Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/HN2VXnEPpAmBZRyAkmFUmq5-joU.roa
File: HN2VXnEPpAmBZRyAkmFUmq5-joU.roa (raw, json)
Hash identifier: T+tDdrrFunyEm1/1EwoJo+IvF7Z1v1Gp6CYgiN/yB5g=
Subject key identifier: 1C:DD:95:5E:71:0F:A4:09:81:65:1C:80:92:61:54:9A:AE:7E:8E:85
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 021AEB
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/HN2VXnEPpAmBZRyAkmFUmq5-joU.roa
Signing time: Fri 18 Mar 2022 14:30:44 +0000
ROA not before: Fri 18 Mar 2022 14:30:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.62.150.0/23 maxlen: 23
185.248.148.0/22 maxlen: 22
2a03:567::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137963 (0x21aeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Mar 18 14:30:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cdd955e710fa40981651c809261549aae7e8e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:54:39:cc:60:49:2b:25:74:70:b3:a9:10:43:
53:58:cd:cf:81:2a:6d:04:25:9c:0a:85:57:1b:1e:
a6:47:b7:4b:f0:85:09:6e:a6:df:65:c8:02:40:a8:
ac:3a:d5:17:d4:fe:fe:f7:b9:f9:18:76:60:4b:5b:
64:0b:57:75:b5:b6:dc:5a:e8:2e:37:56:dd:91:f0:
ea:c0:b4:1c:30:ff:a5:7d:17:8b:54:88:92:17:40:
cf:46:dd:0d:14:43:4e:fd:8a:b3:c2:a1:69:be:8e:
8b:4a:d4:dd:51:e7:38:ad:54:fe:78:f7:74:45:85:
52:da:98:2f:78:b5:64:ab:77:42:7a:24:39:9f:7a:
e6:3f:5d:e6:ad:b7:28:cb:46:ce:84:38:16:b8:f9:
da:fc:db:10:5f:e5:b9:41:16:c1:ea:73:65:30:e4:
b2:94:a9:9d:33:67:b7:19:65:3f:bb:b3:b1:29:59:
c4:65:44:d9:3a:b4:41:71:c9:98:7a:0b:7e:73:53:
90:cb:8e:05:77:93:ed:23:dc:e6:54:cf:e9:e1:c1:
b7:13:2d:7e:99:e7:04:c0:f0:56:27:b0:c2:be:92:
91:3e:5e:bc:98:a0:a4:05:81:23:ca:e9:23:0d:18:
11:f0:ef:74:49:de:ac:bf:ad:d3:97:d8:93:d3:92:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:95:5E:71:0F:A4:09:81:65:1C:80:92:61:54:9A:AE:7E:8E:85
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/HN2VXnEPpAmBZRyAkmFUmq5-joU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.150.0/23
185.248.148.0/22
IPv6:
2a03:567::/32
Signature Algorithm: sha256WithRSAEncryption
61:f3:06:15:f4:6e:dc:93:01:c8:c4:fb:fc:69:d3:b6:e2:f9:
ca:47:43:c7:de:ec:9a:75:cc:08:86:4f:a9:e4:7b:e2:2f:2e:
74:37:9b:94:c9:54:cd:d9:fb:da:3c:46:0e:65:38:b3:f8:79:
12:17:20:d1:7b:dd:85:43:de:0b:03:99:2d:92:54:3d:4e:a3:
72:9e:b1:32:46:66:ab:2e:b4:da:9b:a6:5d:4a:d8:7d:ff:60:
21:a1:61:3c:81:ca:93:08:50:5f:11:d4:20:0c:c2:ab:51:b4:
fc:3e:0f:5c:66:52:0a:b1:00:4c:3b:58:d4:f2:9a:47:e3:1a:
9b:02:36:e9:45:e7:67:0d:3f:b3:32:2b:d4:2b:ae:dd:12:f8:
0c:c7:c8:4b:99:54:88:7e:dc:16:6b:87:38:09:60:63:69:90:
29:04:ad:ac:f9:92:f1:49:9d:7e:49:4a:cd:54:0a:88:ba:72:
75:b5:2e:c7:16:fc:3e:fa:0c:24:1a:db:1f:24:a3:81:b6:cf:
71:a6:d7:67:17:10:9b:8b:20:5a:d8:97:6e:7e:ac:12:b7:25:
ef:d9:14:e6:86:06:7e:7b:c8:06:49:26:2f:cf:ce:2f:bf:df:
b5:8e:8d:34:0f:83:41:d7:c6:0d:76:73:92:98:46:74:ee:25:
33:e1:e9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org