Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hirsp763-vuAeYZE-NqiyApgxLY.roa
File: hirsp763-vuAeYZE-NqiyApgxLY.roa (raw, json)
Hash identifier: Wkvtva2Uzp0OyamfLOm9AZG6nLFCLUM7TyJeaYbZubE=
Subject key identifier: 86:2A:EC:A7:BE:B7:FA:FB:80:79:86:44:F8:DA:A2:C8:0A:60:C4:B6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 02619C1E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hirsp763-vuAeYZE-NqiyApgxLY.roa
Signing time: Wed 16 Mar 2022 08:04:37 +0000
ROA not before: Wed 16 Mar 2022 08:04:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 45.86.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39951390 (0x2619c1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 16 08:04:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=862aeca7beb7fafb80798644f8daa2c80a60c4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:e4:1e:4c:92:e7:8f:37:c6:55:8c:7b:1f:
6d:77:d6:dd:3d:d5:7f:f4:7a:2f:1c:80:bd:5e:b4:
99:55:7c:dc:d6:da:23:9e:71:0b:fc:ee:4f:8f:d2:
9f:37:e7:01:7d:12:64:a3:fa:7e:57:1c:c5:f9:e8:
ef:42:dd:5c:d6:e0:81:2c:fa:2b:d2:18:f2:7b:f4:
df:2f:cc:01:e9:a6:bd:13:4d:16:c7:ea:73:99:5f:
48:33:be:5d:2c:4e:2d:d6:67:cc:da:2c:f9:25:ac:
99:06:52:a8:df:9b:b3:d8:4c:b7:6a:34:52:7d:83:
96:1b:80:75:7f:11:53:00:5b:99:ef:5b:18:b3:dd:
00:49:35:fb:66:16:ac:d5:db:96:06:e2:b5:4f:55:
4d:7c:57:a1:d4:96:8d:ca:21:7b:85:6b:ea:24:7b:
e3:48:f3:59:50:e3:28:10:a0:b5:27:73:f5:07:60:
75:11:a2:87:43:38:48:9e:fc:59:c5:d9:23:71:50:
9f:2a:98:41:cb:98:5a:99:f0:ba:60:54:b7:e5:2b:
64:75:9b:8b:41:b7:12:57:34:19:3c:0d:e5:45:86:
6e:92:fc:23:45:5a:6d:0f:49:f6:25:d5:47:50:f5:
23:b2:6a:b4:45:24:1e:8e:4c:09:ed:c5:6d:1e:32:
de:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:EC:A7:BE:B7:FA:FB:80:79:86:44:F8:DA:A2:C8:0A:60:C4:B6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hirsp763-vuAeYZE-NqiyApgxLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.246.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c8:d0:86:05:bc:0e:cf:65:63:f6:89:ac:c0:6b:c3:bf:8b:
6c:ec:34:27:ac:7c:fb:3f:f5:04:b4:b6:f1:b1:5a:8f:f3:fd:
79:50:3e:49:aa:ba:22:62:be:bc:3c:f2:d0:52:fb:cc:93:74:
c0:94:08:82:26:a6:ea:6a:61:af:a2:57:9e:8e:f9:b1:d8:26:
5b:fa:21:19:9c:4f:2f:0b:30:93:1f:ff:67:65:47:8c:e7:52:
9c:b2:f1:a4:98:1a:55:7e:27:a3:f5:8e:5b:d8:4b:81:81:a4:
7c:cc:4d:14:99:7d:99:b5:d8:6e:b5:67:4d:a9:96:02:20:81:
cb:1e:89:59:a8:67:3c:09:4f:83:cc:ba:0e:2f:3c:ab:de:f2:
4b:6d:fb:ca:ba:fc:36:a9:b5:76:c0:bb:5c:6a:76:71:0f:f4:
da:61:d3:e1:02:72:b9:9d:b4:7b:a8:21:1f:bc:60:bc:22:f8:
17:d8:79:7d:8e:c7:e2:9d:83:cc:ad:50:93:ca:ae:15:0c:1f:
fc:0a:fe:0d:97:7e:49:00:34:d0:a3:9a:12:37:da:40:8b:3c:
8e:7f:95:68:0d:ff:eb:b7:69:2b:d8:61:06:fa:17:c6:d6:55:
ae:34:63:52:cb:f1:4c:3d:9d:07:b4:41:01:86:5e:bd:b4:45:
1c:2d:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:54 2025 by rpki-client