Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/HffZ_-8nA1YekymHYNkxWmOKFFc.roa
File: HffZ_-8nA1YekymHYNkxWmOKFFc.roa (raw, json)
Hash identifier: HUiu/hwJK8/PGObApt7tyWfNP/5hgnYrP1uWAPagI6U=
Subject key identifier: 1D:F7:D9:FF:EF:27:03:56:1E:93:29:87:60:D9:31:5A:63:8A:14:57
Certificate issuer: /CN=081cb333913cf413bbafd9277937b3061a61817c
Certificate serial: 094506E8
Authority key identifier: 08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/HffZ_-8nA1YekymHYNkxWmOKFFc.roa
Signing time: Sat 01 Jan 2022 02:57:03 +0000
ROA not before: Sat 01 Jan 2022 02:57:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44939
IP address blocks: 193.142.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155518696 (0x94506e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081cb333913cf413bbafd9277937b3061a61817c
Validity
Not Before: Jan 1 02:57:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1df7d9ffef2703561e93298760d9315a638a1457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:51:e0:03:16:3c:02:12:cf:c1:2a:95:cc:
f7:6e:88:52:69:bb:8a:86:24:c6:a6:c4:80:2f:5e:
77:c9:fb:15:e0:66:42:0f:62:ef:c3:0b:c5:02:c6:
fa:3d:ca:32:7c:61:0b:48:42:e0:2b:0d:07:81:d8:
7f:d2:1c:81:1f:3a:55:c1:40:54:f1:81:1f:fe:8a:
8c:5d:fd:0b:c4:96:a7:36:89:81:aa:7b:a1:49:29:
29:70:6e:ef:b9:5f:f6:ee:d3:24:5b:35:7e:8b:c8:
99:3c:ce:2c:88:db:86:fa:bb:54:b4:96:8f:a7:e7:
1c:64:a9:5b:e1:e0:15:85:27:f6:17:e7:15:82:c1:
04:89:64:c3:e7:a4:66:32:a9:56:0a:d2:98:4d:fd:
57:5e:e7:3f:a6:e0:78:a7:1c:fe:7c:a4:f1:02:b2:
da:0e:9b:bd:28:fa:5e:05:d2:28:55:6a:03:5c:61:
3b:a8:9d:0d:a8:b5:20:4e:5a:5f:20:76:6c:4f:b3:
c9:ea:bb:3b:72:c7:9f:1d:e3:37:47:0b:f5:26:7a:
53:42:e4:ba:14:8a:30:86:5e:6b:51:52:6d:7f:a5:
89:80:05:22:61:46:fa:f6:43:8c:85:c7:75:67:f1:
1d:3c:a3:cf:7e:f3:08:aa:c4:d3:e6:91:82:c2:6c:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F7:D9:FF:EF:27:03:56:1E:93:29:87:60:D9:31:5A:63:8A:14:57
X509v3 Authority Key Identifier:
keyid:08:1C:B3:33:91:3C:F4:13:BB:AF:D9:27:79:37:B3:06:1A:61:81:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CByzM5E89BO7r9kneTezBhphgXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/HffZ_-8nA1YekymHYNkxWmOKFFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/2084c5-4eba-4457-a8ec-32471c5908a2/1/CByzM5E89BO7r9kneTezBhphgXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.196.0/22
Signature Algorithm: sha256WithRSAEncryption
96:bc:e9:d5:b9:37:f8:c7:db:fd:76:32:2a:ec:dd:e6:64:7a:
d5:6a:36:6a:8e:43:b8:02:8e:ac:9e:76:ea:cf:b3:3e:c7:37:
d2:ac:eb:3f:07:60:46:25:fc:1f:be:a2:0e:50:4c:c4:94:94:
0f:15:28:2a:df:a7:a6:0d:7b:d4:2e:c2:b5:74:ed:81:13:37:
a4:3d:83:4a:a8:15:7b:1e:08:46:58:4a:12:ed:db:7e:cb:6b:
38:41:66:2e:4f:c8:40:98:c1:3e:a8:fc:aa:c8:13:8a:f6:23:
75:7c:46:4b:59:db:fd:32:48:94:cf:7e:c0:79:c8:ec:76:09:
8d:3e:01:6e:d4:33:f8:e6:fa:7f:17:17:71:e8:f5:0d:67:42:
f6:53:8f:46:3b:41:d4:a2:53:d3:2c:bf:63:96:81:9b:e1:a0:
52:0c:e4:55:84:d0:79:46:59:b1:74:8c:43:f1:8f:12:17:27:
4d:79:3f:27:22:a8:f1:51:87:69:98:29:57:06:0d:a4:f0:fa:
3c:c6:ea:16:b2:35:82:8d:dc:75:0b:fc:81:42:a1:ad:34:7d:
a1:6f:c6:d3:7a:af:89:f6:b7:f7:66:29:99:2c:d9:ae:41:c6:
d6:fc:1b:b2:be:75:7f:5a:17:f2:28:47:31:73:96:7a:e7:b8:
db:a8:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:52 2024 by rpki-client on console-fra.rpki-client.org