Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hbm-GhetbSwxpbyq974wSuTEo0M.roa
File: hbm-GhetbSwxpbyq974wSuTEo0M.roa (raw, json)
Hash identifier: DA55tocUBs53w9Dnvap+K7P8iwQQQdQ01h5wEWywFLw=
Subject key identifier: 85:B9:BE:1A:17:AD:6D:2C:31:A5:BC:AA:F7:BE:30:4A:E4:C4:A3:43
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 2AEDD573
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hbm-GhetbSwxpbyq974wSuTEo0M.roa
Signing time: Sat 01 Jan 2022 13:57:51 +0000
ROA not before: Sat 01 Jan 2022 13:57:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31608
IP address blocks: 188.114.70.0/23 maxlen: 24
188.114.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720229747 (0x2aedd573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 13:57:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85b9be1a17ad6d2c31a5bcaaf7be304ae4c4a343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:51:a7:7c:5e:2c:22:6f:a4:e1:e0:db:49:
a3:f3:90:b3:68:7d:46:24:58:36:80:ba:f9:5c:de:
4d:23:6e:e5:6a:b5:18:42:3e:8d:89:fe:33:e6:a6:
be:53:e6:62:99:37:f7:5d:f3:3e:cc:68:15:06:7e:
e7:a2:c6:14:23:d1:b8:4d:9b:9c:2d:d7:77:aa:bd:
72:b4:cb:c0:38:56:25:b0:16:1f:c0:3f:fc:c1:da:
34:90:99:4f:e7:69:b2:b2:8d:a5:ea:bc:33:97:11:
c4:5a:5a:4f:fb:54:c6:2a:9a:45:a2:18:1d:39:96:
c2:fd:61:11:5d:c5:8e:c7:1e:f9:d8:a5:c1:f8:06:
15:ae:c2:36:97:d0:ef:ea:37:2e:cb:54:cb:e5:b2:
bd:fd:8e:fb:11:e4:d3:4b:a9:79:f5:f3:67:77:45:
b9:85:e9:66:c5:75:db:a8:c5:28:6a:3c:e5:ca:5c:
de:32:4e:4f:08:c5:f8:8d:06:8a:39:e8:ce:ff:26:
dd:0a:25:5b:bd:d9:88:29:f5:9f:5a:98:5a:10:b6:
ad:74:dd:fd:8e:fc:83:01:b3:57:65:3b:ef:23:95:
23:45:9f:c8:01:26:9f:51:49:10:43:63:da:96:b7:
f4:82:88:c9:01:8f:37:45:20:43:ae:2f:75:4a:b5:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:BE:1A:17:AD:6D:2C:31:A5:BC:AA:F7:BE:30:4A:E4:C4:A3:43
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/hbm-GhetbSwxpbyq974wSuTEo0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.70.0-188.114.75.255
Signature Algorithm: sha256WithRSAEncryption
06:47:7f:48:b6:66:66:fe:60:67:52:10:d5:c4:eb:81:c3:34:
da:45:18:af:af:88:2d:ae:c1:24:cc:07:c7:d4:5a:dd:83:81:
36:50:ba:3c:80:eb:79:30:db:6b:ef:35:89:ce:df:27:d1:96:
85:ea:04:46:f6:cf:59:54:94:85:62:c6:9c:15:fe:8f:44:23:
c0:8c:29:49:77:ff:be:24:3f:db:f6:b8:16:f3:5e:b2:68:26:
48:e7:93:ff:81:75:81:21:8e:b1:0b:d4:e8:2a:05:ac:13:0e:
d3:cb:13:a0:2c:7e:60:47:9d:23:97:84:16:6b:23:9a:60:46:
9a:57:26:9f:fa:b9:9a:b8:26:7b:36:ac:01:0e:ff:a8:61:86:
38:75:c7:d3:c6:ff:00:d0:8e:7c:94:c4:af:50:c7:19:02:23:
20:49:8c:78:9c:7b:80:2d:0c:d9:2c:65:da:b8:ca:d5:a5:c0:
ec:72:0d:7b:d8:0b:8a:51:36:cd:69:71:b0:08:ec:ef:82:bc:
2e:32:2b:6b:b2:70:b8:b7:d9:5a:f0:4e:40:79:35:8a:f3:a1:
e5:a8:c9:f8:3d:e5:9b:d5:f5:8f:01:12:8e:8f:98:56:37:2e:
de:8d:2d:25:4b:91:9e:02:d1:72:e5:37:0d:d7:59:e2:ff:7c:
c0:22:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org