Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/HXv6gJEMQ1sJu5LqfywR-4mnWw0.roa
File: HXv6gJEMQ1sJu5LqfywR-4mnWw0.roa (raw, json)
Hash identifier: Ag0jIMp/M+dFABT3IwWdZCglhV/yslRREdykk8AzPBQ=
Subject key identifier: 1D:7B:FA:80:91:0C:43:5B:09:BB:92:EA:7F:2C:11:FB:89:A7:5B:0D
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 0A3C8745
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/HXv6gJEMQ1sJu5LqfywR-4mnWw0.roa
Signing time: Wed 18 May 2022 13:06:17 +0000
ROA not before: Wed 18 May 2022 13:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42475
IP address blocks: 185.82.55.0/24 maxlen: 24
185.82.52.0/24 maxlen: 24
185.82.53.0/24 maxlen: 24
185.82.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171738949 (0xa3c8745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: May 18 13:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d7bfa80910c435b09bb92ea7f2c11fb89a75b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:e8:dc:1b:75:d5:9d:25:9a:9c:22:d0:1b:
35:12:34:33:d3:48:27:53:fa:e7:8c:75:1d:fc:cb:
08:9a:69:7c:0e:1c:b7:e2:06:2e:1f:37:b9:d5:dd:
ef:c7:86:83:81:93:3a:e0:9f:de:90:53:2d:ea:ff:
42:2e:d8:10:81:35:8c:27:c9:ed:5f:ce:9d:03:c5:
3a:c4:cb:10:ba:81:08:e8:61:85:77:dd:48:48:05:
f7:56:32:cd:03:03:ff:05:bd:b3:11:0c:96:77:9b:
74:30:09:17:1f:b1:fa:59:68:b9:33:4b:3f:d9:14:
f1:3a:ab:d4:09:dc:f7:c2:f3:35:52:bd:82:b5:3a:
05:0e:58:fd:e8:18:5e:f2:90:b7:2d:b4:46:d5:48:
ff:bb:a0:b0:d0:f4:42:d4:88:1e:1c:d9:7f:47:50:
b0:3c:61:f1:aa:84:40:b1:f9:62:9a:70:38:40:0e:
82:43:f9:f6:35:59:b1:f7:cb:23:02:44:1f:4f:07:
c9:44:70:46:d8:c1:78:85:42:c7:86:d9:de:6d:11:
86:0e:d9:b7:21:55:76:6c:f2:fd:ca:30:60:2f:ff:
c2:df:5d:94:c6:1e:77:22:71:14:6a:a0:79:de:10:
89:b3:06:a0:0c:5c:b2:eb:59:30:b8:54:43:4c:86:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7B:FA:80:91:0C:43:5B:09:BB:92:EA:7F:2C:11:FB:89:A7:5B:0D
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/HXv6gJEMQ1sJu5LqfywR-4mnWw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:67:7f:bd:79:cc:24:e3:60:43:d8:10:b4:a3:d9:16:c4:d6:
89:ad:56:61:1d:d3:f5:4f:0d:26:1e:1b:11:9e:22:2a:b5:5a:
46:13:15:5b:3c:5c:c6:e4:28:6f:a5:ad:b7:02:ca:db:7b:a7:
30:28:2d:6f:25:4f:ab:3e:a4:1a:5d:3b:2d:6e:f8:c5:d2:02:
e3:c4:c7:a2:48:00:b5:e9:40:56:7f:1f:f8:c5:29:7a:b2:99:
a1:3f:d7:31:76:b6:3b:4e:2e:76:93:b5:28:e3:de:49:5d:e5:
21:05:25:67:ac:3e:05:1d:02:8f:71:c4:15:47:65:d5:5d:23:
1e:19:9d:0b:3b:5a:8e:1d:2d:97:31:a5:bb:37:c3:aa:3e:8c:
bb:03:4f:e2:4c:88:94:22:28:b1:ff:f0:33:71:18:93:2f:d0:
a3:1e:62:fc:3c:ee:0b:b2:75:4b:09:4e:61:9b:2f:c5:78:4f:
42:11:30:39:87:d2:c0:18:0a:be:01:b2:b4:36:f6:2e:e6:25:
1f:7d:68:b7:1d:e3:17:7a:0e:42:10:2c:ea:c6:70:b4:fe:62:
63:72:4e:6a:44:a9:13:0d:0e:de:eb:aa:d6:fc:7b:a6:24:c6:
b7:fd:08:9e:9a:9a:14:96:0d:16:c6:8a:ff:de:5e:4d:f5:46:
62:ae:9d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org