Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/hh89bSLJNDTAjAvaA4VGzPpQp-s.roa
File: hh89bSLJNDTAjAvaA4VGzPpQp-s.roa (raw, json)
Hash identifier: +5a/nJMDgYrT/FG/TYwodJ1jHQqQkYu/eDCrjy0p/dI=
Subject key identifier: 86:1F:3D:6D:22:C9:34:34:C0:8C:0B:DA:03:85:46:CC:FA:50:A7:EB
Certificate issuer: /CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Certificate serial: 08F1BA84
Authority key identifier: EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/hh89bSLJNDTAjAvaA4VGzPpQp-s.roa
Signing time: Sat 01 Jan 2022 10:02:07 +0000
ROA not before: Sat 01 Jan 2022 10:02:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200780
IP address blocks: 217.18.221.0/24 maxlen: 24
217.18.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150059652 (0x8f1ba84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f08d4ee1f94f984493b467bd8aca2adfa2866
Validity
Not Before: Jan 1 10:02:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861f3d6d22c93434c08c0bda038546ccfa50a7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:2d:68:3e:55:9f:02:5d:d4:b6:57:f5:81:
b7:47:66:a7:4b:cf:59:40:11:d1:f4:35:54:dc:50:
30:8e:4d:cc:69:4b:80:10:0f:05:aa:72:ed:91:d0:
99:c3:fd:ab:63:2a:81:31:e3:47:d9:38:81:96:98:
e5:ae:33:46:a8:e8:25:df:e2:a9:64:6b:af:d6:91:
6f:b0:35:55:66:57:17:29:2f:0e:97:21:20:ea:47:
fe:f3:35:e8:6f:2d:d5:e4:f1:29:57:bb:6f:f4:b7:
5e:c9:c0:99:ac:7c:b7:3b:94:6f:35:90:1d:4a:02:
f0:d7:40:29:f7:82:94:17:c2:0a:15:9b:11:58:8b:
60:cd:39:14:f3:4e:c3:0a:cd:63:8c:de:82:6f:d4:
27:a0:03:ac:ef:bd:27:ee:38:72:b3:df:47:af:c9:
b8:72:06:ac:78:7c:df:27:b0:27:ee:e3:f0:dc:60:
33:b6:92:cd:b0:85:cf:61:f8:84:47:77:cd:e7:97:
af:a6:c6:e8:e3:0f:4b:7a:dc:7b:85:73:d5:11:54:
3d:ca:e3:8c:9e:c3:8e:18:db:ac:f1:7a:76:d7:2e:
c6:30:32:98:59:19:bb:a2:5b:3a:b4:ea:a9:8a:a3:
9d:b4:6f:fe:68:39:fe:2e:81:7b:f6:d9:5a:76:ed:
a4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1F:3D:6D:22:C9:34:34:C0:8C:0B:DA:03:85:46:CC:FA:50:A7:EB
X509v3 Authority Key Identifier:
keyid:EA:0F:08:D4:EE:1F:94:F9:84:49:3B:46:7B:D8:AC:A2:AD:FA:28:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g8I1O4flPmESTtGe9isoq36KGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/hh89bSLJNDTAjAvaA4VGzPpQp-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/67eb49-ff08-4ea4-bb9e-2efb461fd413/1/6g8I1O4flPmESTtGe9isoq36KGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.220.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:58:1c:cc:8d:d0:31:a7:c5:be:65:fc:21:d5:db:cd:44:98:
74:05:f1:d0:63:34:da:b2:ec:68:67:7e:b3:e0:11:e0:a1:b8:
8b:8e:96:f7:e4:ac:90:95:59:54:05:7e:b8:0e:f5:00:ac:9b:
c5:be:ce:87:10:e8:b1:e1:c4:bf:cf:c9:47:e5:21:34:1f:48:
de:91:45:0d:75:af:e2:99:e8:75:6f:f3:e2:96:a4:a2:fd:14:
0a:79:a6:e4:80:f2:8d:1c:db:9f:c0:b0:5b:97:e2:8f:2a:06:
15:ad:4a:e6:30:ea:31:09:51:b7:35:6f:b8:fe:e4:29:74:ab:
4c:c5:43:b5:cd:b7:d8:78:c9:1f:55:e5:62:a3:ed:bd:e3:a1:
10:58:81:15:37:a4:23:98:0d:b3:55:82:f1:01:40:e6:4b:c4:
0b:1e:f4:bd:26:52:0d:a3:1a:e2:c3:19:2c:40:91:cd:5e:69:
3a:25:26:ba:56:a8:7d:7d:bf:a9:a5:cf:10:06:96:e8:32:10:
82:9c:7f:cd:c4:b8:93:bd:29:9b:0b:98:57:9f:3f:59:d2:ca:
1e:3b:0b:8a:07:95:c2:98:e6:73:1d:53:ff:15:03:7a:a0:92:
43:8f:35:16:d0:a1:12:28:08:18:49:f2:f5:db:3f:ac:77:6c:
fe:c2:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:12 2023 by rpki-client on console-fra.rpki-client.org