Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/hc4yCzNgz5d9y_lXD5l9SKTp634.roa
File: hc4yCzNgz5d9y_lXD5l9SKTp634.roa (raw, json)
Hash identifier: on2ueOGX87HeoaLy9T4JCZnMYizsni3/8kk59R4nKqs=
Subject key identifier: 85:CE:32:0B:33:60:CF:97:7D:CB:F9:57:0F:99:7D:48:A4:E9:EB:7E
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 018C3F4BB319DC346DF402ED22F8F77B2139
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/hc4yCzNgz5d9y_lXD5l9SKTp634.roa
Signing time: Wed 06 Dec 2023 13:22:54 +0000
ROA not before: Wed 06 Dec 2023 13:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 45.82.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:4b:b3:19:dc:34:6d:f4:02:ed:22:f8:f7:7b:21:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Dec 6 13:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85ce320b3360cf977dcbf9570f997d48a4e9eb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:f9:db:9a:2f:e8:31:fb:d5:ea:ef:77:12:
5f:36:e2:0a:8c:bc:c7:74:47:14:85:dc:12:a0:eb:
b8:98:d2:e4:44:28:3a:9e:15:16:21:72:0c:40:91:
44:32:90:e1:8b:67:31:0a:82:98:d9:6c:7f:fa:98:
82:c0:f1:4a:91:b2:13:1c:dd:bc:bb:7c:02:d0:b9:
d6:c3:5b:2b:df:67:43:85:1e:2c:46:be:b3:49:72:
3f:7a:81:dc:57:62:f6:66:86:c9:6c:a3:fc:8c:9f:
6d:e3:94:37:d3:9d:40:58:2a:36:b5:c3:67:6e:ea:
c2:67:cc:db:f8:84:98:db:80:52:73:73:32:a0:f9:
f5:e1:f1:2a:15:b2:e7:ec:f0:22:f0:62:20:75:2e:
d1:37:c4:dd:94:4e:2e:d5:c9:73:22:0c:f9:7c:86:
4e:2a:71:9c:a6:e9:d7:a3:eb:08:eb:d3:5d:7c:e2:
f9:64:16:5b:a2:bc:96:38:8a:d0:b6:13:e3:dc:ca:
3f:f6:77:91:e4:3f:fb:66:87:0e:cd:53:38:ea:1f:
71:04:e1:89:a3:ae:0b:94:b5:1c:04:c7:38:df:8e:
34:99:74:96:a8:5c:14:5a:68:e0:53:c3:d8:63:8d:
3e:d6:be:49:11:7b:4a:4d:25:07:18:53:5d:00:3e:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CE:32:0B:33:60:CF:97:7D:CB:F9:57:0F:99:7D:48:A4:E9:EB:7E
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/hc4yCzNgz5d9y_lXD5l9SKTp634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.42.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7d:a7:dc:16:9c:b3:19:02:1a:63:63:8c:e3:5f:9d:31:e9:
3f:da:46:76:f2:4e:5b:5f:93:e7:2e:a0:8e:db:8b:d0:ed:aa:
1c:bd:04:e0:ef:07:3c:48:3a:da:51:58:77:0f:51:56:54:e7:
fc:53:44:cc:c7:2f:9a:4e:9c:42:50:19:fd:10:d0:3b:c6:7c:
0f:ed:78:59:3e:d8:b8:59:d2:26:98:2c:38:a6:58:40:d8:af:
e5:8e:f9:22:8f:ec:7a:c9:94:16:f6:d6:eb:73:4c:22:66:d5:
98:3b:c2:f4:35:b4:f0:53:16:bb:63:d8:08:14:d4:43:a6:d0:
c9:ab:fa:f0:5f:f1:24:1c:0f:af:54:9e:df:52:1f:46:52:58:
a8:7c:6c:6e:c6:19:8e:27:c3:ea:9f:c2:0b:77:0f:32:e1:13:
2c:08:52:08:03:46:eb:d1:c3:7c:29:1a:2b:30:7f:ae:18:a5:
1e:df:78:b0:fb:1d:c1:43:75:9b:96:d9:d6:17:3a:c0:c8:6f:
b9:43:49:5d:92:d5:3c:63:6f:24:7c:8f:95:ac:9d:1c:c0:d9:
2c:bb:e3:c5:44:8f:b1:29:56:94:cc:9c:78:99:f7:4b:a9:e4:
7c:99:92:a6:d9:45:f6:60:cc:79:4f:fb:c3:26:b4:13:bd:f7:
45:89:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:35 2025 by rpki-client