Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Hnw0Pj7BXzfE3FJ06LXMb5Zd3Yk.roa
File: Hnw0Pj7BXzfE3FJ06LXMb5Zd3Yk.roa (raw, json)
Hash identifier: L1oj6pgqLdLcQJtRn8NvWdqQtIIb3Gt3uXZ+r4uJP6I=
Subject key identifier: 1E:7C:34:3E:3E:C1:5F:37:C4:DC:52:74:E8:B5:CC:6F:96:5D:DD:89
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1AE7AC2C
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Hnw0Pj7BXzfE3FJ06LXMb5Zd3Yk.roa
Signing time: Sat 02 Apr 2022 10:53:07 +0000
ROA not before: Sat 02 Apr 2022 10:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212477
IP address blocks: 45.140.140.0/22 maxlen: 24
45.140.188.0/22 maxlen: 24
2a07:e345:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451390508 (0x1ae7ac2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 2 10:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e7c343e3ec15f37c4dc5274e8b5cc6f965ddd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:c3:2f:0e:e1:56:ce:08:3b:07:f0:ea:f0:
a5:12:c0:8c:12:83:f3:d0:b9:76:1a:45:08:97:bf:
b7:5c:d7:08:1b:5b:b9:08:ea:a4:22:9c:ad:eb:57:
3a:44:47:d0:d4:61:2f:d0:c9:0e:c4:83:67:db:50:
8c:70:14:9b:c0:f1:40:46:d4:5c:3b:6f:77:ca:51:
d0:3e:00:5e:af:f1:ca:c2:0e:03:b6:75:0b:04:7b:
c9:07:c3:1f:05:c2:7c:a6:a1:59:1d:37:b4:51:fb:
19:fd:49:f9:dd:05:45:fe:b6:62:1a:85:b7:d2:6d:
0e:a4:8b:e3:64:16:35:1c:2e:5a:1f:35:0d:c2:90:
4e:3a:5d:f8:88:e8:8c:5b:e6:ff:08:de:6e:30:0a:
9e:8e:64:08:7f:ec:68:af:34:10:5c:bc:23:28:05:
5d:42:c6:c4:94:af:50:33:f6:bd:19:82:a3:d9:22:
19:ec:0f:51:01:a3:a8:01:a4:54:c4:ee:80:7e:0c:
38:61:5f:be:60:a3:35:75:35:e3:74:0d:3f:ac:0f:
68:31:57:ef:0c:6b:fc:fe:18:b6:6e:f7:ec:d3:95:
57:09:c8:b1:f6:16:53:92:59:39:21:47:54:76:cb:
0f:57:ac:45:f8:68:18:f2:e6:9c:b2:1b:e4:b6:9a:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:34:3E:3E:C1:5F:37:C4:DC:52:74:E8:B5:CC:6F:96:5D:DD:89
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Hnw0Pj7BXzfE3FJ06LXMb5Zd3Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.140.0/22
45.140.188.0/22
IPv6:
2a07:e345:100::/40
Signature Algorithm: sha256WithRSAEncryption
93:6e:ad:9d:bb:ff:f4:be:60:06:bb:f9:54:81:5d:6c:46:fc:
43:ad:e6:c7:73:6e:13:e8:95:6d:d4:1e:04:c2:d3:fc:5b:56:
7a:05:ea:31:6c:d0:b1:2e:4f:3b:75:bb:15:cb:0a:ac:28:2c:
cc:ae:85:b2:6b:07:29:26:76:36:93:ff:73:1e:ae:f0:4f:e1:
fb:b5:c3:2f:12:cc:c4:54:31:b6:3f:4e:2b:62:c4:50:0b:22:
5d:54:95:f6:3d:82:14:86:5f:af:5b:50:79:ad:81:f1:c6:64:
c2:fc:5c:a3:d5:4d:69:5a:8d:12:fa:c9:2e:14:37:11:77:e4:
e4:f6:56:fe:1e:38:77:15:a0:58:e2:ed:f9:e9:93:35:eb:94:
de:38:bd:dc:d7:05:55:c1:fb:dc:39:7a:7e:d1:10:7a:df:39:
1e:e6:06:2f:94:5b:ff:74:76:99:8b:5b:f7:26:cc:d8:3e:b5:
c7:f4:bf:93:e0:dc:84:cd:46:13:7b:92:69:b9:fc:1f:4a:83:
68:20:07:7f:cf:df:3f:4a:1c:bb:84:62:ca:84:5f:49:8b:90:
15:f0:4c:48:d4:c2:71:3b:17:e8:c2:7b:8e:9e:40:83:94:5d:
c7:ae:97:ef:06:b0:06:23:22:38:51:68:3b:33:ca:d1:95:81:
30:eb:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org