Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hfdtPXowREbF1Oid5tB3BBvcgKE.roa
File: hfdtPXowREbF1Oid5tB3BBvcgKE.roa (raw, json)
Hash identifier: l3O+KU2mXFslYpQrQ/xdWthMjKZuGSTZ5g/7u/f2mVY=
Subject key identifier: 85:F7:6D:3D:7A:30:44:46:C5:D4:E8:9D:E6:D0:77:04:1B:DC:80:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1EADB50C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hfdtPXowREbF1Oid5tB3BBvcgKE.roa
Signing time: Fri 27 May 2022 12:06:16 +0000
ROA not before: Fri 27 May 2022 12:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 194.55.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514700556 (0x1eadb50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 27 12:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85f76d3d7a304446c5d4e89de6d077041bdc80a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:79:34:c3:35:97:6e:c5:77:63:5e:bc:cb:
4b:35:84:59:8f:e5:9f:58:91:52:48:44:47:df:e1:
f8:bf:55:da:d8:95:d3:ab:4f:f4:07:d5:9e:f3:89:
4d:07:3b:f3:d4:77:9d:3b:db:f3:0b:87:29:20:39:
73:a7:60:c1:e1:c9:55:41:94:3c:75:94:24:f1:d3:
f1:80:17:ec:93:ac:56:10:b9:22:96:66:e3:b3:df:
6a:27:87:f1:99:26:be:41:ef:aa:a3:bb:62:6d:9b:
b5:bf:29:4c:64:af:06:83:5f:7b:34:24:4e:c8:55:
b3:15:2c:5e:c0:5b:95:b3:6a:84:0c:ae:5f:3c:f2:
11:0e:5a:e4:58:d2:32:2e:81:02:6a:13:55:e5:b3:
3f:9e:dd:54:9a:b9:4e:5a:eb:f7:c8:20:cc:01:b4:
7d:40:04:ac:9d:aa:23:9d:60:b9:07:9e:3a:70:6f:
5c:a5:1a:bf:a1:36:79:57:0e:63:88:d0:4e:ac:80:
a4:0d:13:04:da:a9:cb:55:ce:c8:25:26:48:88:bb:
fc:c6:01:26:37:9a:72:7e:99:c0:15:45:d3:7b:52:
34:0a:98:9b:74:18:a8:1c:d0:29:09:ef:8c:f1:55:
02:d9:c6:88:91:ed:34:c5:d3:8d:78:90:5d:b1:dd:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:6D:3D:7A:30:44:46:C5:D4:E8:9D:E6:D0:77:04:1B:DC:80:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hfdtPXowREbF1Oid5tB3BBvcgKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.186.0/24
Signature Algorithm: sha256WithRSAEncryption
84:47:21:23:7d:eb:92:9b:c5:dc:29:0a:99:8b:d8:f9:83:43:
1c:98:2a:fa:7b:fc:dc:4d:d7:c6:7f:da:22:36:5c:83:66:c8:
69:39:b3:93:dc:44:b6:25:c7:28:c1:59:18:7e:06:7a:eb:e8:
2f:dd:91:14:dd:46:73:72:d4:05:3a:08:73:15:02:05:d8:16:
40:13:58:7b:c4:d7:08:1d:55:61:3f:ca:48:30:4d:d8:ea:d1:
6c:f2:00:d4:c3:1d:da:7c:0c:3d:d2:ad:c1:9c:3b:b1:29:95:
b2:59:b9:8a:83:ce:25:c7:dc:81:61:10:c9:bc:28:79:de:a4:
4c:4a:e1:b1:27:2d:f2:37:ce:8b:7d:13:7a:b3:5a:43:b4:53:
a9:f7:c5:94:cd:b4:2c:81:b2:26:f9:63:46:2e:c7:99:11:9a:
1a:ad:df:8d:59:94:ca:f2:a8:ec:5e:b5:9a:ac:2f:97:da:8b:
21:9f:76:4b:6e:77:21:25:57:27:21:c6:89:8a:f2:62:5a:e6:
14:c2:9c:e5:28:61:fe:49:3c:fb:16:b9:3f:b7:99:76:93:56:
17:fa:23:08:ae:35:e9:1b:4f:8b:d6:cc:0a:e1:2d:8a:52:ac:
a6:d2:41:c6:de:8b:c1:ab:78:eb:80:b7:89:27:15:a6:43:73:
70:1a:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org