Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HWYZrCvv4baO6VH3rw8938mOnAs.roa
File: HWYZrCvv4baO6VH3rw8938mOnAs.roa (raw, json)
Hash identifier: trtLstT8SLHqJhXqfNNb9svt8B3DktRuRzfPZBiWWJ8=
Subject key identifier: 1D:66:19:AC:2B:EF:E1:B6:8E:E9:51:F7:AF:0F:3D:DF:C9:8E:9C:0B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1BB2D8E6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HWYZrCvv4baO6VH3rw8938mOnAs.roa
Signing time: Thu 16 Jun 2022 04:51:44 +0000
ROA not before: Thu 16 Jun 2022 04:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212477
IP address blocks: 45.140.140.0/22 maxlen: 24
45.140.188.0/22 maxlen: 24
45.137.204.0/23 maxlen: 24
45.137.206.0/23 maxlen: 24
2a07:e345:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464705766 (0x1bb2d8e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 16 04:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d6619ac2befe1b68ee951f7af0f3ddfc98e9c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:d5:80:75:eb:f4:7b:44:a2:14:6b:03:d9:
20:b1:50:ef:b1:2d:2d:17:6a:88:fd:90:7c:6b:f6:
25:d5:c0:3f:ef:32:7e:56:a4:7d:ab:35:73:23:59:
28:3c:96:e4:5f:41:57:2f:0a:f9:34:66:37:74:c6:
65:74:f5:be:c6:66:e2:6e:c5:b4:2c:dd:13:ae:02:
6a:b1:d1:69:0d:d8:d4:6e:2e:6c:a9:df:e7:72:13:
32:8f:e6:08:c1:89:d3:25:c5:3c:85:63:07:54:0f:
e5:ca:d1:d3:bf:47:45:e5:3f:56:2c:b3:fc:a3:2d:
88:b4:17:51:00:66:b3:6f:f9:7b:87:a2:4e:cc:ca:
40:c4:42:62:39:5a:cf:63:32:96:98:c4:9c:bb:a5:
0e:15:ba:21:12:62:22:be:43:da:7a:80:c2:2d:20:
87:34:df:f2:ca:6b:1d:d0:c6:d7:9a:95:11:d9:67:
cd:42:58:b9:52:d1:f7:99:f6:60:f4:ec:e7:68:c1:
94:1b:90:14:67:f8:16:3b:13:a2:18:b0:53:c3:eb:
cd:2c:09:d8:b3:9d:b3:a4:dd:06:95:38:2d:b6:dc:
9f:09:3a:07:53:0b:90:01:f1:ee:4b:d0:61:08:c2:
62:ab:bc:f1:39:d2:d1:4d:c8:87:27:04:aa:30:6f:
ee:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:19:AC:2B:EF:E1:B6:8E:E9:51:F7:AF:0F:3D:DF:C9:8E:9C:0B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/HWYZrCvv4baO6VH3rw8938mOnAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.204.0/22
45.140.140.0/22
45.140.188.0/22
IPv6:
2a07:e345:100::/40
Signature Algorithm: sha256WithRSAEncryption
2a:07:f3:2f:bd:4d:f4:de:cb:76:55:c8:a6:0d:1a:71:7e:70:
75:d1:10:cc:aa:ef:0f:60:82:0e:1a:97:82:16:c9:6d:a2:0e:
fb:4c:a6:12:09:28:67:0d:00:75:36:00:33:22:31:04:11:f0:
5b:27:9e:c5:be:fe:3b:59:75:92:13:9f:43:f5:d5:6a:d3:4f:
4b:64:8a:fb:16:56:ae:87:4c:49:1b:91:b4:38:31:0c:5f:cf:
38:ea:43:b8:fa:a3:e7:33:fb:b8:dc:1d:76:ef:22:af:11:4c:
81:e2:84:ee:a1:96:2b:be:95:e9:34:3c:ea:28:63:2f:eb:03:
f6:ec:08:71:d9:86:a3:85:77:13:ed:2d:c3:df:92:0a:e0:09:
51:ec:75:9d:51:8b:10:c5:2f:9c:75:2e:bc:dd:a5:b6:07:53:
93:2d:ee:bc:e0:c7:30:37:8a:dc:94:42:10:92:55:72:39:0b:
4c:79:ca:3b:bf:2b:4b:7c:e5:da:41:f4:63:cd:32:0c:67:3f:
4c:c7:66:a1:8b:b6:fe:a8:dc:7f:92:c1:94:65:57:26:f1:50:
fe:d7:ae:59:23:67:b6:8b:a6:16:7d:c9:c1:fa:d9:1f:6a:7b:
54:c6:41:5b:70:59:ef:d2:95:00:1f:cc:a7:cb:d4:53:e7:86:
9c:66:97:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org