Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hg4afqto8RINr1g6imfxArFqUYM.roa
File: hg4afqto8RINr1g6imfxArFqUYM.roa (raw, json)
Hash identifier: skiquXDnATCMyvlzHD8mvF1UxMJmTHB8mnOdb3LU+iw=
Subject key identifier: 86:0E:1A:7E:AB:68:F1:12:0D:AF:58:3A:8A:67:F1:02:B1:6A:51:83
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0182E84EA240AE70BC32CFF957387EB1825A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hg4afqto8RINr1g6imfxArFqUYM.roa
Signing time: Mon 29 Aug 2022 06:34:03 +0000
ROA not before: Mon 29 Aug 2022 06:34:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 79.110.50.0/24 maxlen: 24
185.218.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e8:4e:a2:40:ae:70:bc:32:cf:f9:57:38:7e:b1:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 29 06:34:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=860e1a7eab68f1120daf583a8a67f102b16a5183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:0d:f9:5e:d7:35:6d:e0:62:ef:2f:b9:82:
5d:2b:d5:ea:c7:e8:09:b1:92:0b:b1:47:12:eb:71:
e4:1b:c4:66:82:11:d1:9d:a2:df:01:e9:43:cc:e7:
1f:6a:cc:4e:bb:81:42:c9:1d:7f:29:b3:0c:f5:12:
1b:7a:23:87:8e:75:f0:01:99:68:e4:bb:6b:6e:d3:
d1:39:ad:18:f7:e7:63:19:59:df:73:8a:1e:0f:88:
98:82:52:32:22:9a:63:8e:73:95:60:62:4f:ed:38:
3e:a6:c7:7c:93:10:de:bd:28:8c:8a:14:eb:71:8e:
ac:52:ee:1f:34:81:a2:ac:33:5d:5e:72:76:a4:62:
6b:81:78:6a:73:dc:72:0d:ab:aa:91:e3:61:3d:9a:
17:7e:bd:44:9a:5f:86:53:92:46:a6:ed:70:61:51:
47:c2:45:57:e9:b6:d5:88:79:c5:e3:36:8f:8c:b0:
c5:00:e1:5b:33:b3:8d:34:5c:95:ca:f1:ed:42:c9:
6a:96:93:88:03:6c:16:d2:05:e1:75:5e:8d:82:51:
5d:8b:3b:33:df:0c:9b:b7:98:73:1e:fa:70:fb:9e:
01:cf:ff:93:ec:29:96:51:14:be:0f:12:ae:ad:84:
ab:02:7e:cf:b4:65:2b:32:3b:3f:66:72:03:47:ff:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0E:1A:7E:AB:68:F1:12:0D:AF:58:3A:8A:67:F1:02:B1:6A:51:83
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hg4afqto8RINr1g6imfxArFqUYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.50.0/24
185.218.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6a:31:fc:e9:4c:88:68:8e:ed:c4:ef:0d:d6:c5:55:ff:3c:
db:5c:33:94:6b:ec:bd:d6:4c:19:e4:71:9b:46:7d:2e:eb:b9:
7f:dc:f7:6b:14:82:3d:69:18:e7:d9:c7:30:66:08:14:0a:65:
7b:c6:b6:e5:79:48:f7:83:b2:16:07:cd:00:7c:3a:0a:71:5d:
4e:9e:17:b3:11:5e:b6:b1:ce:4a:1a:1a:13:1a:ee:fc:32:49:
1b:dc:8a:50:63:53:e9:cd:68:1e:cc:61:ec:38:47:80:a4:c0:
0e:a6:91:7a:ef:63:df:dc:10:c0:4c:6c:7a:d4:f8:f3:6c:d7:
48:17:31:5f:75:04:2f:46:f3:da:26:96:fd:58:a8:e5:9d:1c:
2e:6d:b9:cb:b8:c4:b1:a1:4c:1f:e6:e1:ca:a1:2f:36:41:79:
02:72:fe:80:aa:85:c4:26:c9:f8:af:be:d5:bb:32:73:89:dc:
a0:0c:41:4d:92:12:96:b1:a0:e3:82:83:b0:02:74:f7:75:d2:
78:ae:da:95:0e:40:cb:b8:ae:79:af:1b:8b:25:92:67:b5:bf:
5a:53:7e:a1:c6:af:5c:9c:5d:50:21:09:0b:a8:4d:26:c6:ae:
a7:93:f8:de:eb:d8:c7:85:71:aa:d9:f0:8f:2f:9f:df:35:ad:
79:91:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org