Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/HU1cHagLRKhq7nscT19SyYnq9wk.roa
File: HU1cHagLRKhq7nscT19SyYnq9wk.roa (raw, json)
Hash identifier: pCyYTZdE6OFBkiW+lZSxGLhJZeM3ywZpVUtxPI5DxWU=
Subject key identifier: 1D:4D:5C:1D:A8:0B:44:A8:6A:EE:7B:1C:4F:5F:52:C9:89:EA:F7:09
Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Certificate serial: 198BD0
Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/HU1cHagLRKhq7nscT19SyYnq9wk.roa
Signing time: Tue 12 Apr 2022 06:39:47 +0000
ROA not before: Tue 12 Apr 2022 06:39:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61275
IP address blocks: 188.93.184.0/21 maxlen: 21
185.24.188.0/22 maxlen: 22
85.93.224.0/19 maxlen: 19
178.248.96.0/21 maxlen: 21
91.135.48.0/21 maxlen: 21
91.135.58.0/24 maxlen: 24
91.135.56.0/23 maxlen: 23
185.3.0.0/22 maxlen: 22
77.223.162.0/23 maxlen: 23
77.223.172.0/22 maxlen: 22
77.223.168.0/22 maxlen: 22
91.135.59.0/24 maxlen: 24
77.223.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1674192 (0x198bd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112
Validity
Not Before: Apr 12 06:39:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d4d5c1da80b44a86aee7b1c4f5f52c989eaf709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ed:b2:af:9c:b9:e9:1b:75:c3:c8:bc:cc:e0:
19:e1:cf:dc:3a:29:8e:96:62:41:71:09:8e:29:f7:
10:de:7c:69:39:60:9e:64:73:d8:5f:98:e9:59:61:
dc:55:ec:e0:be:5a:a6:18:61:1d:94:30:15:51:28:
76:f6:ac:ed:d2:13:40:ac:b0:07:f4:17:87:cc:0a:
82:ff:40:a8:96:00:86:1b:a9:43:47:8f:21:a2:9c:
3f:38:28:b6:ee:87:a2:49:4f:f0:1d:34:de:10:cc:
63:ad:45:89:6d:03:2e:13:8d:e6:9f:aa:68:49:30:
a0:c3:4d:61:90:7b:aa:ba:b9:a1:06:0b:2d:29:24:
64:97:81:4f:c1:43:9d:d0:4c:b9:12:cb:bb:cc:75:
fb:61:13:c0:d7:57:20:0d:4a:e1:ba:dd:af:32:8f:
04:32:25:56:01:0e:e8:c0:5a:30:5e:40:3c:b4:ed:
84:b2:98:d8:ef:5b:01:28:d7:ce:5d:e5:11:05:8c:
6a:ea:40:f9:7c:be:d1:ef:14:fc:62:67:06:e7:68:
44:66:a9:c1:2d:bf:65:07:3e:4f:dd:d7:44:49:c6:
8a:b8:78:37:89:15:af:f3:ec:6c:7d:d5:01:e7:0c:
10:d0:6e:38:13:9d:c0:30:f2:41:cf:ef:73:ee:a3:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4D:5C:1D:A8:0B:44:A8:6A:EE:7B:1C:4F:5F:52:C9:89:EA:F7:09
X509v3 Authority Key Identifier:
keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/HU1cHagLRKhq7nscT19SyYnq9wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.162.0/23
77.223.168.0-77.223.191.255
85.93.224.0/19
91.135.48.0-91.135.59.255
178.248.96.0/21
185.3.0.0/22
185.24.188.0/22
188.93.184.0/21
Signature Algorithm: sha256WithRSAEncryption
46:bf:4a:50:ea:b4:5c:78:28:3e:1e:6f:55:0d:bb:cb:0b:99:
73:69:57:fa:13:d4:ec:23:00:58:47:8a:8e:1f:2f:d1:a6:6d:
58:d4:c5:81:a4:70:ba:f4:87:06:a4:46:5f:af:6b:1d:d6:82:
5f:11:ff:ad:47:84:41:7f:b5:41:a4:83:3e:cc:75:9d:be:e7:
19:3d:43:c5:4a:06:2f:26:97:a5:9f:d2:75:7b:09:82:e6:7a:
42:91:34:f7:ed:cf:0e:f0:61:7e:ff:c9:5b:32:da:65:96:de:
92:db:12:08:88:44:77:e0:fd:f8:10:18:d9:76:4d:94:c4:bf:
67:13:8a:22:b5:1d:62:34:54:00:76:40:0d:51:a0:bb:06:db:
55:14:80:0b:fe:3a:15:5c:fd:97:43:d9:19:4f:ba:88:38:94:
4b:54:1c:2b:e1:69:9e:22:4b:2e:85:e0:76:64:f8:39:b5:a8:
03:d4:eb:07:5e:89:4b:bf:a1:e5:47:c4:37:48:6e:84:dd:d3:
5b:62:6e:a7:86:9d:b3:98:4e:bd:03:c7:18:87:f4:99:a3:a6:
37:11:2c:c8:37:e7:c2:a3:e8:a3:24:15:ba:19:7e:db:fb:55:
e1:09:50:e4:19:bc:ff:1d:06:cc:a8:21:54:34:ae:58:9d:8f:
c8:d4:60:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:57 2024 by rpki-client on console-fra.rpki-client.org