Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/HAmba-8Mn4l_yi2E84akBFiFLa8.roa
File: HAmba-8Mn4l_yi2E84akBFiFLa8.roa (raw, json)
Hash identifier: KiPzi+Ebj8/zjhwWCuTitDRGIT4bq3WoS855hpl1zYk=
Subject key identifier: 1C:09:9B:6B:EF:0C:9F:89:7F:CA:2D:84:F3:86:A4:04:58:85:2D:AF
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 385E2F68
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/HAmba-8Mn4l_yi2E84akBFiFLa8.roa
Signing time: Sat 01 Jan 2022 08:04:16 +0000
ROA not before: Sat 01 Jan 2022 08:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52088
IP address blocks: 185.45.108.0/22 maxlen: 24
46.30.24.0/21 maxlen: 24
2a02:22f0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945696616 (0x385e2f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 1 08:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c099b6bef0c9f897fca2d84f386a40458852daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:9c:29:f2:9e:8e:ce:5c:a8:16:72:01:c2:
c1:44:32:64:40:dd:b0:97:29:56:2f:14:fa:c1:6c:
28:c0:1e:a5:f8:ff:9f:94:b0:48:56:57:28:7b:30:
35:20:c2:a7:ad:07:6d:6c:67:ee:3c:54:f9:c5:64:
49:d5:5c:aa:21:98:b0:81:71:6c:71:d3:45:09:26:
01:84:ac:fc:18:da:f8:3e:a2:40:50:44:3f:6c:0d:
53:fd:fe:10:67:8d:35:73:ef:82:0b:71:39:96:dd:
93:a2:1c:f8:e2:ae:99:06:52:40:02:df:cd:15:d6:
21:b2:80:b0:2c:d5:42:99:54:19:48:15:34:6b:c3:
08:ad:40:3a:f2:a9:74:a0:e8:f7:96:46:45:d0:db:
f0:ab:cd:08:77:c5:81:40:2c:a6:18:3b:f0:1e:76:
e4:f9:3d:24:97:73:d5:67:40:60:b2:70:2e:c4:ad:
67:f5:20:a2:ba:da:ed:e2:c4:e6:f2:22:9f:1d:3d:
d8:f3:30:70:76:9c:e4:d3:c1:00:fc:d8:23:31:7c:
17:2e:6d:b6:de:bd:f6:a2:ad:83:50:b3:db:cc:85:
69:40:0d:24:81:25:5a:4a:78:f0:4b:34:10:07:a6:
62:f9:ff:00:57:28:b8:37:f1:33:be:33:75:9c:37:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:09:9B:6B:EF:0C:9F:89:7F:CA:2D:84:F3:86:A4:04:58:85:2D:AF
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/HAmba-8Mn4l_yi2E84akBFiFLa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.24.0/21
185.45.108.0/22
IPv6:
2a02:22f0::/32
Signature Algorithm: sha256WithRSAEncryption
26:9b:bf:15:3b:38:f0:8e:ce:88:68:a2:8f:38:e1:f1:75:b3:
07:42:6a:59:c9:8c:c5:30:23:ab:42:ad:d1:c9:ef:48:a4:b2:
74:dc:1a:d0:d3:08:e0:93:ff:06:d4:cf:8b:8a:24:1c:39:02:
47:91:40:53:72:b5:bc:e0:6b:09:e0:8e:42:bb:95:03:0d:cc:
cb:e1:ba:d1:e2:20:72:6f:21:19:40:83:94:dc:6f:b9:a4:2d:
e5:e0:9a:39:f4:c0:bb:ed:d1:f2:8f:bd:94:c1:9e:d6:09:fe:
53:44:93:42:c2:13:74:a5:00:f3:82:fe:58:1c:6b:d8:b6:7a:
0b:1e:a3:0d:94:11:68:48:0c:d3:7f:d7:c4:a9:66:c6:4d:e2:
f1:3a:57:a8:da:71:eb:da:77:26:61:70:f6:7c:5d:05:86:fc:
05:ac:55:53:c2:eb:2d:e2:52:44:5c:d6:a8:1d:e9:bb:08:15:
27:e6:c1:86:24:33:36:8b:48:10:f2:75:28:e7:8c:63:d0:52:
b2:d1:a7:eb:a3:82:d8:86:9c:f0:65:88:a2:c5:a8:2c:9f:e0:
41:83:a4:e3:04:71:e2:6f:bb:3b:d4:7e:0b:5c:58:73:34:31:
3f:cc:87:ab:cc:d4:3f:29:2b:09:52:8d:90:bb:cb:c1:72:1c:
70:78:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net