Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HM1r6Kg7p6ghA8hRwuFLL2HoA8o.roa
File: HM1r6Kg7p6ghA8hRwuFLL2HoA8o.roa (raw, json)
Hash identifier: QCnTQKyhvRhIFBul3YLo0Yw3nrQb6FH+lYceH+bj5g0=
Subject key identifier: 1C:CD:6B:E8:A8:3B:A7:A8:21:03:C8:51:C2:E1:4B:2F:61:E8:03:CA
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0F80CDD1
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HM1r6Kg7p6ghA8hRwuFLL2HoA8o.roa
Signing time: Sat 01 Jan 2022 08:05:02 +0000
ROA not before: Sat 01 Jan 2022 08:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51764
IP address blocks: 195.208.202.0/24 maxlen: 24
195.208.203.0/24 maxlen: 24
195.208.200.0/24 maxlen: 24
195.208.201.0/24 maxlen: 24
195.209.100.0/24 maxlen: 24
195.209.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260099537 (0xf80cdd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 08:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ccd6be8a83ba7a82103c851c2e14b2f61e803ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:5a:ba:1e:b7:11:51:03:40:87:5f:6e:2d:
08:11:72:55:93:3e:a5:f5:18:08:d5:01:0a:f3:ed:
32:9a:ef:f5:0f:27:49:f0:6c:76:57:b1:bd:80:95:
ee:3a:de:67:82:49:cb:47:c1:cd:86:f1:6a:3d:f4:
fe:f3:5c:d1:fc:c2:25:f4:fa:be:be:95:a8:12:8a:
30:d4:97:6d:46:a5:28:d4:d6:97:ed:65:aa:1e:84:
5d:73:00:c1:55:62:f9:8c:01:05:22:1c:7e:ef:c8:
f0:56:63:d5:72:dc:04:88:7c:e8:4c:45:ca:2c:fd:
49:81:39:a8:20:b0:64:04:27:ee:86:b6:20:d4:f5:
0a:61:b0:51:ed:14:a8:5b:17:16:d1:e0:3b:5a:85:
b4:a4:92:e5:20:d2:79:33:01:4c:a4:c0:25:eb:61:
8c:3f:9c:11:95:ec:55:f4:26:35:4d:91:38:4e:04:
74:96:1f:ba:da:84:ee:e4:29:fb:77:98:57:2e:17:
74:a9:04:ab:f1:43:50:b7:99:44:10:b4:5c:96:82:
9a:ac:9a:b3:4b:2a:2f:a8:53:55:d1:fc:fa:a6:24:
92:33:1f:b4:af:3e:e3:50:0c:32:87:30:99:e8:f2:
3f:e3:b5:b1:33:b6:c2:84:02:48:8c:97:fe:7a:df:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:6B:E8:A8:3B:A7:A8:21:03:C8:51:C2:E1:4B:2F:61:E8:03:CA
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/HM1r6Kg7p6ghA8hRwuFLL2HoA8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.200.0/22
195.209.100.0/23
Signature Algorithm: sha256WithRSAEncryption
91:b4:ed:7f:10:96:d3:9d:ae:56:31:6b:2a:6b:f7:b6:01:e3:
ce:79:36:e3:55:92:68:6c:f6:bc:94:5e:6d:2f:35:b6:05:aa:
13:7c:c1:5d:00:08:f6:fd:5a:bb:8d:c2:fc:b6:ab:f7:78:cc:
f7:06:92:af:8b:4d:e2:10:c5:00:bf:52:09:83:38:0a:6e:5d:
96:f1:ce:6d:ad:2f:dd:5a:f9:0d:9d:89:5b:21:33:46:e0:a6:
91:42:e1:7b:6f:3a:86:70:a5:26:53:46:62:17:71:2e:0c:00:
5e:8b:e2:5d:4c:bc:af:62:62:a8:da:34:52:38:90:90:3b:e9:
83:1b:53:73:56:fd:f0:0a:04:75:8a:40:a4:e3:8e:80:59:cc:
37:11:c5:ef:c5:6c:15:a9:2f:1b:04:be:1c:b0:cb:d8:42:1d:
6e:58:dc:19:f1:5c:86:40:2a:58:9c:2a:12:46:a5:38:11:18:
da:60:25:10:4f:ea:4f:6f:20:da:ba:e4:87:0c:6c:dd:ec:13:
4a:15:15:5f:0b:48:de:0f:41:90:3a:b4:69:7b:3f:f0:c5:32:
0a:81:08:46:2b:13:62:64:18:ff:65:5f:9b:9e:66:28:14:a7:
00:a1:75:e3:42:a9:b4:79:4b:c0:9f:24:2e:89:c3:d7:80:13:
7c:99:58:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org