Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/H0fEbNhRpSimUoUMa1NKF199-zg.roa
File: H0fEbNhRpSimUoUMa1NKF199-zg.roa (raw, json)
Hash identifier: hjJfxDcZiu28xAB3sI378zAkthu1sn7A1flWIfI8G9I=
Subject key identifier: 1F:47:C4:6C:D8:51:A5:28:A6:52:85:0C:6B:53:4A:17:5F:7D:FB:38
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 0859A002
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/H0fEbNhRpSimUoUMa1NKF199-zg.roa
Signing time: Sat 01 Jan 2022 10:04:20 +0000
ROA not before: Sat 01 Jan 2022 10:04:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209459
IP address blocks: 45.82.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140091394 (0x859a002)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jan 1 10:04:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f47c46cd851a528a652850c6b534a175f7dfb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:70:36:99:26:96:37:cd:3b:b0:db:d9:9d:
0a:39:41:08:4d:6e:1b:eb:2e:46:51:90:4b:1e:f0:
1d:0e:7b:80:a5:b7:9e:b3:af:b5:0b:13:8b:3b:02:
09:67:58:4f:ba:fc:ff:ef:64:16:2f:e0:96:32:3d:
3e:51:b1:78:ab:22:ef:11:9a:9a:ae:64:78:07:1f:
80:6e:5b:e7:c0:27:10:38:94:e2:c0:a7:57:7c:d4:
c3:db:2f:a2:fe:53:df:12:f9:88:96:87:8a:30:bc:
f4:b5:93:41:b3:4d:f0:b4:15:a2:1c:35:5b:99:b0:
fe:51:b7:09:51:ab:5f:52:f8:9e:ed:21:1b:35:d4:
0f:3d:89:3c:36:ab:05:e8:23:a4:a2:67:14:9e:9a:
e1:d6:64:d1:a8:31:23:46:f2:9e:6e:2d:53:19:e2:
a1:af:f3:cb:a8:dd:8e:23:0f:ee:2d:b3:bd:1f:b7:
0e:53:b4:85:f8:5b:cf:1e:f5:9d:cc:f7:5d:d3:ac:
f8:4c:c7:05:fc:60:ba:9a:fc:fa:de:eb:46:6d:3b:
ea:c0:ae:4f:c7:23:78:38:51:9a:d9:05:a9:29:c6:
9f:75:3c:43:56:fc:e8:94:df:25:ce:a0:6e:db:58:
e4:d2:d7:36:90:d1:6e:be:c7:0a:60:c5:6f:d3:48:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:47:C4:6C:D8:51:A5:28:A6:52:85:0C:6B:53:4A:17:5F:7D:FB:38
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/H0fEbNhRpSimUoUMa1NKF199-zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.136.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:7f:79:c3:f5:e7:62:47:41:ba:2c:26:57:50:f6:0f:ca:7a:
ad:4a:f2:89:12:ba:b9:8f:c0:02:70:79:20:ea:cd:7d:81:2a:
aa:ec:2a:22:64:bd:86:1b:e3:b0:23:10:3c:d0:7f:3b:95:3a:
89:5b:f3:5b:97:65:78:89:25:b5:df:a1:74:a4:d8:5a:81:c7:
02:10:9b:ac:c0:fe:59:aa:0f:fd:f1:df:ae:79:dd:5b:65:65:
8f:82:e6:3f:13:cc:bb:d3:bb:e9:79:bf:57:ef:fd:59:c2:28:
b7:65:9a:a9:99:53:00:9e:51:ae:36:ee:2e:60:4c:b9:c7:43:
97:e0:50:72:39:6e:cc:ba:e0:6f:49:39:a2:eb:0e:3c:05:50:
7b:32:06:bb:3d:a7:c5:21:d2:89:fd:e8:08:71:4e:50:39:49:
53:78:11:d6:f5:09:56:02:5e:ed:0f:c3:88:cf:28:e9:ac:24:
e5:cd:61:ef:d7:d3:20:34:7d:ef:bc:e2:7a:3d:00:3b:be:64:
8d:f7:5e:b6:d6:b5:ba:81:3f:ee:51:5f:eb:12:0d:24:c7:f4:
1d:0b:f4:52:6c:5e:df:a9:7a:b7:b9:78:7b:f9:0e:c9:4f:94:
10:ac:fc:df:a3:e8:27:5b:4f:aa:1c:f8:60:fa:7e:5f:58:3d:
38:2c:23:11
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECFmgAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
Nzc4NWEzMGQ4NTEyZDBkOGFiNjM3ODEyYjc5ZmE0NTI5YTFlZjFiMB4XDTIyMDEw
MTEwMDQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY0N2M0NmNkODUx
YTUyOGE2NTI4NTBjNmI1MzRhMTc1ZjdkZmIzODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANHWcDaZJpY3zTuw29mdCjlBCE1uG+suRlGQSx7wHQ57gKW3
nrOvtQsTizsCCWdYT7r8/+9kFi/gljI9PlGxeKsi7xGamq5keAcfgG5b58AnEDiU
4sCnV3zUw9svov5T3xL5iJaHijC89LWTQbNN8LQVohw1W5mw/lG3CVGrX1L4nu0h
GzXUDz2JPDarBegjpKJnFJ6a4dZk0agxI0bynm4tUxnioa/zy6jdjiMP7i2zvR+3
DlO0hfhbzx71ncz3XdOs+EzHBfxgupr8+t7rRm076sCuT8cjeDhRmtkFqSnGn3U8
Q1b86JTfJc6gbttY5NLXNpDRbr7HCmDFb9NIFjkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQfR8Rs2FGlKKZShQxrU0oXX337ODAfBgNVHSMEGDAWgBS3eFow2FEtDYq2
N4ErefpFKaHvGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3QzaGFNTmhSTFEyS3RqZUJLM242UlNtaDd4cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvNTQzMTdkLTA5NGUtNDgyMC05NjUxLTYyMTliMzIxMjJkMC8x
L0gwZkViTmhScFNpbVVvVU1hMU5LRjE5OS16Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
NTQzMTdkLTA5NGUtNDgyMC05NjUxLTYyMTliMzIxMjJkMC8xL3QzaGFNTmhSTFEy
S3RqZUJLM242UlNtaDd4cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1SiDANBgkqhkiG9w0BAQsFAAOC
AQEAwn95w/XnYkdBuiwmV1D2D8p6rUryiRK6uY/AAnB5IOrNfYEqquwqImS9hhvj
sCMQPNB/O5U6iVvzW5dleIkltd+hdKTYWoHHAhCbrMD+WaoP/fHfrnndW2Vlj4Lm
PxPMu9O76Xm/V+/9WcIot2WaqZlTAJ5RrjbuLmBMucdDl+BQcjluzLrgb0k5ousO
PAVQezIGuz2nxSHSif3oCHFOUDlJU3gR1vUJVgJe7Q/DiM8o6awk5c1h79fTIDR9
77ziej0AO75kjfdetta1uoE/7lFf6xINJMf0HQv0Umxe36l6t7l4e/kOyU+UEKz8
36PoJ1tPqhz4YPp+X1g9OCwjEQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:42 2023 by rpki-client on console-fra.rpki-client.org