f0:d2:4b:15:7e:7f:5d:86:f4:43:5d:
08:2c:2b:95:08:72:6e:7f:f8:c9:8e:2e:64:65:36:e4:2c:03:
47:3e:66:8a:c0:0a:83:fd:30:c1:c6:fd:79:55:f0:da:c8:fc:
b9:a7:d5:21:89:b0:2b:b6:d1:07:53:41:56:45:01:ce:88:79:
e8:57:52:d3:e8:ea:bd:4e:9f:f8:f9:96:5b:a9:d4:6a:53:e5:
9f:89:68:07:88:54:75:69:dd:3a:ef:cd:ae:78:56:bc:18:fb:
8c:f9:81:cb:06:ea:f5:0b:0f:c6:13:e4:a8:d0:ee:a6:0f:a7:
40:29:61:00:02:71:70:f2:d6:bc:6a:71:c3:24:9d:ef:bd:7f:
57:53:68:51:fc:5b:98:25:dc:70:04:d5:df:0a:59:13:a0:c8:
86:1b:64:22:b8:40:48:0c:36:fb:31:b1:e9:8a:4e:a4:8f:5d:
1e:ae:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:02 2023 by rpki-client on console-fra.rpki-client.org