Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hKK-a9NJdy-Mwe7ACMOYxtezA4E.roa
File: hKK-a9NJdy-Mwe7ACMOYxtezA4E.roa (raw, json)
Hash identifier: gMzb2AXqEwzolC+DbF3/Kg1I3qdXTKbqGgeQNbL60Mc=
Subject key identifier: 84:A2:BE:6B:D3:49:77:2F:8C:C1:EE:C0:08:C3:98:C6:D7:B3:03:81
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0182ED92546C0F90008D443EFE7C21774D59
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hKK-a9NJdy-Mwe7ACMOYxtezA4E.roa
Signing time: Tue 30 Aug 2022 07:06:06 +0000
ROA not before: Tue 30 Aug 2022 07:06:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 212.193.15.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ed:92:54:6c:0f:90:00:8d:44:3e:fe:7c:21:77:4d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 30 07:06:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84a2be6bd349772f8cc1eec008c398c6d7b30381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:98:ba:3f:23:2d:11:99:8f:8b:89:11:bb:ab:
27:1e:13:70:7e:95:d6:25:dd:ae:75:ce:2b:1b:c6:
ae:1b:e9:53:ed:0f:36:4a:fe:64:3d:41:8a:43:f4:
98:62:0e:81:b6:c6:28:b8:af:66:f3:39:ed:68:d9:
31:70:8c:5b:41:dd:04:03:a9:4a:aa:bd:a5:62:ee:
61:d6:7a:11:d0:02:fa:50:fd:34:e4:ab:8c:ac:ad:
39:cf:50:e6:2c:67:72:42:9b:1d:f9:8b:80:8c:c2:
c0:b4:a1:fe:5a:31:0b:a2:73:8b:7f:88:34:04:2f:
7f:07:bc:d7:2d:66:56:58:8c:d6:80:9e:7b:2d:d7:
4c:72:28:de:5a:e5:68:1f:7a:f8:c0:0b:b7:d8:77:
65:56:eb:db:2e:fa:2e:05:cb:db:c8:e0:e0:88:f4:
d1:fe:31:7f:47:46:2b:23:cd:35:75:6b:f4:38:58:
c2:70:60:eb:af:40:a4:d9:dd:59:5c:2b:37:0e:cd:
f1:89:b1:3f:8b:30:ab:39:50:03:60:84:fb:1c:e6:
df:37:30:b9:e2:d4:a6:4e:8d:d4:c1:8e:87:cc:bc:
32:c7:c0:48:c2:1f:f0:1b:85:3a:5b:44:b9:77:c5:
22:e6:74:42:84:a3:c5:d0:89:cb:ca:bf:f4:e7:36:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A2:BE:6B:D3:49:77:2F:8C:C1:EE:C0:08:C3:98:C6:D7:B3:03:81
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hKK-a9NJdy-Mwe7ACMOYxtezA4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.55.0/24
212.193.12.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d5:1c:cd:7b:80:a6:98:f8:69:6d:cc:30:cf:32:cc:3c:06:
3e:0d:96:4c:dc:e5:47:d5:9b:c0:f0:57:9b:84:a7:f5:a7:c0:
7a:ca:ac:1f:be:07:a6:58:ee:5e:11:79:2e:94:f9:78:e2:48:
06:4d:91:f1:fd:f2:8c:9f:da:c7:81:88:79:f0:21:6d:7e:64:
a5:5e:65:d6:03:71:c0:7c:8a:9f:f9:b9:fc:06:3e:27:de:b9:
c4:46:c3:b8:0a:03:d4:87:bc:ea:4f:0b:85:8f:78:a9:82:42:
ee:69:1b:99:81:bb:89:58:52:10:e6:2d:b2:4f:d6:29:c3:e5:
44:79:09:ac:3c:58:f2:97:1c:6a:fb:49:68:c1:e3:db:30:f4:
c7:7f:a5:1a:a8:ce:cc:04:a9:74:94:9d:db:46:ae:33:0d:c1:
5d:b7:91:64:fa:ed:7f:97:8c:c1:db:ff:0c:51:ae:2e:50:54:
6a:98:47:59:6a:77:e1:44:1b:7d:de:f4:6b:df:61:c6:48:8c:
af:5d:e1:cb:1e:7d:d2:ef:dd:36:93:9c:54:66:b3:21:43:11:
88:cf:72:60:f6:0d:1f:0d:72:74:0e:a5:c1:7f:a6:1c:bd:ee:
20:34:ab:52:02:80:94:4d:aa:81:cd:f1:2a:8b:42:be:fd:e7:
90:c5:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org