Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HhHJzCUUdPTZeKcgV1zicH6zumM.roa
File: HhHJzCUUdPTZeKcgV1zicH6zumM.roa (raw, json)
Hash identifier: prCICXHxi5Oy7XEuDM9Ijo4G+BtR39obDOhGdaNxes8=
Subject key identifier: 1E:11:C9:CC:25:14:74:F4:D9:78:A7:20:57:5C:E2:70:7E:B3:BA:63
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 1936AB71
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HhHJzCUUdPTZeKcgV1zicH6zumM.roa
Signing time: Sat 01 Jan 2022 11:57:11 +0000
ROA not before: Sat 01 Jan 2022 11:57:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62445
IP address blocks: 85.120.246.0/24 maxlen: 24
85.120.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423013233 (0x1936ab71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 11:57:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e11c9cc251474f4d978a720575ce2707eb3ba63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:70:ea:2e:c0:7d:2f:b9:ac:10:9b:ed:29:1a:
6f:aa:c5:f6:43:80:8d:6f:26:e3:46:cf:21:07:73:
f6:64:81:ed:0b:d4:c9:b3:e5:89:80:d2:6f:33:ff:
06:8d:1b:7d:21:a9:61:7a:b4:76:88:33:5b:d0:1c:
a7:ca:0d:f3:13:ad:8d:00:db:a3:68:17:f5:fa:c0:
02:07:46:4d:7a:da:9a:27:35:7f:08:05:3d:14:71:
1b:bc:60:b9:79:65:4f:ee:37:23:99:51:d6:68:73:
78:2f:cc:7f:65:a9:51:20:bb:a2:9f:d7:e6:9b:bc:
1c:4c:5b:49:c4:d6:64:86:55:6e:cc:a0:a1:85:8e:
0e:f4:45:a2:9b:1d:5b:5f:13:57:48:f0:d2:19:35:
6d:40:b7:0f:87:7a:b7:95:f2:34:c6:e0:b5:fc:fb:
89:78:e3:8e:b0:a4:83:54:0d:0c:41:9e:ad:a3:c9:
89:6e:5a:7f:aa:75:b2:ea:cf:b8:64:96:eb:96:12:
12:d6:e5:00:f7:b1:23:5b:12:47:9d:2e:18:a4:de:
67:45:0c:82:59:48:e8:e5:cc:78:e1:7d:28:b7:66:
be:2d:38:10:34:2d:10:ba:c3:67:9b:ea:69:aa:80:
e4:a4:39:ca:0f:46:23:be:89:d3:4f:92:f0:be:79:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:C9:CC:25:14:74:F4:D9:78:A7:20:57:5C:E2:70:7E:B3:BA:63
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HhHJzCUUdPTZeKcgV1zicH6zumM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.244.0-85.120.246.255
Signature Algorithm: sha256WithRSAEncryption
20:b4:08:8d:21:9e:cc:ca:32:41:aa:34:e7:a5:f6:a7:9d:dc:
6a:c4:f5:34:ef:81:b4:3f:03:d9:d6:3d:92:55:8f:3a:92:77:
b2:5c:79:ba:3a:e4:f8:95:24:e6:81:6f:c1:7b:65:1d:1d:cf:
db:79:86:63:6c:61:a1:c2:49:b7:b2:47:68:8c:50:75:61:42:
74:20:fc:b3:12:a9:f1:81:8d:9e:d1:eb:d6:e4:45:6e:79:c3:
01:a9:54:29:ee:34:ae:d5:34:ed:c9:b3:3e:d6:e1:e5:96:ba:
bf:9f:e4:b5:7c:72:3e:ec:11:9a:7f:93:cb:06:a5:34:9c:79:
be:4f:39:ac:33:2e:cf:e1:a8:7d:a6:08:d3:4c:69:96:73:cf:
3e:39:f1:e4:23:41:84:9b:fe:42:56:93:94:04:dd:26:dc:85:
53:74:e0:54:a9:f1:4b:30:bf:d9:27:19:f9:9b:0d:5a:88:7a:
35:c4:1f:45:2a:6c:f3:28:27:93:d5:b9:c8:74:66:2d:b1:46:
4d:c0:8b:2a:5a:e0:a7:0b:ce:45:62:44:07:ef:26:78:13:a7:
5b:bb:a2:eb:f9:3c:51:c1:64:de:d9:4f:43:61:ac:af:16:07:
49:22:75:ad:82:e3:02:9d:24:da:52:8a:9d:d0:86:80:c0:c3:
6d:c8:44:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org