Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hApRvqSJ88-5yAe_jEKmLSQhNt4.roa
File: hApRvqSJ88-5yAe_jEKmLSQhNt4.roa (raw, json)
Hash identifier: I1XfWnQftwSpXOIWZRVo4npUrgCEKcj8KGaKTW7i8iE=
Subject key identifier: 84:0A:51:BE:A4:89:F3:CF:B9:C8:07:BF:8C:42:A6:2D:24:21:36:DE
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 0D882C77
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hApRvqSJ88-5yAe_jEKmLSQhNt4.roa
Signing time: Mon 31 Jan 2022 11:03:13 +0000
ROA not before: Mon 31 Jan 2022 11:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41153
IP address blocks: 91.215.4.0/22 maxlen: 24
194.140.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227028087 (0xd882c77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 31 11:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=840a51bea489f3cfb9c807bf8c42a62d242136de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:af:ec:49:ac:3b:0e:00:e3:15:56:63:e3:
1e:dd:b6:01:e1:0b:08:d2:6d:58:76:2f:5b:f4:09:
18:71:07:c3:0c:6d:f1:63:68:e7:1a:41:a3:4a:11:
44:99:03:ac:ee:d7:32:82:38:87:cb:b3:34:d9:1c:
5d:46:f3:f8:70:8d:fb:85:87:a2:5b:a9:40:e5:11:
42:a2:e1:d4:d8:07:65:c3:18:0b:09:d1:02:6d:ee:
dc:01:3f:06:7c:48:07:cf:94:32:fd:ee:90:b4:db:
1b:4a:dd:a8:3c:b7:e1:1e:0c:b4:1f:35:8a:b8:2c:
8c:d7:b7:2b:12:51:ae:05:5a:4a:b9:3d:28:24:48:
0c:ce:ef:c2:34:dd:af:36:b8:22:95:02:98:aa:bb:
c5:48:5d:ec:46:ad:d2:06:3a:6e:04:0f:f7:03:31:
22:85:97:d2:f2:77:9f:4d:21:28:af:66:51:63:f4:
5d:28:fd:c3:b6:6c:97:d6:a3:18:87:84:4e:2e:c8:
83:a8:fe:01:8f:99:84:e8:f7:97:25:af:9c:5c:8a:
00:4d:ae:1d:a7:e8:78:02:48:eb:53:6d:92:9d:2a:
e5:ab:5f:9d:28:52:a1:30:0d:6f:d6:b6:bd:bf:c4:
a4:cc:39:dd:4e:3a:42:e8:ca:1e:47:34:32:17:dd:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:51:BE:A4:89:F3:CF:B9:C8:07:BF:8C:42:A6:2D:24:21:36:DE
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hApRvqSJ88-5yAe_jEKmLSQhNt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.4.0/22
194.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a8:4d:36:9c:e1:4c:e0:f9:e8:64:c7:df:59:ca:40:40:31:
b6:8f:cd:0c:b4:93:40:94:e5:b6:7a:1f:39:ed:9c:32:ff:7f:
aa:38:f6:44:14:ed:00:48:12:2b:a3:5d:36:e5:20:55:52:c8:
4e:8c:f3:a5:64:7f:2e:a4:2e:59:cb:bf:40:93:c4:d8:22:44:
68:55:5d:e3:57:86:33:63:e5:f4:67:f9:d0:e9:29:5a:3e:44:
2c:2c:5e:b9:43:10:a0:3d:6a:21:1c:20:10:17:9a:d4:b7:20:
5e:7e:0f:17:27:48:1b:41:df:47:5b:3f:d7:3e:28:ef:d2:85:
80:9b:d5:8d:7d:bd:67:81:d9:ff:63:b8:62:73:5c:bb:02:24:
38:06:39:4d:b8:d9:bd:ff:2b:7d:4b:1e:04:e9:65:84:1e:12:
26:55:67:99:ee:c4:da:70:c3:21:53:d7:eb:7e:ad:c0:d8:4d:
94:f2:e5:d9:1e:b3:a0:23:d4:b1:5a:02:b6:91:0b:07:49:c8:
e6:4b:1e:fc:31:a9:61:60:34:5e:52:f2:40:ec:69:a8:6d:67:
1c:eb:73:80:85:8c:b4:ca:48:e5:fa:45:25:57:b9:95:7c:39:
32:f6:1b:ec:07:96:db:be:08:06:18:75:8a:31:20:69:e7:82:
cf:82:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:47 2024 by rpki-client on console-ams.rpki-client.org