Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/sHwbwmkA2klN4901zsmCju4jRhk.roa
File: sHwbwmkA2klN4901zsmCju4jRhk.roa (raw, json)
Hash identifier: AX+Nl73LFxnIUUNJOWPdQO55Ubhwx+LK0mpSrDKG/YY=
Subject key identifier: B0:7C:1B:C2:69:00:DA:49:4D:E3:DD:35:CE:C9:82:8E:EE:23:46:19
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0182491A6665E856B496C071ED29E3F0D7F0
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/sHwbwmkA2klN4901zsmCju4jRhk.roa
Signing time: Fri 29 Jul 2022 08:37:23 +0000
ROA not before: Fri 29 Jul 2022 08:37:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210743
IP address blocks: 217.113.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:1a:66:65:e8:56:b4:96:c0:71:ed:29:e3:f0:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jul 29 08:37:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b07c1bc26900da494de3dd35cec9828eee234619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3f:72:7c:c2:05:10:25:4d:5b:ab:a0:a8:e1:
5a:5f:6d:99:9d:a0:47:dc:aa:d1:70:8f:be:62:a7:
3f:59:7d:a5:e7:ff:54:87:c5:51:a6:5c:4a:14:6b:
19:80:6f:99:39:eb:49:b0:0b:46:96:2a:03:b6:90:
41:46:1a:4c:15:92:cb:19:e1:3b:1c:37:7d:d4:63:
89:87:30:b5:d1:da:5d:ab:c4:ca:68:5f:ab:48:e4:
46:a0:64:88:ef:28:ec:1c:26:a4:e4:8d:05:e3:ed:
a0:07:35:8a:f8:8f:00:eb:53:79:85:c5:80:65:20:
f5:4d:db:a9:47:b9:ab:52:6d:c7:02:52:cb:01:03:
d6:3a:cc:77:ca:e8:3d:c2:fb:56:d2:e7:e7:1a:b9:
d2:e4:c7:b7:ff:91:37:9c:ac:ee:8d:fa:c9:d8:54:
c0:e7:61:32:38:91:fb:f3:66:51:4d:94:cd:bb:f7:
9e:75:9a:2b:8b:ca:86:07:b5:fd:a7:90:92:8d:18:
c1:c8:a8:bb:af:28:c6:b1:14:38:e7:a4:73:af:d3:
d6:0d:aa:36:dd:20:0f:ba:72:13:59:39:fa:44:2f:
f3:b5:ad:ac:dc:e2:5d:3a:33:77:16:f4:c9:3c:a6:
33:6a:33:3a:c1:96:46:3c:46:cd:49:f4:5d:6d:23:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7C:1B:C2:69:00:DA:49:4D:E3:DD:35:CE:C9:82:8E:EE:23:46:19
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/sHwbwmkA2klN4901zsmCju4jRhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.194.0/24
Signature Algorithm: sha256WithRSAEncryption
76:59:8c:62:25:a2:eb:2b:69:f5:d8:3d:d2:39:15:47:5d:19:
2a:b1:79:9b:5a:0d:b3:85:9c:5d:ef:e1:84:39:f0:dd:d3:e1:
ee:c0:c5:b0:34:08:71:60:6b:e0:a9:21:25:7e:dd:89:de:f2:
7c:07:84:7d:80:85:0a:3f:de:38:43:bf:33:63:e7:4c:a0:3f:
f0:b0:d4:5c:11:9f:79:1c:1c:0a:01:27:4f:36:7f:e6:bd:7d:
ea:a8:6d:13:33:7d:a2:4e:2c:11:92:58:62:a6:9c:a5:ad:24:
03:cc:28:15:66:eb:cc:46:07:d7:d7:9b:8d:61:20:70:a1:61:
48:9a:f3:7e:9c:51:d1:eb:fc:d4:0b:e7:bb:05:d7:f3:d7:55:
29:32:7a:0b:d6:f3:fe:08:42:f1:b6:10:d5:8b:da:14:f2:55:
b1:04:3a:0a:fd:8b:1b:b4:ba:54:bd:42:ed:20:e3:fc:2a:1a:
58:ca:06:4b:21:00:91:f7:a1:08:ff:c7:ea:ef:c7:10:4f:b0:
3f:85:2d:1e:1d:e6:fe:e6:08:21:65:78:66:cb:54:a4:32:ff:
cf:3c:b7:36:75:f0:33:2b:fe:bf:62:ee:e3:98:ab:ed:9a:cc:
39:e1:c6:73:09:2d:82:d1:35:99:dd:8f:1a:97:3f:a9:f5:4f:
d2:bf:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:08 2024 by rpki-client on console-fra.rpki-client.org