Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/HlFr8bU0Kw7F002wbRng1SPHiy4.roa
File: HlFr8bU0Kw7F002wbRng1SPHiy4.roa (raw, json)
Hash identifier: FUQigeTTV3xcnRMUi/gUt7VjO/q18AukIeL97ez9S1Q=
Subject key identifier: 1E:51:6B:F1:B5:34:2B:0E:C5:D3:4D:B0:6D:19:E0:D5:23:C7:8B:2E
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 02514C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/HlFr8bU0Kw7F002wbRng1SPHiy4.roa
Signing time: Thu 03 Mar 2022 14:43:08 +0000
ROA not before: Thu 03 Mar 2022 14:43:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51737
IP address blocks: 46.20.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151884 (0x2514c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Mar 3 14:43:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e516bf1b5342b0ec5d34db06d19e0d523c78b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:58:29:d8:65:7c:e6:22:73:51:b3:80:31:
ec:b2:d8:99:9b:7e:f9:d2:cd:0a:f8:d0:14:f1:46:
eb:78:46:69:48:97:3b:fa:e2:86:29:4b:16:d9:c1:
5e:dc:db:95:55:83:23:d2:55:dd:d2:46:14:be:62:
9d:35:c2:6d:e4:da:71:ce:31:28:ae:4b:04:3a:87:
eb:29:6d:5d:38:2b:63:82:39:bd:9c:a4:0e:4f:9b:
c9:a9:d3:d1:30:e6:9c:31:52:6e:15:38:b2:a7:5f:
4d:d4:a0:97:37:3b:30:e0:10:69:94:4f:ea:b2:9f:
9f:5e:2f:a9:65:97:cf:7a:58:f4:ba:c2:f5:5f:ff:
a6:f3:7e:91:3d:13:f2:2f:01:c6:d7:2c:09:79:4b:
f1:c5:96:2d:1e:8a:33:3b:ad:71:e4:4e:ce:1f:7b:
ee:2a:45:ec:23:1e:1c:64:83:2b:cc:44:b6:3f:ad:
9a:33:46:62:77:2f:ee:ff:86:5a:69:81:9e:66:e4:
de:43:f9:15:b1:49:98:ac:02:23:c4:a8:4a:99:c1:
19:e0:ae:a0:e7:88:1c:06:d1:aa:ba:10:04:c2:e4:
70:90:1a:6f:72:0b:e5:73:9f:0d:7b:d8:18:ac:bb:
6b:7f:ca:11:30:9d:1d:fd:72:00:54:c3:29:4e:98:
8c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:6B:F1:B5:34:2B:0E:C5:D3:4D:B0:6D:19:E0:D5:23:C7:8B:2E
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/HlFr8bU0Kw7F002wbRng1SPHiy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.208.0/24
Signature Algorithm: sha256WithRSAEncryption
51:4b:b9:a4:04:0b:2b:96:2f:5d:af:32:62:52:a4:08:49:62:
12:be:0c:99:e0:de:3a:7c:94:69:8d:7b:07:fe:27:b2:83:42:
c9:ec:3a:a5:85:30:04:ed:02:85:d7:37:ce:18:01:b3:76:73:
71:43:22:9c:51:3d:a6:8d:7d:ad:58:2c:f5:ca:90:4d:94:c5:
02:c1:ab:81:e1:88:42:b4:31:05:42:e6:15:2d:74:38:13:8b:
27:9e:92:1c:47:fe:05:f7:57:4b:ea:bb:76:79:a5:85:4e:f6:
65:43:24:37:7c:2c:ee:23:03:db:45:8a:f3:96:83:50:cc:a7:
36:93:31:50:5e:4b:7d:96:c5:7f:5d:6b:6b:3c:bc:da:a5:24:
bb:53:e9:3b:26:9c:a1:0a:7f:66:ff:31:77:e0:bf:3b:7c:de:
87:32:03:c1:d2:63:f6:ac:f5:90:38:63:04:45:b6:fd:78:0a:
09:06:c9:6e:6d:04:00:42:79:21:21:53:0a:fb:e8:2f:86:7e:
3e:23:47:2d:ba:c2:29:35:9f:59:aa:ff:a3:df:f3:62:d3:f3:
0c:5a:a0:b6:99:24:ca:4b:8b:26:c9:b2:39:f4:20:aa:bf:14:
c0:1f:64:36:a0:0c:83:74:11:d2:81:dd:3d:9d:bd:f0:95:25:
2c:36:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:35 2024 by rpki-client on console-fra.rpki-client.org