Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/cHGSeTl_ZBK08uz--KuDnOxyuWo.roa
File: cHGSeTl_ZBK08uz--KuDnOxyuWo.roa (raw, json)
Hash identifier: tZ2tqFXSboKHn3Qg2bTjrFpbHsLbgE7w6jbb1TM3uJU=
Subject key identifier: 70:71:92:79:39:7F:64:12:B4:F2:EC:FE:F8:AB:83:9C:EC:72:B9:6A
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 05AB23B0
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/cHGSeTl_ZBK08uz--KuDnOxyuWo.roa
Signing time: Sat 01 Jan 2022 10:06:07 +0000
ROA not before: Sat 01 Jan 2022 10:06:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211871
IP address blocks: 45.146.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95101872 (0x5ab23b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Jan 1 10:06:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70719279397f6412b4f2ecfef8ab839cec72b96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:56:70:db:3e:6e:14:ae:af:4f:00:02:78:
4c:0e:d9:29:18:8e:26:56:70:f3:08:92:97:c4:58:
96:f9:76:82:79:a9:e6:55:30:80:ef:01:d4:e6:69:
32:f3:97:b1:55:9b:a4:2b:5c:34:b8:23:80:7d:0c:
a4:e6:8a:97:f7:d5:07:31:6b:72:cb:8f:8d:5a:a1:
48:33:1a:ab:66:58:32:04:74:22:9e:5e:63:f3:84:
47:2a:0b:be:9e:f2:6f:4f:f4:16:a1:d6:4f:90:62:
00:cf:53:57:c8:01:08:83:d8:68:f1:b0:41:dc:b8:
3e:60:87:02:59:8a:b4:d7:f4:2a:de:2f:e9:90:e6:
c4:d9:89:79:f6:55:07:6f:92:be:da:2a:36:3f:a5:
3a:e6:ea:a0:3b:e4:cc:c4:a7:e9:03:5d:1d:36:59:
9d:81:59:96:41:2c:f0:27:71:d0:19:40:ad:85:b3:
03:86:c4:29:97:d5:bc:bd:5e:1e:02:07:c7:03:b1:
c0:23:63:8a:7f:2b:af:d1:24:2b:f3:d1:9f:74:dd:
65:27:a0:d7:b8:c8:70:dd:3e:01:62:6c:6d:ba:26:
bd:2e:0d:82:43:93:4d:80:ed:ee:7e:0f:c6:b6:cb:
3e:7b:03:c4:9e:7a:59:35:1d:9c:7a:2d:c7:17:cb:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:71:92:79:39:7F:64:12:B4:F2:EC:FE:F8:AB:83:9C:EC:72:B9:6A
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/cHGSeTl_ZBK08uz--KuDnOxyuWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.161.0/24
Signature Algorithm: sha256WithRSAEncryption
82:5d:bb:06:ce:30:f6:b7:2b:47:04:68:94:5f:6c:99:36:5f:
99:e4:6b:81:5b:bd:b0:15:a4:18:14:ef:8b:ea:12:8c:35:d4:
ea:7d:52:5d:d3:dd:35:c5:da:b7:3f:fd:e0:37:2c:eb:68:2a:
9e:6d:ed:64:c0:2e:36:86:3b:c4:c9:dc:0d:64:64:5f:b5:1b:
c3:33:76:e0:0b:dc:0c:a9:6c:8f:cc:e9:f5:ec:81:bc:a9:7b:
ab:1e:13:a2:d0:f7:4a:11:78:e6:9f:4c:a2:87:f5:0d:82:04:
6c:b0:1b:e6:6b:5c:e7:33:c9:36:1d:af:a9:81:d4:40:50:78:
42:eb:42:c8:71:d1:0e:c2:32:cd:6e:cd:60:47:92:b4:36:b4:
8d:23:ac:22:a9:b8:e1:f8:01:77:21:71:4b:8e:9a:64:e4:2e:
9c:f1:4d:29:7e:65:c7:43:13:ed:50:87:f1:49:9c:b4:84:c1:
18:e7:58:48:2f:d1:e9:f2:7f:f4:49:0d:e7:70:51:29:e0:79:
f6:4e:5d:d6:b9:a0:45:ae:00:df:d7:b2:07:06:cb:09:4c:c8:
81:5b:a2:18:4b:bf:80:e1:fe:c8:c4:b5:c8:10:11:8b:cd:1f:
17:41:45:86:95:0c:1d:ae:7c:16:77:a1:f5:7b:36:7c:6b:95:
69:27:2d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:02 2023 by rpki-client on console-fra.rpki-client.org