Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HFPBQ-G7DTMlVYksWV3vEIZI2RA.roa
File: HFPBQ-G7DTMlVYksWV3vEIZI2RA.roa (raw, json)
Hash identifier: kSredhGLYxl1V2ijfFE29HbdiofLp68GubNyYOO/f/c=
Subject key identifier: 1C:53:C1:43:E1:BB:0D:33:25:55:89:2C:59:5D:EF:10:86:48:D9:10
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0181F7527EDBAFF23B0AD275C77FA6A03E40
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HFPBQ-G7DTMlVYksWV3vEIZI2RA.roa
Signing time: Wed 13 Jul 2022 11:29:47 +0000
ROA not before: Wed 13 Jul 2022 11:29:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48614
IP address blocks: 195.133.68.0/22 maxlen: 22
194.87.112.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:52:7e:db:af:f2:3b:0a:d2:75:c7:7f:a6:a0:3e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 13 11:29:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c53c143e1bb0d332555892c595def108648d910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:68:8a:43:85:5f:78:6a:62:d6:29:13:b3:
8e:5f:d8:35:fd:33:44:42:37:20:f6:3f:1a:cb:a3:
a7:ec:a8:f2:d0:4d:13:cf:a0:49:48:dc:b6:98:fe:
26:9f:fd:89:67:18:03:bf:57:cf:c2:9f:c5:7d:37:
cd:50:73:f1:b5:67:e6:89:82:66:69:29:55:1b:77:
6f:a6:d4:d9:f7:0c:0e:da:8c:10:d9:de:09:78:69:
9d:89:ee:0f:92:04:47:4c:e4:cb:43:d5:99:0c:e0:
15:fa:84:6e:2b:fc:9f:f0:5a:7e:66:1e:0b:f0:ef:
86:4b:3d:2d:ca:2c:be:9d:6a:63:00:3b:a7:60:3d:
f0:da:7b:8b:c7:78:f6:1c:aa:46:23:64:59:9c:b3:
2e:72:ae:57:56:39:2d:7e:34:4f:5c:1e:a0:0e:56:
1d:7d:3f:83:64:ab:f3:fc:c0:c1:62:4f:f9:73:f9:
73:03:6a:1f:57:51:85:f7:2f:ab:d2:eb:8b:4b:be:
ba:2c:92:a2:19:d2:94:37:94:e0:1e:52:94:dc:db:
e5:9d:ee:f9:e9:c7:e2:a0:9d:c2:31:41:56:3e:6b:
b3:d5:27:0f:88:95:13:82:7a:38:57:39:b7:16:0d:
d5:3f:39:44:48:0f:b8:45:9f:a6:75:e6:c6:7c:06:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:C1:43:E1:BB:0D:33:25:55:89:2C:59:5D:EF:10:86:48:D9:10
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HFPBQ-G7DTMlVYksWV3vEIZI2RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.112.0/23
195.133.68.0/22
Signature Algorithm: sha256WithRSAEncryption
72:73:18:d1:fb:00:a2:d5:44:d0:8a:09:7e:a6:c2:dd:cb:c1:
d1:0c:f8:6a:b6:6f:0c:91:6a:2c:0b:a3:a5:b9:62:e8:c5:ea:
1c:95:0f:1c:6e:76:fa:75:4e:e3:c6:ce:b2:32:3a:68:81:15:
37:99:ef:5e:cc:25:5a:e3:ad:f8:8e:8b:0d:fa:f2:6e:56:b7:
75:9e:a2:c9:03:3d:4b:c5:18:02:a4:98:78:2c:64:10:35:44:
53:36:eb:84:96:02:be:a6:c2:19:62:51:7c:cd:30:67:94:c5:
1b:de:08:7b:fd:f6:fe:4a:3d:84:63:8c:7a:8d:9d:b0:f7:b6:
91:0e:90:c8:c1:5f:84:28:28:a6:8e:57:66:21:de:68:73:93:
0a:0f:ae:59:5d:cc:78:e5:c1:86:11:57:c2:cb:76:98:4b:e9:
05:ce:a7:09:2d:c7:38:75:b8:3f:00:c3:fc:f3:b9:32:a2:b0:
0c:c4:e0:8b:df:7c:2d:ae:e1:82:1d:24:4e:58:28:00:c3:ac:
92:e8:36:fa:13:89:d7:ae:8f:a7:b7:97:11:f0:04:ac:81:87:
a8:5f:d3:b2:9d:d9:ed:55:ee:7e:92:44:d7:a6:f3:a9:a4:cf:
7b:c0:2e:2c:9e:ed:21:0a:3a:9a:61:39:34:d6:1e:25:2a:45:
fe:30:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org