Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/HHQAo5dqxZisHOn8yA_xGuCMLMo.roa
File: HHQAo5dqxZisHOn8yA_xGuCMLMo.roa (raw, json)
Hash identifier: +AvVdLT014cT8jO4AmYYyQyOO3rrwRN09/ZpOfTrkhQ=
Subject key identifier: 1C:74:00:A3:97:6A:C5:98:AC:1C:E9:FC:C8:0F:F1:1A:E0:8C:2C:CA
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 322EA783
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/HHQAo5dqxZisHOn8yA_xGuCMLMo.roa
Signing time: Sat 01 Jan 2022 16:05:48 +0000
ROA not before: Sat 01 Jan 2022 16:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61429
IP address blocks: 81.23.240.0/23 maxlen: 23
185.6.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 841918339 (0x322ea783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Jan 1 16:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c7400a3976ac598ac1ce9fcc80ff11ae08c2cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:4d:51:43:0b:49:f7:60:aa:fa:93:02:28:
bc:fa:31:79:ee:80:0e:50:f1:5a:78:06:47:88:45:
11:63:8d:9f:42:b8:22:2a:10:2b:4c:84:3f:d3:2d:
b9:8c:67:51:31:77:7d:61:93:1e:0c:91:8c:a0:c1:
37:89:be:98:26:59:d1:7d:4b:66:2c:77:8c:bb:45:
74:cb:0f:c3:2c:d3:14:be:d3:a3:29:ab:4c:82:fd:
90:3d:88:a8:4c:69:d6:0d:c6:86:0b:ea:7b:39:a6:
40:44:7a:c6:5c:b3:f6:22:64:b0:20:68:5b:b8:49:
af:fa:67:d9:dd:4f:5a:56:54:66:15:e3:6c:a0:16:
3b:de:81:91:e9:ad:18:1e:1f:3c:c5:c9:82:0c:03:
76:f1:8e:69:01:f0:e5:9e:cb:ce:f0:da:43:cf:1b:
38:d9:9e:bc:0f:04:74:79:3a:4e:9e:f8:7f:b8:ef:
5e:f2:27:4a:4e:bd:1b:ad:e3:f0:5c:26:12:9c:b3:
9f:bd:ce:20:c8:f6:28:f7:c4:e5:f8:06:4c:2e:4c:
4e:44:c2:dc:91:36:d0:47:d2:10:0f:74:d9:4a:69:
7b:a8:e6:1c:24:00:a6:af:10:70:83:2b:dd:d3:79:
29:de:b0:a3:f8:d9:c9:98:99:f0:f6:e8:6e:3c:f4:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:00:A3:97:6A:C5:98:AC:1C:E9:FC:C8:0F:F1:1A:E0:8C:2C:CA
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/HHQAo5dqxZisHOn8yA_xGuCMLMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.240.0/23
185.6.108.0/22
Signature Algorithm: sha256WithRSAEncryption
98:39:64:8c:ea:19:a7:d8:94:b1:52:cb:d1:18:6c:cb:f5:18:
d7:de:d6:04:ee:d1:cc:f0:cd:2d:d4:b5:be:36:df:02:73:da:
3e:17:f4:bf:7f:b9:40:37:94:a6:87:af:b4:0f:73:e6:12:48:
03:31:33:6c:b6:9f:06:2e:53:86:ee:92:a3:f5:fa:c2:80:71:
f7:72:0a:c5:d4:cc:7d:32:fc:08:16:78:48:6c:3c:30:66:dc:
00:7c:ba:2c:be:a8:98:cc:f7:ef:b2:d6:30:e1:9b:c5:81:76:
cc:9c:54:d0:9e:ce:98:21:b5:2b:9c:80:05:24:eb:75:b1:83:
84:16:fc:2d:cb:4c:df:dc:1f:3f:46:67:64:7d:e0:ca:6b:1e:
65:b3:14:1c:e3:ab:3e:28:b4:5d:8a:fe:a0:f3:56:87:32:3b:
7b:0d:cb:9e:ac:1e:61:25:85:28:70:a2:7c:f1:ea:f7:56:af:
5d:79:64:76:36:d1:f6:06:9c:70:89:98:a8:d0:9c:f4:fa:c6:
82:e6:9a:d8:7a:46:b2:b5:99:f9:11:d4:81:ec:f8:35:3b:09:
6e:d3:9f:0a:38:3e:19:90:99:2a:fe:06:84:ed:26:be:d2:b0:
c1:f2:38:b1:64:0a:0a:de:c5:af:9a:ea:7d:9b:4a:4e:38:9a:
a7:55:8e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:17 2024 by rpki-client on console-ams.rpki-client.org