Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/HxMjiYT-KaRC-G9qAXlOExGeg10.roa
File: HxMjiYT-KaRC-G9qAXlOExGeg10.roa (raw, json)
Hash identifier: vvQnLTGAMa9FNb8hrYZDHTYkdkh8mfZ1ybOfM9IHPhA=
Subject key identifier: 1F:13:23:89:84:FE:29:A4:42:F8:6F:6A:01:79:4E:13:11:9E:83:5D
Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Certificate serial: 03DEB278
Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/HxMjiYT-KaRC-G9qAXlOExGeg10.roa
Signing time: Sat 01 Jan 2022 01:54:06 +0000
ROA not before: Sat 01 Jan 2022 01:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41535
IP address blocks: 89.253.192.0/21 maxlen: 21
89.253.200.0/21 maxlen: 21
193.32.198.0/23 maxlen: 23
89.253.208.0/21 maxlen: 21
89.253.216.0/21 maxlen: 21
89.253.224.0/21 maxlen: 21
89.253.232.0/21 maxlen: 21
89.253.240.0/21 maxlen: 21
89.253.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64926328 (0x3deb278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd
Validity
Not Before: Jan 1 01:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f13238984fe29a442f86f6a01794e13119e835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:22:e1:54:1a:56:c1:d3:05:3a:94:ff:d0:
45:fd:a1:29:16:8c:42:b1:1a:d4:91:bc:f6:ad:aa:
b9:f0:6e:f8:1a:c3:e1:fd:47:32:ad:60:90:cd:04:
d1:76:57:ee:7e:d5:68:6d:82:5d:29:4b:40:fc:b8:
ab:e9:b3:bb:44:55:85:f6:b8:f8:4c:33:df:15:5f:
3b:b2:62:24:37:fe:39:a7:c4:58:11:12:09:64:87:
79:ed:14:8f:1c:35:35:8d:9d:b5:5f:d2:ae:8e:ab:
26:53:62:2b:08:e1:f8:81:6d:fc:cc:74:6b:35:0d:
95:f6:35:f0:73:23:7a:1b:51:e8:fb:dc:6d:8e:95:
aa:93:18:47:8b:72:dc:44:ce:f5:7d:0c:a0:0f:6b:
33:b0:d0:16:c6:9c:11:84:93:b4:7d:2c:32:b6:b4:
9b:53:02:df:0e:62:84:39:d2:83:01:90:18:a8:c5:
0b:c8:23:37:3a:d9:c7:b1:32:34:10:f0:8a:0f:54:
fc:1d:6b:01:2d:f5:09:4f:3d:ff:3d:49:2a:f1:32:
c4:66:f4:0d:b6:34:0d:40:a3:5d:f2:59:0b:03:3b:
7b:6c:56:6e:3a:77:7c:64:0f:e0:bb:1f:ec:19:30:
e5:7d:78:d3:ca:d3:09:6f:ba:35:72:b5:9f:08:2b:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:23:89:84:FE:29:A4:42:F8:6F:6A:01:79:4E:13:11:9E:83:5D
X509v3 Authority Key Identifier:
keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/HxMjiYT-KaRC-G9qAXlOExGeg10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.253.192.0/18
193.32.198.0/23
Signature Algorithm: sha256WithRSAEncryption
45:14:08:e1:4b:a1:11:6b:c1:b6:a1:f2:de:c6:c7:15:38:57:
4d:ea:23:39:2c:36:73:5e:5f:a8:bd:f6:ae:c7:1d:1d:10:25:
44:bf:c2:f5:03:6d:be:41:36:22:81:24:2f:38:11:85:ea:46:
da:41:7f:2f:9f:b1:74:0a:f6:63:d2:62:b0:e8:b9:6a:0a:fe:
3d:04:ef:c4:1a:6f:1b:2a:91:81:21:a5:28:66:eb:98:24:78:
2e:da:f7:b7:20:ff:28:a8:aa:ed:56:2f:79:50:da:de:b6:83:
5b:37:a3:10:25:f0:2a:ae:c1:9d:4a:a2:fa:13:c2:2b:48:e8:
4d:c3:d2:f6:d5:9f:24:a6:d3:df:6f:66:50:09:af:ea:9b:91:
9e:8f:9c:43:f0:52:94:52:29:55:99:2c:08:0a:f7:a1:39:85:
2a:e3:de:ef:f6:7b:de:9f:70:3e:3d:3b:24:c9:d6:b2:0f:2a:
9a:36:5b:0f:37:08:0f:c1:31:38:5d:87:32:fa:25:a7:5f:45:
94:be:6b:74:b9:7b:77:10:c8:64:a0:e5:c0:82:be:8e:83:a5:
6d:fb:21:3c:27:bf:b8:5d:99:56:5d:b6:99:75:6f:d4:26:c9:
f7:fa:60:61:07:37:5a:8d:fa:b5:fc:c9:12:82:62:e8:d7:30:
05:ee:3a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org