Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/hUIySFjKuNLHCgyDdbr7R3aLxd4.roa
File: hUIySFjKuNLHCgyDdbr7R3aLxd4.roa (raw, json)
Hash identifier: Pu0MuoFkjnOQCOnVafDpIq+0HjEtyXQQ9AZhQfm2Fmc=
Subject key identifier: 85:42:32:48:58:CA:B8:D2:C7:0A:0C:83:75:BA:FB:47:76:8B:C5:DE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1BAE068E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/hUIySFjKuNLHCgyDdbr7R3aLxd4.roa
Signing time: Tue 14 Jun 2022 08:41:44 +0000
ROA not before: Tue 14 Jun 2022 08:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60798
IP address blocks: 45.138.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464389774 (0x1bae068e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 14 08:41:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8542324858cab8d2c70a0c8375bafb47768bc5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:41:ea:09:d0:ca:43:4a:dc:c2:3e:a0:89:
cf:d7:12:cf:96:44:68:3f:b7:f6:34:c0:f6:80:d5:
42:e7:2e:fa:4c:bf:c0:b6:90:28:82:ca:df:79:a3:
a7:c9:34:52:f9:f5:3b:02:c1:4f:47:89:fa:a7:17:
94:4a:e5:2b:b1:e6:96:13:bf:65:06:db:bf:cb:67:
d8:68:b1:30:70:e6:0e:9d:3f:46:fc:f7:0e:b9:92:
5b:af:b1:8e:5e:63:92:28:1a:d5:9b:ec:bc:ed:d8:
c3:70:75:20:8b:97:f5:e6:8d:d9:0d:42:9a:02:08:
fa:27:af:d7:0e:ce:ca:fc:f0:24:ca:86:3d:68:72:
e7:c1:fc:d5:04:12:b1:05:ba:f0:02:1d:04:e5:ac:
bf:16:c5:c2:75:23:9d:1d:ae:6c:e7:38:d9:1e:b4:
d7:16:2d:15:6e:14:41:9e:e2:50:dc:9b:1c:e7:be:
3d:6e:38:9f:d7:cc:e0:3f:8b:53:eb:dc:b6:4b:46:
b6:03:ec:b4:d4:f4:cb:9b:a1:5c:80:ae:7f:1a:11:
9c:59:67:97:fd:25:e6:42:7a:0c:96:ad:ad:1a:15:
8f:c0:28:96:eb:ae:fa:1e:3e:2f:ab:f0:d3:c0:1d:
b6:52:f7:86:22:85:91:d3:3e:2e:e9:63:26:09:15:
00:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:42:32:48:58:CA:B8:D2:C7:0A:0C:83:75:BA:FB:47:76:8B:C5:DE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/hUIySFjKuNLHCgyDdbr7R3aLxd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:c5:a8:f0:da:8d:47:02:1e:b2:38:11:1b:c0:19:3f:19:13:
90:c9:83:c4:74:ed:0b:ba:9a:7d:6c:12:fc:da:53:40:fa:9a:
1b:aa:33:f8:32:13:6c:2b:80:a8:30:23:2f:fb:8d:05:2c:71:
7e:8f:44:3c:ab:46:ae:bf:28:67:11:4f:80:d4:cb:50:fc:38:
dd:66:17:d7:0c:10:0d:fb:8e:1b:6f:a5:02:eb:c1:61:2e:d3:
64:c3:49:08:7a:6c:1c:cd:0f:60:58:f3:b4:40:2b:ab:a1:be:
8e:33:49:48:45:8d:8d:f3:74:29:d9:09:e3:5f:a3:54:32:71:
6a:0d:48:3f:e0:19:4d:48:0a:e2:10:61:ea:5b:15:a5:d3:36:
b2:44:34:0b:31:d4:d5:72:8a:68:3b:bc:7d:c6:23:85:c6:cf:
df:49:e3:bb:6f:fc:30:3d:84:c5:d4:61:23:b7:b9:eb:95:d8:
cf:12:d1:4a:ee:d6:c4:98:65:17:46:27:58:df:0f:5f:ae:9e:
11:7c:ac:bf:e0:9b:90:8a:8e:74:43:38:b5:40:2d:84:ce:7a:
1c:44:6f:fa:56:66:5b:77:6a:81:d7:0a:9a:e8:5b:9b:76:86:
44:4b:7c:ae:98:08:41:24:ff:64:cd:c8:87:b8:be:c5:e5:ae:
a8:71:02:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org