Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/HJPzgARIhrTyux8b7dDq16AVPw4.roa
File: HJPzgARIhrTyux8b7dDq16AVPw4.roa (raw, json)
Hash identifier: /kpHeU5HBOTJ5qkKRbifD+iYipYdRFLQSVybbLYcMZA=
Subject key identifier: 1C:93:F3:80:04:48:86:B4:F2:BB:1F:1B:ED:D0:EA:D7:A0:15:3F:0E
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 01842E69B2FF217F45534416FA9659A17E9F
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/HJPzgARIhrTyux8b7dDq16AVPw4.roa
Signing time: Mon 31 Oct 2022 14:19:49 +0000
ROA not before: Mon 31 Oct 2022 14:19:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209311
IP address blocks: 193.111.211.0/24 maxlen: 24
2a0a:8ac0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2e:69:b2:ff:21:7f:45:53:44:16:fa:96:59:a1:7e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Oct 31 14:19:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c93f380044886b4f2bb1f1bedd0ead7a0153f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:ec:29:38:4e:06:72:92:12:72:dd:66:e8:
55:e4:16:8e:cd:6b:82:11:ad:01:db:73:72:68:99:
f8:2b:73:aa:02:39:d2:27:a1:f9:d6:cb:dd:14:76:
82:c6:80:d0:64:65:42:1d:fd:1b:af:78:e7:3b:d7:
ba:52:31:eb:dc:2d:58:74:8a:d1:89:3c:1e:b8:1d:
be:ec:6b:12:19:43:bf:29:aa:f8:22:7c:9d:37:4e:
12:bc:f3:c8:11:a1:6c:9a:ff:c1:26:b0:70:db:cd:
1c:40:10:cc:56:e8:d7:a3:e1:02:37:67:bd:ba:0d:
ad:e9:9f:da:aa:4b:f9:3b:95:3d:41:0a:b1:47:f2:
49:e2:e0:88:b2:cd:c1:dd:7d:75:cd:30:8f:27:62:
69:47:de:1f:52:4c:c4:8f:cc:ff:6f:05:54:e1:74:
4a:43:36:f9:44:40:c7:7a:82:2c:84:ab:d7:77:15:
6b:7e:e7:b7:97:30:36:e6:4d:6e:68:04:61:30:fa:
5b:4d:3f:ef:14:96:7f:53:0e:15:51:7a:b9:71:df:
1e:9b:d4:94:91:22:bd:2d:4e:fb:a0:51:41:cd:f0:
3a:38:85:46:68:ac:88:13:0e:2b:2e:1e:14:da:64:
dc:e0:b4:b9:61:2c:6a:ff:b8:cb:3a:05:7c:30:29:
8e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:93:F3:80:04:48:86:B4:F2:BB:1F:1B:ED:D0:EA:D7:A0:15:3F:0E
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/HJPzgARIhrTyux8b7dDq16AVPw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.211.0/24
IPv6:
2a0a:8ac0::/29
Signature Algorithm: sha256WithRSAEncryption
91:fc:6e:ee:ec:d6:54:e2:7a:d7:6d:e6:25:44:3f:30:fb:4d:
e2:ae:a6:70:59:e8:69:70:23:4b:54:2f:5e:dc:7a:25:20:1e:
a2:a6:ed:66:95:f0:8f:28:79:48:8b:82:ee:38:1d:ce:08:54:
b7:72:ef:74:e9:37:07:ff:ee:47:e3:58:ed:bc:d9:c5:85:7a:
ca:c2:a0:a9:4c:1d:b6:05:2c:13:06:c5:66:71:d8:60:7f:57:
9c:b4:f5:07:1c:36:13:04:c5:a2:a6:8b:dd:bd:de:87:3d:cb:
1c:b4:9b:f8:64:89:7f:5e:8e:ad:6b:00:c7:7f:b6:30:e6:ba:
20:07:1c:5b:b3:8e:09:e8:a2:70:e1:02:f1:81:59:dd:8e:d6:
69:26:77:ae:ef:f4:55:27:f1:b3:74:32:19:00:79:46:24:50:
79:59:f4:c7:d5:58:89:3f:5e:dc:57:b0:a0:a7:e3:d0:87:5c:
9f:90:a9:c6:cd:a2:47:1f:d4:45:26:b3:08:80:56:0c:91:6d:
be:72:21:80:07:4a:d1:1e:40:c9:13:77:57:72:99:53:38:4b:
8f:84:e8:e1:fe:e0:70:2d:a0:2c:25:16:40:21:8c:de:bc:b2:
85:cd:6f:88:b9:fd:ab:15:97:db:30:bd:f0:2e:38:5f:cb:25:
0d:e9:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:21 2024 by rpki-client on console-fra.rpki-client.org