Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/HzSuElAde8W1WDxb41ZCP5txfYI.roa
File: HzSuElAde8W1WDxb41ZCP5txfYI.roa (raw, json)
Hash identifier: ehcnLRb29mxi6gGGsj8EcJRRtSHw33gsJN3a/ZxGuLY=
Subject key identifier: 1F:34:AE:12:50:1D:7B:C5:B5:58:3C:5B:E3:56:42:3F:9B:71:7D:82
Certificate issuer: /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial: 0D207899
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/HzSuElAde8W1WDxb41ZCP5txfYI.roa
Signing time: Sat 01 Jan 2022 07:59:30 +0000
ROA not before: Sat 01 Jan 2022 07:59:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203200
IP address blocks: 185.122.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220231833 (0xd207899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Validity
Not Before: Jan 1 07:59:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f34ae12501d7bc5b5583c5be356423f9b717d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:47:ae:50:f6:cd:56:83:26:3c:a6:2c:a0:
8e:de:39:f5:ca:95:5d:75:64:8f:15:f6:40:b0:a7:
32:cc:98:ff:92:cc:f6:d8:f5:8f:6d:6f:e8:3e:42:
ab:f4:5d:75:cc:2f:ef:bc:71:f4:b0:38:a0:98:26:
22:82:32:93:3b:ad:26:78:4e:f7:ae:39:71:39:cd:
8d:9c:31:6b:ce:d8:8b:1f:3c:47:92:62:c4:ad:9e:
70:68:31:dc:ea:0b:3e:3a:52:72:9c:4c:1f:13:78:
63:8a:7e:ab:c8:b5:1e:0e:a1:b7:6a:2d:29:4a:a9:
a2:b3:84:f0:9f:7b:11:cc:90:c9:01:b8:b6:f8:b8:
1f:52:20:40:b6:f5:28:15:43:69:f2:db:e0:e8:7a:
a4:9d:e1:02:f9:58:5b:28:8a:8b:63:54:26:93:ca:
f7:8b:de:7b:44:43:8c:48:c8:9b:06:4d:b5:33:18:
ec:fd:ae:01:d6:fa:a3:d8:93:8e:16:9a:7a:92:0a:
c1:2a:1b:4e:d7:0f:40:29:11:40:7c:1f:74:5d:a4:
09:0a:b3:64:78:cb:0d:11:5f:0f:09:e2:8c:9a:d7:
e7:87:f6:81:e4:43:e1:68:b6:3c:e2:9a:e5:f1:ce:
ef:11:e6:e6:35:59:55:1a:bb:1a:70:56:f0:e2:d5:
59:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:AE:12:50:1D:7B:C5:B5:58:3C:5B:E3:56:42:3F:9B:71:7D:82
X509v3 Authority Key Identifier:
keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/HzSuElAde8W1WDxb41ZCP5txfYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.76.0/22
Signature Algorithm: sha256WithRSAEncryption
44:bf:cf:44:ae:10:1a:2d:e1:7c:78:ee:00:9f:8d:de:dc:55:
bd:0a:0b:84:d6:20:36:75:4d:b2:c3:8d:67:08:54:14:11:af:
f7:28:4a:b3:c8:d2:c1:1d:8b:c4:57:bc:6d:e2:c2:ab:50:c7:
7f:10:8a:f8:f8:f7:cc:a3:7e:2a:66:80:9a:87:95:00:2b:45:
47:c6:6d:c5:e3:a7:47:70:bc:72:2b:1a:c7:ac:7c:7d:21:19:
8d:41:9b:db:b9:aa:50:41:aa:6f:a1:6a:f9:d2:9e:29:ee:35:
94:b5:06:9b:fc:6d:92:fa:71:b4:d2:0f:00:c3:fe:84:82:3f:
ae:34:65:b4:63:58:43:72:31:01:aa:01:1d:3d:1b:8d:dc:7f:
86:4e:be:eb:0a:e9:42:c6:8c:97:e0:4e:98:72:6e:c1:b8:77:
0d:eb:80:a7:01:e3:2d:ec:66:16:e5:2b:1f:83:43:b8:54:b1:
49:29:3e:74:0c:03:ed:d4:df:9f:b5:68:7d:c5:62:b1:01:84:
34:bd:2c:90:eb:f3:b4:60:6b:36:d2:26:19:da:d5:d8:3d:48:
d1:e7:9f:d3:41:ec:83:c6:b5:6d:e7:8b:32:2b:c7:26:14:a1:
71:88:ee:cc:09:1d:11:84:a8:30:d4:d7:20:66:e9:99:38:1c:
41:61:c8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:59 2024 by rpki-client on console-ams.rpki-client.org