Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/H-5wq58TjzVpxWyZZzefsjD3-1c.roa
File: H-5wq58TjzVpxWyZZzefsjD3-1c.roa (raw, json)
Hash identifier: yqTwV24as2O8H+NYZAL3vXAnupnMXjSk+ZNKj74LNfs=
Subject key identifier: 1F:EE:70:AB:9F:13:8F:35:69:C5:6C:99:67:37:9F:B2:30:F7:FB:57
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 074646BC
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/H-5wq58TjzVpxWyZZzefsjD3-1c.roa
Signing time: Sat 01 Jan 2022 12:01:26 +0000
ROA not before: Sat 01 Jan 2022 12:01:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57351
IP address blocks: 45.85.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122046140 (0x74646bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 1 12:01:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fee70ab9f138f3569c56c9967379fb230f7fb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:79:b2:46:f9:62:6b:c5:34:e6:a4:f0:5e:
bb:33:f6:62:0d:e8:26:d5:25:f7:a5:a5:52:b9:f5:
09:d3:a1:04:d7:88:19:ed:61:41:89:f5:19:12:bd:
85:f4:65:28:f6:e4:98:16:26:58:bc:ee:be:25:14:
b3:2b:b2:cb:d4:28:6f:0e:e1:38:85:f6:cb:d5:a8:
23:59:0c:4f:63:f1:26:a0:46:80:7e:bc:77:55:b7:
af:68:84:a0:2b:5f:75:61:7a:45:66:1a:31:cc:52:
73:91:16:5b:84:f5:97:dc:f9:d6:c3:4f:df:7b:f7:
3a:ab:8a:6f:88:4d:0f:87:d1:ee:82:b6:88:95:00:
86:a3:d1:a2:f8:bf:14:13:1b:e3:86:7c:4d:a5:88:
fb:0e:eb:0f:a9:8a:0a:35:4d:65:9f:26:f1:1e:df:
5a:02:d3:69:af:1d:c7:21:bc:1a:9b:dd:01:c4:0f:
5a:15:87:5e:a0:6b:01:1f:50:cd:a8:66:66:15:7f:
84:84:4d:0d:37:4d:a6:5d:2a:5f:6c:ac:fb:7d:1d:
0c:ed:72:ce:ff:45:ce:58:dd:61:6e:d8:99:9e:a1:
f0:73:44:27:72:89:ca:5c:17:21:dd:3f:dc:fb:cc:
01:e4:c2:4c:ef:7f:94:26:ae:a6:33:2d:45:77:3f:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EE:70:AB:9F:13:8F:35:69:C5:6C:99:67:37:9F:B2:30:F7:FB:57
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/H-5wq58TjzVpxWyZZzefsjD3-1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:06:fa:f0:06:30:8a:a9:43:d0:04:f3:18:37:bc:56:97:71:
60:04:f7:d4:7a:52:05:f6:e6:58:51:5c:12:6c:80:82:76:1d:
48:4b:1b:c2:f3:f5:d1:cb:b5:ff:2e:26:6a:a1:31:44:60:39:
2b:f6:6b:5b:37:af:54:a1:ef:a7:da:94:26:cb:4d:d7:cf:9a:
76:e4:20:68:eb:4d:6e:18:c0:69:22:ac:c5:71:ef:4a:04:3e:
8a:f7:26:23:c4:ad:ed:7e:6d:df:68:b2:76:d3:c3:e5:e4:c3:
41:ec:51:e0:85:92:da:76:39:c4:cc:9a:c7:92:d1:3b:5e:ec:
68:cf:cb:89:5e:08:6e:d2:f9:ba:59:76:36:d3:57:e7:8f:31:
a9:e4:6d:7f:cc:dd:96:8c:d4:4b:c8:14:1a:4b:98:f0:90:bf:
1c:d9:6d:dc:f8:ae:91:0e:62:c4:0c:c8:5a:02:9e:45:e7:d6:
8e:df:e4:1a:4e:89:ef:e5:a9:01:2e:78:14:1b:a7:3f:b0:c3:
ef:7c:37:a0:4f:f9:06:7a:55:e4:80:61:1c:af:3a:3f:94:c3:
3a:68:1a:41:38:da:90:08:aa:78:8b:06:5e:53:69:8a:54:49:
c1:21:34:38:d1:20:a1:4c:26:84:9a:f0:23:48:ff:2d:3f:d9:
de:49:5a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org