Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HvUOpXk8CF1LQLJoZ8ttPC6mIV0.roa
File: HvUOpXk8CF1LQLJoZ8ttPC6mIV0.roa (raw, json)
Hash identifier: lR3BgKmk+pys44KZP5C7dZ+oLlee+i/Y8qZ8wr/RBoc=
Subject key identifier: 1E:F5:0E:A5:79:3C:08:5D:4B:40:B2:68:67:CB:6D:3C:2E:A6:21:5D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0182B66B365D7B916A9B38E112444E7E3D2E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HvUOpXk8CF1LQLJoZ8ttPC6mIV0.roa
Signing time: Fri 19 Aug 2022 14:04:15 +0000
ROA not before: Fri 19 Aug 2022 14:04:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7979
IP address blocks: 45.152.197.0/24 maxlen: 24
193.5.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:6b:36:5d:7b:91:6a:9b:38:e1:12:44:4e:7e:3d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 14:04:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ef50ea5793c085d4b40b26867cb6d3c2ea6215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:59:a0:28:06:bd:be:4e:fa:81:8d:a7:d8:
45:1c:97:b5:38:bb:1b:25:d2:25:74:1a:7e:56:80:
28:8b:f5:b7:21:7b:3e:92:f1:85:99:67:7f:81:a3:
8f:4e:e1:c6:57:63:67:ac:28:85:d2:13:59:21:38:
a5:93:76:9f:b4:65:bd:62:0c:74:dc:13:82:9b:2a:
2e:7b:67:7f:33:f1:9a:8f:d7:ea:e1:86:0d:c3:24:
e3:00:cc:c9:7b:91:21:53:0c:d0:f5:5e:ba:0d:af:
1f:b7:5b:c2:bf:f6:ca:b5:e5:4e:ba:a1:e2:83:96:
e5:1a:49:2e:e4:c5:be:96:95:8a:5b:e9:80:29:d3:
45:fc:92:c6:c5:e8:a8:22:e8:d8:c8:50:46:43:22:
42:ef:ba:4c:71:a4:09:02:c4:67:13:05:f6:77:db:
ed:9d:18:20:3d:2f:93:39:63:5c:df:24:12:26:e2:
fe:ca:e8:fc:72:a4:7d:3b:e7:f4:d4:fb:ac:2a:4b:
d4:87:49:63:be:12:6d:b8:20:33:87:eb:07:1f:f2:
d8:2b:1a:7f:2e:23:47:41:0e:a9:3b:4f:20:42:b3:
79:96:d8:92:9c:ff:5d:c1:61:66:43:e0:11:a0:76:
53:2a:ed:88:c9:31:f7:7c:5f:56:4c:84:3e:7e:3d:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F5:0E:A5:79:3C:08:5D:4B:40:B2:68:67:CB:6D:3C:2E:A6:21:5D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HvUOpXk8CF1LQLJoZ8ttPC6mIV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.197.0/24
193.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9b:48:55:58:47:ac:75:29:e3:ae:24:58:30:f2:cd:5e:0e:
cb:e2:2d:ec:2d:9e:4c:c4:2a:8a:7b:b2:e5:9e:71:fc:e2:1a:
ca:9c:92:20:40:46:15:76:b3:b9:9b:ea:70:4b:44:60:3c:91:
6f:3e:37:0f:79:fb:2d:4e:cc:33:f3:7f:d9:a9:c6:4e:10:55:
d5:62:96:a5:07:5f:d1:6e:9a:d6:1d:d1:27:17:7c:18:5c:69:
6e:92:18:6a:a4:90:8c:1a:10:db:8b:7b:e5:02:c8:2d:4a:96:
53:26:c3:37:1d:ca:b0:0b:39:ce:d6:a3:49:6b:52:c4:c9:b5:
58:98:69:85:8b:da:74:84:c7:7c:fc:15:1e:60:0f:6e:1e:ff:
ca:9c:07:2f:ab:ff:b1:cd:cf:3c:69:7a:9a:b7:ca:fc:83:6c:
5a:c8:5d:69:85:aa:85:9a:db:78:56:b5:30:74:87:76:1a:f4:
19:ae:4a:0e:b1:41:c1:3c:ed:35:bb:c7:ae:54:0b:72:4b:a0:
9f:7f:0c:16:1e:e3:5e:8e:23:53:96:8f:ff:20:7f:4e:43:7c:
8a:7e:16:65:56:3c:61:ad:02:0c:1f:e0:ea:da:a3:f4:72:a1:
44:07:87:0e:c0:63:6b:77:11:b9:e3:dc:c7:c0:14:5a:b1:a7:
76:0c:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:47 2025 by rpki-client