Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/HhisETiUo_AN-dFsaa24n1IGvmc.roa
File: HhisETiUo_AN-dFsaa24n1IGvmc.roa (raw, json)
Hash identifier: yx8pbdd5688q7wIH3jC4GZiqS/10aZV7eQLDQxldbmY=
Subject key identifier: 1E:18:AC:11:38:94:A3:F0:0D:F9:D1:6C:69:AD:B8:9F:52:06:BE:67
Certificate issuer: /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial: 0181DE2B3C3B610A535D6EDEDAEF78EDF77F
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/HhisETiUo_AN-dFsaa24n1IGvmc.roa
Signing time: Fri 08 Jul 2022 14:16:24 +0000
ROA not before: Fri 08 Jul 2022 14:16:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203132
IP address blocks: 185.142.184.0/24 maxlen: 24
185.142.185.0/24 maxlen: 24
185.142.186.0/24 maxlen: 24
2a07:2f00:1337::/48 maxlen: 48
2a07:2f00:dead::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:de:2b:3c:3b:61:0a:53:5d:6e:de:da:ef:78:ed:f7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Validity
Not Before: Jul 8 14:16:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e18ac113894a3f00df9d16c69adb89f5206be67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:35:d8:4d:57:58:1a:70:30:85:18:2f:06:
d5:99:1a:75:51:22:f0:29:1e:3f:44:d0:b0:fb:ce:
1b:f2:ba:03:88:8a:95:45:31:a1:ef:27:14:28:55:
37:93:86:aa:a8:5e:ef:73:e1:e1:50:86:40:b6:f0:
bf:8a:b2:e0:16:a1:a6:94:99:c9:9d:27:13:64:57:
b7:b3:42:0a:7b:ad:27:9d:8d:c1:d4:dc:26:22:c2:
6e:b3:e9:40:0b:21:a0:ba:9b:88:cb:ab:d1:ee:e0:
8b:1b:2f:4c:24:42:e0:64:cb:f5:b5:c0:8a:06:bc:
f3:75:bb:df:2a:23:9e:17:e4:3c:81:43:3b:3f:3e:
b1:26:45:67:4c:11:83:c3:8a:f1:60:5c:e3:88:9e:
58:14:74:16:6f:fa:e7:69:d5:9c:e1:23:77:e1:3e:
e4:14:eb:36:39:cb:1c:24:2b:13:dc:d7:0c:9b:71:
84:70:38:c1:65:5e:b4:16:9e:70:be:bb:43:eb:54:
1e:1d:ce:7a:d9:3b:c1:45:5f:c9:d8:55:32:a3:f3:
d0:65:a4:88:50:ce:83:ec:d5:ac:7c:c2:06:b9:3f:
90:33:fd:6e:9d:c8:df:71:d4:69:dd:e3:7f:d0:23:
47:19:18:4c:9c:9f:8a:03:bb:9c:99:8f:d4:ff:14:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:AC:11:38:94:A3:F0:0D:F9:D1:6C:69:AD:B8:9F:52:06:BE:67
X509v3 Authority Key Identifier:
keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/HhisETiUo_AN-dFsaa24n1IGvmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.184.0-185.142.186.255
IPv6:
2a07:2f00:1337::/48
2a07:2f00:dead::/48
Signature Algorithm: sha256WithRSAEncryption
07:8b:ad:34:99:e3:08:b2:01:40:5d:a8:48:b3:4e:5d:d0:99:
f9:0e:ba:fd:9b:a6:44:4c:0b:f1:1f:88:a0:ad:b5:dc:42:d4:
01:0a:73:88:2d:1b:24:5e:86:6c:89:7b:1b:7e:06:29:26:a9:
48:ce:cd:d2:f2:37:a0:9d:45:b5:f2:f0:fe:7e:c4:dc:a4:23:
80:54:2f:ea:dd:31:1c:11:7a:c8:71:8e:81:e2:ff:16:ff:c6:
e7:85:d3:b6:e8:3a:52:28:84:46:5e:6f:25:c0:07:76:e1:62:
18:a9:b9:19:d2:69:61:37:d2:80:4b:20:e8:49:e8:fe:44:be:
86:28:8e:68:ec:fd:09:c9:c5:46:bb:2d:b8:c2:04:27:e6:49:
f4:62:6a:24:ab:7d:75:4f:bd:b0:18:4a:7e:1e:01:ff:5b:03:
af:01:bc:bb:f2:c8:e1:8a:02:12:77:3e:97:5b:24:53:39:84:
7d:3e:4d:f9:15:75:b8:b4:2a:0e:d0:eb:6b:0e:84:14:06:85:
91:29:14:ff:75:ad:a2:44:b8:6d:89:02:e2:37:51:e2:40:48:
91:50:d8:ba:7a:2b:22:24:1f:45:c4:b0:e5:eb:d0:73:7e:fa:
bd:02:33:44:a5:73:31:f8:a3:47:2a:fc:b8:59:30:54:4f:1c:
95:74:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org