Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/H8nwEKAVn30Zvis767QJJnmEsfg.roa
File: H8nwEKAVn30Zvis767QJJnmEsfg.roa (raw, json)
Hash identifier: r0+1fbX75hxg/atv4K8trtDDtZcyPqLPA0tX8ZaxSWQ=
Subject key identifier: 1F:C9:F0:10:A0:15:9F:7D:19:BE:2B:3B:EB:B4:09:26:79:84:B1:F8
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 03409EEB
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/H8nwEKAVn30Zvis767QJJnmEsfg.roa
Signing time: Sat 01 Jan 2022 06:01:56 +0000
ROA not before: Sat 01 Jan 2022 06:01:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 194.37.85.0/24 maxlen: 24
194.37.86.0/24 maxlen: 24
194.37.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54566635 (0x3409eeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 1 06:01:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fc9f010a0159f7d19be2b3bebb409267984b1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:12:52:27:7d:6b:56:b4:c1:30:37:22:e1:
e6:ac:aa:d8:db:31:0b:63:ec:9e:91:3b:4e:3e:fc:
f2:1c:d5:ed:95:8e:d7:87:0b:1c:08:8f:e1:80:ce:
f2:20:d3:fe:44:63:97:10:cf:15:ae:ed:ee:0d:5d:
66:a2:e3:25:c5:bb:47:92:e5:75:c9:8b:0c:cf:03:
f1:9e:04:f7:eb:1c:81:94:40:a4:49:13:bf:eb:f4:
ff:91:72:29:7f:3d:eb:91:1d:7c:c1:0a:0e:01:df:
19:45:f8:c1:70:fa:9b:84:1c:db:b5:73:c8:59:d6:
b7:30:90:d1:dd:e1:37:71:60:a0:81:2f:31:16:b6:
e1:f9:73:91:6a:fa:39:0d:a6:fe:16:8a:df:d5:e5:
5e:f9:cd:53:54:17:b1:7f:d0:9d:ce:84:01:2a:98:
92:53:9c:4e:52:ff:18:54:03:5a:83:9a:9a:68:eb:
93:eb:88:a5:36:54:4c:0c:f5:90:d1:50:f8:70:66:
d9:7f:c5:fe:6e:60:fc:69:c1:26:25:7d:32:bf:88:
6f:62:08:c3:30:95:e5:65:67:6d:e8:5c:6d:26:12:
49:fe:f3:f7:1f:1b:ad:5f:04:c5:24:20:84:b5:58:
fe:1e:39:ec:5a:c4:43:af:49:4e:e5:f1:c0:88:af:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C9:F0:10:A0:15:9F:7D:19:BE:2B:3B:EB:B4:09:26:79:84:B1:F8
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/H8nwEKAVn30Zvis767QJJnmEsfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.85.0-194.37.87.255
Signature Algorithm: sha256WithRSAEncryption
aa:12:0c:77:a8:da:9e:93:88:ce:75:17:11:e4:c8:51:16:d9:
65:92:f1:15:16:20:e6:92:85:0f:29:ca:2b:fb:a4:77:cc:33:
18:a0:7a:3f:06:d9:7d:6b:2a:6a:55:8e:a7:fd:f5:fc:6a:2c:
c7:a8:54:37:9a:0d:e8:90:7c:f2:09:59:2f:11:8b:b7:a6:4d:
0e:12:74:94:14:35:88:e0:a0:05:e4:80:c1:35:5d:c3:e9:3e:
42:49:ad:61:4c:3e:30:1b:68:5b:b4:8c:e5:2b:63:20:eb:00:
c7:00:05:78:dd:94:1d:09:ae:c3:c3:1d:aa:73:bd:a1:bc:9d:
95:ba:3e:a0:fd:cc:37:40:3e:de:6c:48:e5:f0:fc:ad:9c:7d:
06:66:54:9f:57:83:53:a4:f2:1e:30:ec:19:28:51:73:b3:d3:
c5:f7:95:da:0c:f7:11:ed:14:d7:19:ee:fa:01:a7:91:17:85:
74:ce:26:ca:a0:19:20:43:08:b1:dd:ed:45:f6:81:0e:b5:21:
66:9f:f8:25:75:27:48:e2:bf:55:64:90:3a:e2:8e:03:74:09:
04:7e:7d:00:84:81:42:a6:9b:f6:2a:29:a6:d7:4f:6f:f3:d5:
5c:f1:41:75:5b:83:3e:96:a5:89:31:ce:9e:c4:63:48:a9:32:
1a:1f:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:59 2024 by rpki-client on console-ams.rpki-client.org