Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hwYqhFU92yP4hXWsY-BysHOndyQ.roa
File: hwYqhFU92yP4hXWsY-BysHOndyQ.roa (raw, json)
Hash identifier: cXcj1Uf7oxSSVqqI81IdyYJvcjv0rLleb7dQRYKKyiA=
Subject key identifier: 87:06:2A:84:55:3D:DB:23:F8:85:75:AC:63:E0:72:B0:73:A7:77:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1C8EF928
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hwYqhFU92yP4hXWsY-BysHOndyQ.roa
Signing time: Sat 01 Jan 2022 01:02:53 +0000
ROA not before: Sat 01 Jan 2022 01:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209524
IP address blocks: 87.120.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479131944 (0x1c8ef928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 01:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87062a84553ddb23f88575ac63e072b073a77724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:c6:b6:1b:68:9a:b1:7f:f2:a9:00:12:31:
1a:4e:b7:d3:8f:45:1a:0f:f6:5e:fc:74:c6:82:63:
a6:64:e8:12:08:75:80:dd:1d:93:55:9c:cb:0c:b9:
31:23:35:65:45:ab:5e:e2:8a:c2:5c:b8:8c:eb:04:
2c:f9:ea:46:a3:3e:02:2d:4f:0e:0f:20:20:6a:3e:
33:26:4e:22:21:fa:de:25:97:f6:34:cd:50:6b:5b:
de:13:34:42:f9:9b:ad:1e:14:fe:91:14:da:1a:4d:
a7:fc:ed:6e:89:76:b9:47:ad:16:a7:db:7d:0f:8b:
a1:17:7b:bb:3f:f1:75:cf:b0:a7:75:2e:aa:66:71:
8f:ec:6d:9a:f9:2a:49:46:49:0a:fb:43:d7:8d:73:
3f:84:93:bf:88:bf:31:6e:94:46:66:f3:59:d5:55:
c4:c6:b5:3d:4d:34:79:90:46:3c:7a:36:56:35:54:
1d:d6:80:3c:69:b3:b9:2d:50:96:a7:2f:f6:bb:91:
15:4f:25:f7:ab:bf:50:d3:fd:c6:25:29:87:6c:b0:
71:5a:6d:9d:2f:d2:d3:48:c9:3e:c9:7e:dd:ad:47:
d5:e6:6b:c1:d8:34:8c:7f:a9:1f:24:6b:e0:d4:6a:
d2:d3:59:5c:aa:7b:cb:90:5c:24:8a:5d:66:64:ef:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:2A:84:55:3D:DB:23:F8:85:75:AC:63:E0:72:B0:73:A7:77:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hwYqhFU92yP4hXWsY-BysHOndyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4a:0a:b7:2c:15:c5:6e:93:05:ee:63:2d:15:16:f4:92:5f:
66:e5:28:8e:35:3d:ac:b9:b7:e2:5b:95:2b:f5:3d:9c:e5:f4:
e8:f2:18:cd:57:0c:af:97:0a:68:35:02:a4:af:b5:a2:8c:8b:
7d:5b:b6:6e:51:d8:0e:68:51:4f:4c:28:14:7a:5b:03:4f:b5:
01:ac:f0:f1:c9:8a:1b:42:5c:12:84:89:1f:79:44:d7:e7:bc:
4e:ae:4f:80:d6:ee:c1:f1:c7:63:ce:6e:25:79:83:1c:7d:c9:
53:9b:c1:c9:f0:2b:08:10:6a:af:52:ec:07:3e:55:26:6a:fe:
f8:59:89:fa:ee:51:d0:a3:17:69:4a:80:78:83:4d:50:f2:b1:
cb:17:3a:04:24:13:3c:c3:63:cf:a3:e0:72:cb:5f:2d:01:5b:
2b:d1:7b:c4:e6:aa:92:91:e8:ab:19:33:bb:68:2a:7f:c5:d9:
c2:9b:65:75:6e:aa:0d:c2:41:7f:83:54:f3:e4:c9:d2:f6:06:
31:2f:be:8f:85:da:f4:fb:bc:63:16:16:1e:ec:18:d5:eb:9f:
55:ad:38:f2:27:32:45:07:65:2e:4c:0b:11:b1:8c:4d:25:01:
c8:56:c9:34:11:80:9c:c3:1a:11:62:18:10:e9:cc:07:65:1a:
df:4b:31:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org