Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XU1HRVYVRL6nQNnYEHQjNghwiCo.roa
File: XU1HRVYVRL6nQNnYEHQjNghwiCo.roa (raw, json)
Hash identifier: /enu8hl7757/GYj2qAAY7gzBU09lmefny2ZhNJn0/hY=
Subject key identifier: 5D:4D:47:45:56:15:44:BE:A7:40:D9:D8:10:74:23:36:08:70:88:2A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1AB91272
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XU1HRVYVRL6nQNnYEHQjNghwiCo.roa
Signing time: Wed 16 Mar 2022 19:55:10 +0000
ROA not before: Wed 16 Mar 2022 19:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211826
IP address blocks: 45.94.31.0/24 maxlen: 24
45.139.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 448336498 (0x1ab91272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 16 19:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d4d4745561544bea740d9d8107423360870882a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:77:1b:d2:e9:47:67:e6:6f:b2:45:1b:98:
3c:f4:0d:5e:cd:f0:5e:92:54:8b:f6:3a:67:a0:8c:
0b:5f:21:5f:f5:91:fb:56:57:ba:8a:87:4a:29:90:
c6:40:5b:97:7b:1d:f2:e7:ba:37:4b:25:f9:ba:5d:
75:46:ff:9a:4e:35:a9:ea:82:62:c3:0c:95:d1:8a:
fc:61:89:f7:65:12:69:31:5f:f5:99:02:d2:f1:87:
74:95:35:e0:cf:40:d7:5a:f1:a0:14:cb:40:ef:ff:
81:fd:80:bf:7d:cb:7e:55:41:82:28:bf:11:e1:d6:
d0:cb:ee:5b:d5:ca:01:0a:8c:12:d9:80:f5:a7:f2:
db:1f:28:27:6e:03:c4:9b:24:77:0a:7e:eb:a3:30:
d8:90:3a:58:2c:8b:94:c3:a9:59:ee:7a:df:0f:92:
76:2c:3b:aa:6d:2d:a8:6e:1d:18:f7:f3:77:fa:3b:
cf:d8:e9:8b:78:4b:18:af:dc:3c:52:5f:1e:8b:9f:
e8:a6:a8:cf:e5:52:e6:c9:97:3c:97:af:f9:11:c4:
90:60:4f:cf:98:48:21:d6:0c:d4:b1:8c:4b:40:c6:
4b:59:74:5c:ab:81:02:3b:38:b3:16:5b:5f:f3:76:
89:16:6f:fa:8f:10:3f:07:d8:49:5b:5a:a8:5e:33:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4D:47:45:56:15:44:BE:A7:40:D9:D8:10:74:23:36:08:70:88:2A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/XU1HRVYVRL6nQNnYEHQjNghwiCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.31.0/24
45.139.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:6e:85:9e:42:ca:34:ab:c9:10:94:2f:2a:d7:f4:7b:89:ff:
c1:79:2c:5b:6c:f1:c0:4e:9a:65:1b:20:a4:24:bc:78:d1:6e:
37:38:d9:e5:12:88:22:4e:e9:96:37:92:2e:54:bf:d7:20:10:
35:38:ae:25:8f:33:be:38:83:d8:40:2e:22:26:35:94:22:da:
3a:92:15:71:05:94:d2:c3:f4:a4:0a:de:ec:f5:d7:34:90:60:
96:3c:9e:fc:69:cf:12:dc:86:53:41:ff:f7:78:46:f7:86:47:
c7:83:e3:9e:cc:ee:83:4f:2e:7a:47:38:9b:a1:dd:bb:ca:31:
ca:63:1b:4e:f8:0d:7e:3b:6e:0c:6f:63:5a:2f:bd:f8:e7:bc:
73:11:d2:16:a1:a8:59:83:ce:a0:54:e5:43:21:b2:2f:ea:94:
64:64:c1:6a:48:52:0f:33:1d:45:50:50:d0:3b:b5:89:16:76:
98:f0:7e:8d:86:11:72:05:bd:36:fa:f4:49:f6:4f:21:9d:9d:
87:10:cd:45:e8:33:6c:a8:a4:ba:80:b4:78:97:2d:c4:00:75:
5e:4d:35:f6:be:93:6a:73:4a:14:8b:f6:16:6d:31:9c:b4:a7:
52:ee:a7:d2:4d:84:80:51:73:66:e9:37:38:6b:1e:79:70:7e:
e8:79:44:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org