Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HV62KLF8UQ5yRjG1sYyU8VX_XaQ.roa
File: HV62KLF8UQ5yRjG1sYyU8VX_XaQ.roa (raw, json)
Hash identifier: 1yvp0zfy4ptCB6Xmrqyx+cas5n0etArJ8D/mv04dPxA=
Subject key identifier: 1D:5E:B6:28:B1:7C:51:0E:72:46:31:B5:B1:8C:94:F1:55:FF:5D:A4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DD9E4B2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HV62KLF8UQ5yRjG1sYyU8VX_XaQ.roa
Signing time: Mon 11 Apr 2022 07:51:33 +0000
ROA not before: Mon 11 Apr 2022 07:51:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 203.25.124.0/24 maxlen: 24
37.46.151.0/24 maxlen: 24
194.5.84.0/24 maxlen: 24
193.84.134.0/24 maxlen: 24
194.242.3.0/24 maxlen: 24
193.26.114.0/24 maxlen: 24
45.144.224.0/24 maxlen: 24
185.165.44.0/24 maxlen: 24
46.229.255.0/24 maxlen: 24
185.150.0.0/24 maxlen: 24
91.190.107.0/24 maxlen: 24
203.159.82.0/24 maxlen: 24
185.217.118.0/24 maxlen: 24
203.159.90.0/24 maxlen: 24
185.228.226.0/24 maxlen: 24
185.244.220.0/24 maxlen: 24
89.31.218.0/24 maxlen: 24
194.76.134.0/24 maxlen: 24
45.133.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232383666 (0xdd9e4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 11 07:51:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d5eb628b17c510e724631b5b18c94f155ff5da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:07:7f:20:72:70:95:8f:66:36:c0:3b:6d:3a:
6d:12:fe:47:30:60:7f:08:f5:94:c1:38:34:fe:d1:
f5:7b:db:0c:7a:6b:c5:52:6a:64:d1:11:5e:d5:d8:
c9:2e:8c:b3:cc:22:15:6d:02:23:66:0e:90:31:ed:
cb:1a:11:60:d5:35:ff:77:45:fb:40:9b:b2:0a:7e:
bf:8d:94:aa:99:33:60:b2:bd:9e:7e:f0:d4:89:0c:
15:5d:81:fa:cb:86:6a:91:2d:5f:76:9c:e3:14:8c:
fa:9f:a9:87:5f:dd:bd:08:5e:d4:a3:c0:32:b8:ef:
95:ba:6f:68:d7:47:0a:0b:35:ac:bf:6c:66:de:9d:
f7:fb:1c:3c:09:fb:b2:60:3e:af:e5:50:8c:04:ac:
26:57:62:9c:0f:e8:54:09:fe:5a:28:bd:b2:0b:19:
b6:ae:b1:58:bf:50:ca:58:15:53:39:b9:f8:27:7f:
15:5e:71:45:04:43:df:cf:21:3d:89:a8:90:f6:4e:
a8:83:80:83:84:21:a7:74:7c:db:e6:70:e1:f3:57:
5c:be:a0:fa:17:a4:eb:b1:38:24:ee:86:68:6e:0f:
d9:b3:4c:bf:66:51:3f:15:40:3f:04:78:fa:f6:26:
c8:26:5a:5c:f7:51:65:bb:1d:d5:6b:14:97:31:88:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:B6:28:B1:7C:51:0E:72:46:31:B5:B1:8C:94:F1:55:FF:5D:A4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/HV62KLF8UQ5yRjG1sYyU8VX_XaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.151.0/24
45.133.0.0/24
45.144.224.0/24
46.229.255.0/24
89.31.218.0/24
91.190.107.0/24
185.150.0.0/24
185.165.44.0/24
185.217.118.0/24
185.228.226.0/24
185.244.220.0/24
193.26.114.0/24
193.84.134.0/24
194.5.84.0/24
194.76.134.0/24
194.242.3.0/24
203.25.124.0/24
203.159.82.0/24
203.159.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:09:77:23:c8:d9:21:ca:3b:23:cd:ca:ff:71:41:20:ae:aa:
9a:f4:6c:18:95:02:7d:5d:9f:fd:f8:9f:f1:66:f9:dd:5c:96:
0a:bb:42:fe:29:f4:2d:64:bf:f0:02:42:f2:e7:12:95:0c:a3:
a8:da:94:34:39:3e:68:cb:49:b1:0b:c2:77:60:78:3f:08:5f:
3b:c5:2a:61:51:6e:c3:dd:25:de:18:de:82:d0:c3:ef:82:1b:
86:c7:96:76:d1:08:3d:7c:fe:63:5c:23:ca:ca:63:5a:2b:d5:
55:8e:ff:62:c1:c3:e1:5e:8e:56:d1:43:4b:43:1e:21:73:4b:
5e:2c:29:e7:0e:fc:19:2d:2c:dd:4b:ec:80:b3:38:c3:94:d8:
37:8a:3b:3d:6e:89:12:8d:41:d3:d3:24:1e:40:e8:94:47:60:
0c:6f:23:51:1f:f0:83:91:bd:79:0e:50:15:18:38:4d:6e:2c:
f5:6c:ee:92:d7:78:c3:4e:ff:1f:7b:f5:ab:26:48:58:0a:50:
55:1c:fa:de:72:0b:6f:77:34:4c:12:41:47:46:d3:85:2d:d5:
a2:ad:8b:61:38:f8:bf:05:a5:0c:9e:09:8e:a6:7d:46:40:bf:
89:6d:63:f6:93:8e:c1:0c:d3:18:2a:79:bd:78:46:9f:c0:39:
95:1a:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org