Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/HvEUx1gIK1Ga2v_sNwCL646IANo.roa
File: HvEUx1gIK1Ga2v_sNwCL646IANo.roa (raw, json)
Hash identifier: pe7HYbhOPh6YzdQHCuTpbsdt0MVsBFQPD4ZpzD07mEI=
Subject key identifier: 1E:F1:14:C7:58:08:2B:51:9A:DA:FF:EC:37:00:8B:EB:8E:88:00:DA
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 09F6E71F
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/HvEUx1gIK1Ga2v_sNwCL646IANo.roa
Signing time: Sat 01 Jan 2022 15:57:21 +0000
ROA not before: Sat 01 Jan 2022 15:57:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133480
IP address blocks: 185.54.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 167175967 (0x9f6e71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 15:57:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ef114c758082b519adaffec37008beb8e8800da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:f0:db:41:5d:28:bf:2e:5a:68:0d:ac:b1:
09:4c:7c:81:69:f5:fd:49:cf:e0:3e:b9:13:48:4e:
de:b8:d8:52:cb:57:32:f9:9f:e6:dd:02:3c:8b:7a:
9f:7b:25:33:bc:07:b2:6d:8a:d6:2f:c9:6b:40:63:
57:37:60:9e:2a:ed:e1:69:4c:ad:8e:f7:bb:dc:2e:
7a:d5:11:35:0f:3a:e2:6a:e8:9e:3b:41:81:dc:1b:
34:9c:bc:ad:7a:d2:61:06:ea:90:8d:36:bb:ba:e8:
b6:a6:d3:d0:64:6f:29:9f:a9:d7:a5:91:2f:ea:fd:
49:27:40:a8:50:09:1e:49:78:c3:14:43:44:d4:dc:
bf:95:9e:5e:c4:81:c6:9e:cf:b8:1e:02:93:1f:63:
71:f7:1a:ec:05:fb:15:cd:46:9a:5c:e3:6f:e9:20:
48:8d:c3:58:0b:10:14:1b:d4:55:ff:76:6a:59:66:
29:de:6a:4e:2e:2b:dc:38:3c:b2:c4:01:87:24:33:
fa:c5:6a:49:aa:f2:d5:08:c4:60:41:05:08:3f:e1:
81:8e:87:fe:64:e3:dc:64:cb:24:20:d8:1e:fe:c4:
53:1c:f8:72:a2:3a:0e:b5:be:25:6d:9b:82:2b:0f:
34:48:05:bc:eb:91:0a:3f:6d:1e:71:0e:3f:47:9d:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:14:C7:58:08:2B:51:9A:DA:FF:EC:37:00:8B:EB:8E:88:00:DA
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/HvEUx1gIK1Ga2v_sNwCL646IANo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ca:af:d2:81:a2:d4:8b:0a:58:eb:e7:f4:39:ed:1b:de:e7:
df:c9:aa:f0:2e:fc:7b:34:1e:7e:e8:c4:66:bd:c7:ca:20:59:
97:21:c7:da:c6:e0:17:70:b0:97:46:ea:79:c3:db:58:ee:55:
7d:ad:d4:dd:d6:36:b7:56:1e:78:1b:31:07:92:7b:ee:56:3b:
c6:27:56:3c:46:e8:fd:9c:9c:0c:67:f5:b7:68:19:ad:b6:ae:
a0:49:80:44:00:98:9b:b4:05:76:fd:dc:9e:73:9b:af:62:4c:
48:89:fb:40:0f:a9:5a:16:2d:be:c2:ae:3b:2d:f4:f8:07:79:
a2:01:55:3f:72:bd:c3:4a:c2:81:bd:8f:fb:2c:0d:a8:64:ee:
f1:6b:6a:c2:75:10:59:0b:e3:c7:05:68:1e:26:b4:1d:fc:9f:
06:61:88:51:df:ee:0a:ef:54:8a:75:6f:bb:9b:d1:63:70:01:
65:5c:3e:da:42:45:05:37:c0:cf:c7:5b:8b:93:64:05:58:86:
07:4c:c3:0f:6b:5e:91:49:bc:41:d7:b8:fa:58:e9:7c:29:28:
94:bd:45:e5:b0:dd:57:a9:2c:b9:fc:bf:4a:17:c1:80:42:9c:
ac:84:f2:4e:fa:c1:66:63:36:4c:6f:63:9a:99:3c:8e:94:51:
65:f3:e2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:02 2023 by rpki-client on console-ams.rpki-client.org