Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H--NW66rH5DkBPTSVHRmpwgSKPQ.roa
File: H--NW66rH5DkBPTSVHRmpwgSKPQ.roa (raw, json)
Hash identifier: FyWEOyDnfhBzco7T0OQwJPpM+z7AI386WOg3NPfYLZY=
Subject key identifier: 1F:EF:8D:5B:AE:AB:1F:90:E4:04:F4:D2:54:74:66:A7:08:12:28:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018477383CDB5465B6D75EC3874C85C7A75A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H--NW66rH5DkBPTSVHRmpwgSKPQ.roa
Signing time: Mon 14 Nov 2022 17:38:04 +0000
ROA not before: Mon 14 Nov 2022 17:38:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61084
IP address blocks: 45.8.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:77:38:3c:db:54:65:b6:d7:5e:c3:87:4c:85:c7:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 14 17:38:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fef8d5baeab1f90e404f4d2547466a7081228f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:17:35:60:36:6d:7e:77:b5:cf:21:8a:cd:
06:3d:c2:70:9d:12:fe:04:f8:01:18:48:80:c1:bc:
74:e0:97:09:75:c9:49:09:04:d4:1b:1b:69:41:6c:
04:6d:be:05:58:34:03:b3:4f:26:42:2c:44:17:22:
01:77:8a:87:67:a5:5c:5e:24:ab:a2:45:6e:e8:cd:
58:59:b3:b3:f6:e8:60:f0:05:fc:29:af:70:66:41:
f7:3f:d3:85:77:48:51:29:a1:ba:d5:79:37:4b:e5:
bc:e6:09:09:0d:a6:af:8e:07:cc:7e:32:ab:1f:58:
7d:49:19:8c:c5:67:70:04:f7:e6:8c:3b:e4:d3:c3:
a1:2e:ac:c8:9a:e1:fd:f2:78:ea:d3:c7:32:99:07:
f1:ea:36:d7:d5:63:62:43:8a:d6:1e:48:ef:e8:54:
0f:16:7b:7d:99:00:16:74:14:3e:b5:8b:ca:d2:e4:
e2:10:53:d1:6e:2c:6d:78:8e:0a:fc:ce:ae:76:12:
1d:d2:dd:c1:d3:b1:04:a2:40:dc:79:15:f9:81:b6:
91:3b:e8:aa:7d:35:55:30:3d:e9:e6:f0:65:4a:27:
10:27:f0:2e:b7:b6:f2:cc:ba:a3:38:b2:8f:c1:53:
c9:95:5d:83:f0:95:d3:a5:77:bc:77:b3:32:16:f0:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:8D:5B:AE:AB:1F:90:E4:04:F4:D2:54:74:66:A7:08:12:28:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/H--NW66rH5DkBPTSVHRmpwgSKPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.21.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c9:24:9a:50:fd:a1:7c:09:06:fc:f1:e8:a4:34:82:8b:ba:
7c:dd:4e:51:47:79:46:34:e5:e9:ae:91:f5:0f:f5:c8:07:63:
50:fa:0c:a4:b2:44:98:ab:20:b1:03:62:ff:fe:e3:83:55:12:
9f:55:51:df:15:7e:3b:62:11:6e:78:b8:d0:5f:bb:7e:bb:b1:
f5:44:20:cd:27:5d:8d:41:d0:3f:14:99:09:7f:75:b2:ed:29:
74:46:6d:0b:c2:9b:84:0d:53:ce:7d:4e:a4:3d:d3:44:ef:5c:
95:f2:50:ad:fb:0f:a2:de:ae:57:a6:36:e1:46:ef:d0:83:7a:
27:2a:67:8d:8d:5d:0a:83:44:44:15:02:8c:d0:11:b0:ef:26:
0f:a3:d8:a4:b2:5f:83:a6:ab:69:56:98:51:0b:0c:9d:8d:2c:
c0:80:0a:ae:29:07:6d:61:e0:2a:87:9b:e3:82:04:55:c5:6f:
1b:c9:b4:7b:17:29:f9:e2:f2:ca:05:6b:7e:e1:7c:af:43:04:
86:c4:4e:72:3b:21:00:09:a8:b0:8c:18:b2:c7:b5:ea:de:c2:
48:9e:de:88:bb:cd:8a:55:e3:6b:80:02:66:ee:28:c6:96:01:
96:df:07:82:e1:a3:81:81:a5:dc:46:95:ff:79:a5:f8:2b:7f:
ac:71:6f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org