Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/HkztmDa1XouRp_l8VSCYjdMRqRc.roa
File: HkztmDa1XouRp_l8VSCYjdMRqRc.roa (raw, json)
Hash identifier: 03qi1XxD7QC60WkxKYYDCn21vNyCOF2LiKVTlbE/fqo=
Subject key identifier: 1E:4C:ED:98:36:B5:5E:8B:91:A7:F9:7C:55:20:98:8D:D3:11:A9:17
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 01851CB5CF3539D622E02BB14F88A38F378C
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/HkztmDa1XouRp_l8VSCYjdMRqRc.roa
Signing time: Fri 16 Dec 2022 20:52:35 +0000
ROA not before: Fri 16 Dec 2022 20:52:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39522
IP address blocks: 45.87.211.0/24 maxlen: 24
45.87.208.0/24 maxlen: 24
45.87.209.0/24 maxlen: 24
45.87.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1c:b5:cf:35:39:d6:22:e0:2b:b1:4f:88:a3:8f:37:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Dec 16 20:52:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e4ced9836b55e8b91a7f97c5520988dd311a917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:26:7a:e5:8e:24:70:a8:f1:49:e9:cc:ce:
2a:58:f4:b0:0d:10:09:3d:58:8b:9b:be:2d:c4:45:
bb:c5:e6:29:d5:ba:79:76:b1:0f:cb:c5:14:b3:b0:
09:ac:96:28:d6:b8:b0:00:b7:45:13:f3:f2:62:bf:
61:c3:06:ea:0b:1f:ea:c6:fd:a6:9d:02:35:74:24:
95:48:54:97:71:11:b8:5a:4a:f6:a5:68:d9:c2:f3:
f6:19:5b:13:02:1a:2d:6c:7c:0e:95:50:83:78:f1:
d0:7b:37:9d:f2:de:61:6f:6a:eb:f2:4e:29:fe:d5:
78:3d:42:72:a6:68:d4:45:8c:de:bb:71:13:0a:d0:
38:02:d3:4c:2c:16:2e:cf:5b:62:30:91:f8:44:0a:
22:87:d8:66:0a:36:a4:b9:f0:0e:f4:a2:81:84:a1:
67:71:72:33:ab:71:3a:c1:5f:eb:ab:24:75:25:4b:
d2:73:41:61:3d:8a:b5:df:4c:f4:4d:3f:4f:e1:bf:
94:2a:7b:32:60:91:8f:ef:18:d8:3a:25:6b:28:33:
0b:8e:11:9b:ad:d3:24:e7:1e:3f:43:57:78:37:9b:
d2:ec:3e:be:3d:e1:6e:3a:49:7c:85:c5:64:fd:a2:
08:c1:21:6f:7d:eb:a2:62:66:29:63:f9:cc:af:38:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4C:ED:98:36:B5:5E:8B:91:A7:F9:7C:55:20:98:8D:D3:11:A9:17
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/HkztmDa1XouRp_l8VSCYjdMRqRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.208.0/22
Signature Algorithm: sha256WithRSAEncryption
21:2b:67:94:2c:26:8e:be:37:f1:ed:96:1f:d1:cf:d1:fd:11:
b2:a4:dd:59:2a:cc:ff:5c:fa:10:b6:57:e1:93:e7:8f:0a:71:
7b:bc:54:4f:4f:5c:29:1e:f6:18:94:92:b3:2c:2a:68:bc:60:
d2:b0:ff:18:06:4c:de:88:e8:0a:85:c1:f3:37:30:23:d9:d4:
17:6b:00:0a:8b:f0:b3:9e:b1:87:9e:03:84:97:74:89:f2:52:
fb:cc:7f:62:30:5a:91:f0:de:95:1c:b8:01:9d:f1:92:77:eb:
d5:e7:94:e1:59:18:e8:f7:e4:2b:e6:8d:94:b7:cf:8a:31:2f:
d1:7d:fb:9f:79:cd:99:85:61:32:13:48:11:d0:74:16:95:d3:
43:17:69:16:f2:7a:df:e6:a1:76:ac:a2:3b:3f:63:8c:03:08:
0b:17:88:fc:97:23:24:e1:1d:c5:3a:d3:d8:12:35:82:fd:55:
a4:e1:c9:fe:90:80:31:d8:c4:6e:bc:5f:a4:06:0d:ff:e3:92:
44:8d:4e:11:40:63:4f:71:41:54:2c:ad:1d:e0:05:4d:5b:6e:
3a:d0:43:07:01:23:89:40:e9:62:af:7a:60:53:c5:a3:0c:b9:
b8:8f:0f:54:02:68:2a:9a:d0:b7:9c:2b:54:ed:57:50:01:24:
a5:78:54:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:15 2025 by rpki-client