Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/HLFN6_i1RQFIeEse287Yw7Of9Xw.roa
File: HLFN6_i1RQFIeEse287Yw7Of9Xw.roa (raw, json)
Hash identifier: viBrwYQx3kPMvw/HdM3wCGgxuYTJcAptBA3xSfVHj6U=
Subject key identifier: 1C:B1:4D:EB:F8:B5:45:01:48:78:4B:1E:DB:CE:D8:C3:B3:9F:F5:7C
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 06CD8F42
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/HLFN6_i1RQFIeEse287Yw7Of9Xw.roa
Signing time: Sat 01 Jan 2022 05:04:34 +0000
ROA not before: Sat 01 Jan 2022 05:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61320
IP address blocks: 192.109.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114134850 (0x6cd8f42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jan 1 05:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cb14debf8b5450148784b1edbced8c3b39ff57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:04:95:04:c8:b2:ad:27:cf:3a:89:ad:80:
34:f5:f4:81:d8:db:b7:6f:7d:ba:f5:e4:fd:c3:1f:
b2:b6:4a:81:39:34:f8:13:a3:22:bd:48:4f:a9:0f:
97:f0:6d:66:0d:52:a8:22:fe:33:bc:c4:58:7d:de:
03:b2:f1:40:eb:6a:61:97:23:83:bb:c5:f2:51:dc:
38:44:b3:0d:33:2c:ae:9b:b7:59:8e:06:ff:ee:92:
ca:d7:fd:5d:db:a9:9c:79:db:2c:a5:2c:f8:5a:cf:
53:b4:b4:4a:42:69:76:b9:dc:28:6d:e7:39:9f:16:
88:5c:c5:9c:40:19:da:3a:9e:0b:4d:79:f3:e7:c5:
71:c1:a2:f9:2a:3e:ca:1c:e5:c6:3f:89:28:1b:33:
f5:7e:3a:68:aa:e6:a9:30:81:11:3a:c7:de:8b:b1:
fd:53:aa:e7:d9:51:02:17:f2:e4:0a:57:90:89:42:
6f:25:0c:59:11:29:e3:cc:04:03:d1:1b:2c:4c:9a:
b1:18:d8:4f:ad:24:6d:a5:b4:80:b0:ee:35:fe:79:
40:bf:cf:0e:8e:7e:6f:50:8c:5e:a6:de:d3:9a:e6:
f9:63:bf:b6:f9:62:49:d0:55:36:7f:07:79:70:3c:
39:f6:8c:13:5f:b6:e9:28:b7:4a:ef:8f:4c:c0:6d:
6e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:4D:EB:F8:B5:45:01:48:78:4B:1E:DB:CE:D8:C3:B3:9F:F5:7C
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/HLFN6_i1RQFIeEse287Yw7Of9Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.47.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3a:fb:84:1b:e9:50:9e:c9:ad:84:83:80:71:9f:6b:5b:75:
6c:b6:04:25:be:3e:7c:56:44:de:ca:73:f4:7b:46:4a:6c:17:
22:08:75:d1:86:99:61:58:b6:f3:57:4c:f4:59:d9:1e:a1:1d:
bc:a9:a3:ec:87:f2:1c:2e:d9:21:96:23:15:4a:3b:5b:b1:cc:
fa:47:aa:eb:c8:55:4e:36:95:0c:05:59:60:4a:12:43:24:78:
f8:27:dc:dc:7d:d4:9e:c6:3d:e9:d2:62:3a:d8:76:e1:34:60:
2f:02:89:d7:a5:40:13:aa:bd:8b:bf:85:12:56:01:10:c1:23:
a5:96:45:21:18:04:cc:7f:29:3d:8e:f0:05:33:69:b6:07:f3:
67:7a:8f:59:9b:d3:c9:d8:2a:35:67:0a:ac:c6:94:85:22:09:
e2:e5:0e:b2:a0:63:bc:e2:81:25:80:e2:da:7b:89:7b:6f:e5:
c6:4e:8f:c2:81:11:55:39:e8:54:68:b4:34:ce:32:e0:7b:7a:
a7:0e:c6:4c:4a:10:75:4e:9b:68:2f:13:8c:6a:6e:a7:6b:45:
1d:0a:fb:0b:b2:81:db:e5:8e:fb:19:21:8f:c3:e9:b1:86:dd:
b5:79:3d:84:8a:6c:58:53:b4:8e:48:f8:5e:b1:32:83:e0:43:
3b:4e:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org