Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/HQJEkHvSk3i-2DSpCuBt70qmzos.roa
File: HQJEkHvSk3i-2DSpCuBt70qmzos.roa (raw, json)
Hash identifier: uVeHoZD216qtpotmXgSx9oGNoXFANucjIyAApeRX8kw=
Subject key identifier: 1D:02:44:90:7B:D2:93:78:BE:D8:34:A9:0A:E0:6D:EF:4A:A6:CE:8B
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 33052531
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/HQJEkHvSk3i-2DSpCuBt70qmzos.roa
Signing time: Sat 01 Jan 2022 09:58:38 +0000
ROA not before: Sat 01 Jan 2022 09:58:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15785
IP address blocks: 194.146.199.0/24 maxlen: 24
188.0.71.0/24 maxlen: 24
188.0.69.0/24 maxlen: 24
188.0.70.0/24 maxlen: 24
188.0.68.0/24 maxlen: 24
31.128.65.0/24 maxlen: 24
188.0.74.0/24 maxlen: 24
188.0.72.0/24 maxlen: 24
194.110.79.0/24 maxlen: 24
5.1.3.0/24 maxlen: 24
5.1.2.0/24 maxlen: 24
2a01:758:8306::/48 maxlen: 48
2a01:758:8301::/48 maxlen: 48
2a01:758:8305::/48 maxlen: 48
2a01:758:8300::/48 maxlen: 48
2a01:758::/48 maxlen: 48
2a01:758:8303::/48 maxlen: 48
2a01:758:8304::/48 maxlen: 48
2a01:758:8307::/48 maxlen: 48
2a01:758:8302::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855975217 (0x33052531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 09:58:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d0244907bd29378bed834a90ae06def4aa6ce8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:64:eb:7b:07:28:51:46:9a:20:c7:69:26:
4a:09:92:b3:9d:70:ae:6c:c5:d9:86:fa:ba:65:97:
94:7a:ce:69:eb:9d:b0:c6:3f:19:98:67:82:f0:bd:
52:a6:2d:4a:65:b3:70:62:6e:80:e9:77:75:eb:83:
6d:71:a7:e8:36:12:91:47:10:55:e4:1e:74:f3:4a:
94:dd:bb:87:5c:b7:14:87:ae:90:2d:6b:9e:ff:68:
2a:15:7d:7a:e3:82:26:20:3f:a5:67:c9:08:48:60:
57:b3:cb:84:9b:aa:c1:2c:64:61:3f:4c:9c:25:41:
97:24:11:c9:54:5c:1f:d7:11:18:1d:59:42:f0:1a:
03:f0:d8:f9:00:68:99:7c:82:dc:e5:ad:d3:67:fc:
ab:91:b8:9b:60:47:58:46:43:24:1c:fe:c7:a4:81:
bf:61:e8:14:e6:1f:69:75:ab:83:97:60:5a:32:59:
18:49:2e:48:36:b3:3e:83:aa:74:5c:e2:f8:5a:39:
6a:3d:28:69:f9:1f:1b:2a:19:6b:d3:53:63:f4:fd:
e8:d5:a8:81:7e:21:2d:43:4c:bf:eb:8a:d4:c2:47:
06:1a:44:9a:61:b1:6d:91:a5:54:b4:32:59:f2:de:
06:dc:be:c4:0d:ea:81:72:c2:79:c8:2f:40:fa:3a:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:02:44:90:7B:D2:93:78:BE:D8:34:A9:0A:E0:6D:EF:4A:A6:CE:8B
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/HQJEkHvSk3i-2DSpCuBt70qmzos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.2.0/23
31.128.65.0/24
188.0.68.0-188.0.72.255
188.0.74.0/24
194.110.79.0/24
194.146.199.0/24
IPv6:
2a01:758::/48
2a01:758:8300::/45
Signature Algorithm: sha256WithRSAEncryption
0a:bf:91:59:b8:b2:82:fa:df:6d:c2:58:ca:f9:ec:27:c9:ba:
70:6a:ef:83:a7:a1:e6:6e:3a:1f:f2:bc:fa:21:07:ba:d0:93:
d3:d4:65:d2:45:fe:17:bf:f9:7b:12:ef:9d:1e:83:0c:ee:6c:
9b:b4:c0:25:32:63:f6:83:98:30:96:8b:60:da:bd:e0:20:39:
06:12:69:29:b4:83:f4:69:75:cf:83:10:f4:2c:bc:84:17:85:
62:aa:f4:c0:1b:16:68:ba:5d:d0:9c:95:f0:7e:e1:3d:51:b1:
de:38:81:ef:50:6c:7d:99:13:49:42:76:a5:8b:ea:53:92:86:
12:a7:40:45:e1:76:0b:9c:ee:ee:94:f3:f8:77:b3:f2:a2:8a:
dd:eb:1e:1f:92:22:c7:f9:d0:79:d1:82:c2:46:3e:0e:ff:c3:
0b:6c:ee:ec:bf:e4:1d:7f:e9:3f:8e:b8:a0:34:1e:c8:17:ac:
fd:23:31:23:d2:a4:f3:43:bc:34:b5:d6:32:7c:e6:68:a0:6f:
42:5f:a7:b1:69:ff:19:d2:93:f1:fa:ba:87:a6:a0:e7:d6:3a:
9d:d9:05:af:cb:68:e1:80:73:13:5d:73:02:1c:d6:d6:4e:01:
e0:be:2a:52:f8:cb:32:98:98:c0:bf:0b:e1:e9:74:68:1a:8f:
9c:3b:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org