Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9HoNxxYXD2NfidxXeqipgEdttRM.roa
File: 9HoNxxYXD2NfidxXeqipgEdttRM.roa (raw, json)
Hash identifier: agbpr9YDAGddjHz61/vG719x2LyO3KWBeP5QbwMmxdk=
Subject key identifier: F4:7A:0D:C7:16:17:0F:63:5F:89:DC:57:7A:A8:A9:80:47:6D:B5:13
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C64E9A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9HoNxxYXD2NfidxXeqipgEdttRM.roa
Signing time: Sat 01 Jan 2022 01:02:29 +0000
ROA not before: Sat 01 Jan 2022 01:02:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42926
IP address blocks: 212.115.40.0/22 maxlen: 24
185.226.172.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476375459 (0x1c64e9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f47a0dc716170f635f89dc577aa8a980476db513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:e4:2e:36:7d:d5:99:d7:fa:44:11:de:86:
6c:55:c3:93:66:36:b1:26:0e:3d:5f:8b:76:a2:ce:
b8:d7:8d:42:e5:ff:98:9e:09:31:75:92:40:bc:9a:
66:3f:9c:16:31:8a:6e:0d:c9:28:13:94:ce:73:28:
91:de:3f:7e:a2:c6:d0:34:b2:3d:6a:c7:2b:d4:d8:
75:f8:da:2d:8a:50:6a:2f:45:a5:23:87:71:8a:26:
0d:98:e0:1c:f4:ae:1c:2b:43:d2:c1:05:ea:7e:07:
cd:c7:7f:6a:36:ec:6b:56:72:ab:61:2b:77:98:ed:
03:6c:79:3f:cf:ca:6f:18:0e:e3:24:65:97:d0:7d:
c0:1e:c6:f7:bc:43:65:44:78:7f:61:69:27:bd:a9:
fd:50:43:d8:d3:cb:a5:32:28:9b:98:a1:2b:70:d3:
82:c6:f9:92:07:a0:41:12:9a:57:d1:d8:7b:54:1a:
35:2f:90:99:12:15:c5:32:63:57:ac:11:75:c8:d8:
43:42:69:6b:a3:e3:6f:cf:fd:d6:ba:88:92:e6:32:
d1:f7:c0:23:75:75:2d:95:27:90:f6:90:ec:2a:25:
79:53:de:fb:6a:c8:64:69:45:83:91:71:13:9f:49:
6a:30:1b:7a:3e:b9:ba:cb:bd:47:35:62:d9:94:a9:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:0D:C7:16:17:0F:63:5F:89:DC:57:7A:A8:A9:80:47:6D:B5:13
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9HoNxxYXD2NfidxXeqipgEdttRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.172.0/22
212.115.40.0/22
Signature Algorithm: sha256WithRSAEncryption
79:6e:24:6d:c3:58:9c:e5:82:35:e3:35:52:c1:2f:04:c9:f5:
03:5b:04:f2:eb:1b:07:4f:24:8c:69:c2:3b:69:45:98:6e:1e:
17:4a:53:69:e3:98:37:0d:22:6c:8b:37:d6:08:15:dc:39:80:
14:ef:80:9c:10:df:da:9d:7c:99:fe:fe:f7:87:46:17:d8:e5:
12:9e:d9:e8:8e:db:48:c3:2c:2f:3c:c4:90:01:75:b6:5f:ee:
c1:de:97:76:94:3e:09:bc:3e:e3:9b:69:ba:b9:18:63:d8:4e:
12:1b:81:80:f2:c4:35:7d:28:08:3c:d9:36:89:50:73:53:4e:
34:a4:ce:d8:6d:62:ed:80:37:60:8d:45:87:eb:b9:ca:cc:a7:
d0:c1:de:ab:a5:c3:65:a1:ae:34:5c:b6:5e:ef:3c:60:6d:13:
92:71:9f:71:bd:ee:49:9d:52:52:75:1a:a0:b7:0d:7a:01:32:
5b:2f:cf:83:83:6c:ae:9c:a9:cb:e9:b5:d8:76:da:24:d1:0d:
9c:92:23:ed:f6:f5:d6:f9:9d:5d:db:f6:de:2d:f7:cd:b5:1e:
34:f3:10:1c:c3:7c:7f:dc:37:aa:04:04:a1:83:67:03:57:bc:
b6:f1:28:35:13:dc:c8:fc:cd:d3:4e:a1:bf:d1:92:e2:b8:0b:
16:21:3f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org