Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/HCEfuzV8UgCqYmLthfXtL_Kst00.roa
File: HCEfuzV8UgCqYmLthfXtL_Kst00.roa (raw, json)
Hash identifier: D0d9N7kBbJGja4Il+et7nzz1zSVqEtV7PiuFr2hJ55o=
Subject key identifier: 1C:21:1F:BB:35:7C:52:00:AA:62:62:ED:85:F5:ED:2F:F2:AC:B7:4D
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 0C740BC2
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/HCEfuzV8UgCqYmLthfXtL_Kst00.roa
Signing time: Thu 14 Apr 2022 13:47:57 +0000
ROA not before: Thu 14 Apr 2022 13:47:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 193.201.28.0/23 maxlen: 23
185.1.218.0/24 maxlen: 24
2001:7f8:10::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 208931778 (0xc740bc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Apr 14 13:47:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c211fbb357c5200aa6262ed85f5ed2ff2acb74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:e2:7e:26:a6:fd:f5:28:8c:a0:c5:36:74:
6e:f9:cd:62:4c:f9:f7:cd:5d:fc:ba:6e:4d:e8:0c:
dd:70:ab:00:c6:ea:ff:45:a0:b9:2c:ef:5e:b6:ba:
14:a0:6f:e4:ef:19:14:47:f8:17:bd:f6:05:b8:fa:
8e:44:6f:4c:31:c1:26:cc:0c:ec:e0:fb:a9:2d:f4:
24:33:bd:d9:50:43:b9:24:77:28:b0:29:9c:f3:95:
ae:bb:62:cd:0b:f1:2a:98:17:53:bc:c8:18:ac:c5:
34:03:77:39:95:fe:c4:d2:86:0a:e1:fe:a1:98:ae:
31:01:ff:6f:f0:f2:58:78:68:9e:60:9a:6f:f4:e8:
0e:46:7b:94:52:f1:bc:33:8d:a8:1e:bb:02:43:d0:
47:db:88:69:5a:e6:3a:98:60:6d:6a:ba:32:85:c3:
16:ba:ff:a3:f7:6c:b0:92:a6:8d:52:e5:01:88:56:
1f:86:b5:16:c0:79:b7:ff:84:b2:88:5b:8d:70:b7:
2c:b1:eb:77:5e:d6:f9:15:33:d5:e4:b6:4d:3a:fc:
48:22:ad:3a:78:f7:dc:0f:e6:c7:2b:1f:14:c3:0d:
99:40:11:63:e7:7d:53:89:0f:77:14:38:a4:66:8e:
61:0d:59:eb:5e:8e:a7:bd:f5:d8:2a:dd:05:bc:f2:
f8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:1F:BB:35:7C:52:00:AA:62:62:ED:85:F5:ED:2F:F2:AC:B7:4D
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/HCEfuzV8UgCqYmLthfXtL_Kst00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.218.0/24
193.201.28.0/23
IPv6:
2001:7f8:10::/64
Signature Algorithm: sha256WithRSAEncryption
0f:f2:7b:25:c3:39:37:e8:b6:3f:b0:e6:6e:e3:3f:f4:29:12:
96:fe:18:03:29:51:62:52:09:e8:67:b8:0e:3e:db:11:49:79:
0f:82:55:3a:3f:38:f9:f0:7d:b2:41:85:57:25:fa:3a:86:1e:
ee:62:82:5f:7e:6e:7f:3a:13:0b:02:04:9e:91:d9:0e:73:e9:
6c:66:6f:a8:d2:f9:c0:3b:1e:c6:47:9b:85:f2:41:4a:47:c5:
e7:4b:00:ae:93:79:0b:5f:be:d2:eb:61:b8:6d:33:ca:ea:33:
5a:77:0b:74:6c:0b:60:17:cb:54:64:49:a0:2b:0a:96:7c:1f:
99:55:3c:cc:e2:e7:9a:0d:74:28:de:1d:14:f2:e2:48:d8:62:
5c:b6:f9:a0:40:95:a3:50:c9:a2:b1:9d:a2:bc:c2:0a:99:fd:
9e:c8:11:ac:b4:c5:e4:f3:dd:e0:08:08:47:4b:e4:d2:25:2f:
39:9e:4c:9d:15:3b:0e:9b:3f:93:0a:61:3e:ab:90:0d:fa:27:
56:61:c4:e2:44:44:03:4e:3c:a8:1a:b4:39:c9:5b:da:6d:ff:
a5:c8:eb:93:36:f7:cf:7e:34:af:a4:da:b0:97:5e:66:a3:2f:
89:74:69:1c:76:82:ec:5c:39:50:1f:11:94:16:6b:2a:57:b1:
de:51:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org