Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HQDl3ok_DV5mZM2me9voE6KIpU4.roa
File: HQDl3ok_DV5mZM2me9voE6KIpU4.roa (raw, json)
Hash identifier: ZRR/yhP+9pWkz0SSeSR6xSIIGAJEzeXdZM4SamqjHiA=
Subject key identifier: 1D:00:E5:DE:89:3F:0D:5E:66:64:CD:A6:7B:DB:E8:13:A2:88:A5:4E
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0B53CE70
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HQDl3ok_DV5mZM2me9voE6KIpU4.roa
Signing time: Sat 01 Jan 2022 08:58:30 +0000
ROA not before: Sat 01 Jan 2022 08:58:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15819
IP address blocks: 212.98.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190041712 (0xb53ce70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 08:58:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d00e5de893f0d5e6664cda67bdbe813a288a54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:36:20:94:66:a2:53:05:0d:51:f2:f6:50:3f:
b4:2c:aa:6c:6b:26:39:95:97:c0:11:b0:7e:99:6e:
56:fc:cb:24:b0:d4:29:b6:06:58:eb:c1:a0:9a:72:
fa:e7:b9:07:c1:31:de:80:9b:22:c1:cf:8d:cf:3b:
d4:5a:34:d9:1c:57:50:72:f6:b3:63:3b:f7:56:63:
e4:36:21:48:27:64:92:44:89:0c:3d:ec:be:de:c3:
e5:e8:c2:93:70:8a:b2:52:64:f8:8c:44:f6:32:d7:
28:64:93:d5:e4:58:67:21:8a:c4:27:c8:fb:7b:50:
50:0d:5f:02:d2:6f:6b:72:b5:5d:d7:12:e6:1c:d8:
4c:26:20:de:df:0b:31:16:47:53:d4:f0:7f:f7:95:
ae:07:2d:b2:05:a5:7b:3e:72:bb:ea:f3:ee:22:66:
e1:1d:09:fd:cc:86:6e:ea:de:dd:51:d1:2c:88:4c:
27:e5:ab:83:28:c0:38:d4:30:f7:a5:54:a6:d4:19:
e0:ca:3d:40:cf:a0:a8:46:06:ed:7d:17:c7:5e:14:
39:24:38:fa:24:2e:ae:a2:6c:73:9f:8d:d5:cc:8c:
f3:57:40:a3:da:be:67:d1:85:45:7a:58:3a:45:4f:
f1:03:3f:2e:e4:22:2d:11:d0:74:21:c9:c2:5c:f3:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:00:E5:DE:89:3F:0D:5E:66:64:CD:A6:7B:DB:E8:13:A2:88:A5:4E
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/HQDl3ok_DV5mZM2me9voE6KIpU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.98.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ab:e7:42:79:49:08:82:c8:fb:f7:f1:ad:de:42:8f:5c:df:
b1:c4:7f:81:48:2d:a6:1c:2b:c8:cf:c9:9f:d5:e1:0c:c7:b4:
7d:d6:60:7e:d0:eb:58:c6:07:7e:6c:7f:97:ac:dd:d9:1f:cd:
61:c2:68:96:58:14:96:6c:6b:dc:8f:d2:76:24:a4:94:07:48:
4c:dc:37:f2:58:db:fc:6b:03:e0:28:a6:dd:0f:c3:ce:e5:30:
20:22:1d:c7:88:74:9a:bb:84:5c:b9:29:ca:7f:ee:b5:c4:ca:
e0:1b:20:dc:c2:e1:f0:18:92:39:f2:f3:08:46:0d:7a:7f:b3:
bd:1c:ef:1d:a7:c7:26:f2:a1:50:31:bc:e0:ff:ae:f0:89:81:
2f:c3:3c:06:e8:76:62:82:c2:e3:d5:ad:0d:d2:a0:e2:80:e0:
ab:30:b6:0f:ca:79:b5:c8:5d:bb:81:ed:76:05:d0:91:c0:35:
3d:f0:9e:9b:6a:f0:ae:37:f1:61:b0:bb:e0:1f:32:43:37:24:
fa:f9:62:0d:44:67:54:b2:c1:9e:30:a7:80:c0:72:3c:bc:d0:
bb:1a:08:25:fa:b8:4a:9f:82:29:0d:93:ed:0a:47:81:4e:20:
30:14:09:e3:72:56:12:e3:b1:15:e7:c4:df:bb:ab:71:fd:a4:
e0:78:47:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org