Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/hANtyKA96fBiX053Lkw9afapkFU.roa
File: hANtyKA96fBiX053Lkw9afapkFU.roa (raw, json)
Hash identifier: 896hILVt08Fzfr7dCqTXGlTY1WnGFxDoQ3DX2ywbKeY=
Subject key identifier: 84:03:6D:C8:A0:3D:E9:F0:62:5F:4E:77:2E:4C:3D:69:F6:A9:90:55
Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial: 07944740
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/hANtyKA96fBiX053Lkw9afapkFU.roa
Signing time: Sat 01 Jan 2022 08:53:07 +0000
ROA not before: Sat 01 Jan 2022 08:53:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42675
IP address blocks: 45.148.16.0/24 maxlen: 24
45.148.16.0/22 maxlen: 22
46.227.64.0/21 maxlen: 21
193.187.88.0/22 maxlen: 22
2a0c:dd40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127158080 (0x7944740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Validity
Not Before: Jan 1 08:53:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84036dc8a03de9f0625f4e772e4c3d69f6a99055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:5b:9e:bf:19:f1:7b:40:8a:b1:eb:cb:33:
48:e7:16:69:a0:cc:b1:b2:2d:91:0d:4f:35:2d:88:
1a:9d:01:b5:c0:06:bb:01:1d:09:cb:b3:41:0d:c8:
e7:99:3a:69:6a:04:da:d0:f2:e3:67:98:f1:9f:79:
4b:55:a7:08:be:9e:cd:e6:75:f8:dc:1e:f6:52:53:
1b:fd:2a:f1:24:98:6a:49:69:1d:1c:3c:d1:05:48:
f0:6c:57:83:1a:f5:4e:e6:b3:43:b5:38:15:93:d1:
de:43:8a:65:b3:4d:6d:25:62:9c:16:f3:95:c4:fe:
34:c7:07:12:0c:a4:8a:f3:53:2c:c9:78:fb:4f:d8:
c6:e8:38:38:29:1d:81:8e:20:81:11:cd:83:b7:b5:
de:b5:f4:d4:84:47:26:27:70:4c:75:a0:2b:54:10:
12:cf:63:9c:06:7a:0b:7c:cb:c0:b0:ba:15:80:0a:
d5:1d:c1:db:0d:29:00:e4:c2:29:61:b8:be:41:23:
b3:0a:73:1d:22:79:39:f9:c7:c0:24:01:46:bd:04:
37:3f:30:1c:95:09:26:db:25:80:61:76:69:a2:db:
5d:b0:1c:a2:79:8a:e9:a3:ce:60:0b:6b:31:09:03:
c8:34:56:50:6b:b3:1d:6e:49:f0:34:55:05:28:66:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:03:6D:C8:A0:3D:E9:F0:62:5F:4E:77:2E:4C:3D:69:F6:A9:90:55
X509v3 Authority Key Identifier:
keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/hANtyKA96fBiX053Lkw9afapkFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.16.0/22
46.227.64.0/21
193.187.88.0/22
IPv6:
2a0c:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
20:f7:5d:94:75:27:92:23:da:6b:63:84:04:30:cf:1a:28:2a:
0d:1e:ee:48:26:2a:d2:bb:ab:cf:eb:a6:95:3b:66:06:41:da:
a7:f0:76:e5:01:a7:15:3c:8b:5b:b3:77:05:1f:f3:d9:5e:25:
09:ea:41:47:82:22:f6:7c:b6:fc:9a:f0:32:43:fc:36:f6:9c:
80:be:24:d6:d1:88:dd:6c:34:e9:98:b5:d5:73:8f:e6:3c:8f:
04:86:23:77:8c:40:f1:8d:f7:d5:d6:9b:cd:9c:ce:99:fc:d1:
bf:bc:c3:9a:72:9b:02:a9:86:92:11:93:1e:92:1a:8b:a4:b8:
44:ef:17:a1:d9:ac:f9:ed:b9:64:ba:c1:85:ed:50:c9:24:b0:
a0:34:ee:96:22:58:03:32:ac:98:ed:d0:74:db:e9:a0:d5:f9:
8a:b2:5b:6c:e9:d4:d7:8a:05:d7:b7:20:26:7e:8c:96:6b:e8:
2a:39:c0:38:62:23:f7:91:0b:80:1d:73:8e:4a:ba:fc:ba:98:
29:2d:c8:34:31:60:65:63:7a:b2:2b:c8:cf:d3:4c:6f:61:ac:
fc:01:14:25:f8:5b:8a:3a:6d:c7:18:c1:7a:3f:27:53:ce:f8:
03:b6:15:e0:94:8d:61:66:79:f7:40:d7:6f:3a:8e:6a:c0:8a:
87:72:88:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org