Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/hM7cFXnIl2Gqm7ITjhC26NzYXbw.roa
File: hM7cFXnIl2Gqm7ITjhC26NzYXbw.roa (raw, json)
Hash identifier: cn7trTib13mVcKxnZCLesd0FwlT3NYYolCTAWEnoOWE=
Subject key identifier: 84:CE:DC:15:79:C8:97:61:AA:9B:B2:13:8E:10:B6:E8:DC:D8:5D:BC
Certificate issuer: /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial: D1D7E4
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/hM7cFXnIl2Gqm7ITjhC26NzYXbw.roa
Signing time: Sat 01 Jan 2022 06:52:53 +0000
ROA not before: Sat 01 Jan 2022 06:52:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207944
IP address blocks: 45.151.176.0/22 maxlen: 22
45.151.176.0/24 maxlen: 24
45.151.179.0/24 maxlen: 24
45.151.178.0/24 maxlen: 24
45.151.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13752292 (0xd1d7e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Validity
Not Before: Jan 1 06:52:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84cedc1579c89761aa9bb2138e10b6e8dcd85dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:25:4d:4a:68:16:36:ff:4a:7d:cd:9c:a9:
8c:0b:3b:68:83:06:dd:2a:72:f2:3c:a0:23:a7:18:
a5:44:42:d6:ca:52:57:ff:87:8d:e6:66:d5:18:f5:
e1:ea:05:2a:92:74:ad:30:88:40:60:36:3e:98:04:
c3:e4:63:82:7e:da:b5:fc:a0:72:c1:9a:a4:6a:9d:
91:42:7e:8a:c5:8f:02:44:58:cf:97:59:43:0c:1c:
c1:15:b6:63:5a:4b:2b:4a:42:03:d8:48:b5:2c:e5:
bc:f5:62:9f:26:fc:be:81:6c:68:5a:b8:47:91:d0:
00:f2:0a:8b:87:20:0f:c4:41:79:c6:bb:4a:39:f1:
e1:95:44:8e:70:1b:10:9d:52:54:d5:db:98:9e:ce:
89:5a:24:c8:68:4d:47:5f:d1:fa:51:7e:d0:8f:0a:
9b:1d:6e:ff:c2:aa:cd:6b:35:a0:b8:8f:db:db:48:
5d:b4:75:72:0e:1e:03:91:73:f6:4b:e9:a5:25:99:
8c:d9:de:96:af:1c:f8:6e:b6:82:f0:05:cb:44:eb:
87:c5:70:67:2f:43:e2:8b:04:36:30:07:c6:07:59:
8f:9d:c5:e2:c1:67:5b:9a:37:30:89:ec:49:a1:e8:
84:2b:04:56:f7:17:fb:3b:5f:29:10:4f:29:6e:18:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:DC:15:79:C8:97:61:AA:9B:B2:13:8E:10:B6:E8:DC:D8:5D:BC
X509v3 Authority Key Identifier:
keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/hM7cFXnIl2Gqm7ITjhC26NzYXbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.176.0/22
Signature Algorithm: sha256WithRSAEncryption
63:84:2a:bf:bb:4a:61:e2:a9:37:5a:e9:f8:3f:d8:6b:6a:40:
fb:e2:46:9e:94:00:d7:4c:a2:78:f4:0d:13:79:21:9e:07:0a:
16:86:4e:04:42:a1:dc:9b:36:f0:99:1f:ec:ac:8f:fc:f8:28:
ab:2a:26:14:ee:9f:f0:7f:71:b9:ea:3e:75:b8:d8:ec:9a:af:
23:8c:d4:21:13:6f:32:25:49:ed:9f:11:31:a5:d0:52:79:5c:
d9:bb:01:a2:24:a7:12:0c:fa:15:5d:51:96:b5:08:7d:9e:fd:
f2:7f:68:bd:44:64:1a:39:9b:7d:cf:b4:e7:ae:29:cd:07:34:
b4:c0:48:0c:a7:13:80:14:e0:c0:5e:8b:d3:c3:ec:40:ab:52:
93:c6:29:f5:7c:1d:d6:f7:20:b2:2e:6d:90:7c:a9:41:6f:5b:
f1:b0:df:8d:4b:39:2c:c8:74:4f:33:04:ae:38:8c:d5:d0:e3:
c1:f2:59:6f:80:34:ed:f1:20:14:5a:e6:e3:46:d2:0c:f6:bd:
75:ed:b7:c6:c1:39:a4:c3:7a:b6:c3:ac:dd:c5:94:36:4f:46:
5c:4e:3f:13:d3:11:65:9a:99:dd:92:6a:fb:bc:0a:30:83:f7:
da:46:77:fc:f0:0d:8c:4e:9d:39:bd:2a:cc:0d:88:78:4c:45:
54:ca:de:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:58 2024 by rpki-client on console-fra.rpki-client.org