Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/hxPS1VHj5TsSry9LRhkhlAUHEHw.roa
File: hxPS1VHj5TsSry9LRhkhlAUHEHw.roa (raw, json)
Hash identifier: QylkQtCNEAlknm7tPPwZY3A7jeT6NNWLKITOl2Ci+Bs=
Subject key identifier: 87:13:D2:D5:51:E3:E5:3B:12:AF:2F:4B:46:19:21:94:05:07:10:7C
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 084C219A
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/hxPS1VHj5TsSry9LRhkhlAUHEHw.roa
Signing time: Sat 01 Jan 2022 13:06:41 +0000
ROA not before: Sat 01 Jan 2022 13:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15373
IP address blocks: 212.87.224.0/21 maxlen: 21
212.87.232.0/23 maxlen: 23
212.87.234.0/23 maxlen: 23
212.87.238.0/23 maxlen: 23
212.87.236.0/23 maxlen: 23
2a01:698::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139207066 (0x84c219a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 1 13:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8713d2d551e3e53b12af2f4b461921940507107c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:26:fd:e5:64:96:d9:fc:16:54:69:53:a0:
d2:dc:f8:8a:c1:c3:f7:2c:83:e7:63:77:82:7a:62:
9a:24:f7:36:c7:09:98:ec:90:19:ca:97:be:54:55:
66:d1:3b:19:f2:99:2d:70:fc:d1:5a:c1:66:04:3c:
28:5e:cc:4c:bc:77:1d:ae:fe:18:6b:79:bd:2a:51:
39:cd:86:ba:f5:2f:7f:ed:91:5b:93:f9:da:a3:76:
dc:38:c9:46:16:5e:1b:5b:c7:c6:9b:15:08:0c:a8:
be:eb:81:2d:bd:a0:6d:35:ea:2c:f7:04:0b:fb:7f:
14:81:9b:d2:3b:af:2e:b1:cc:f2:00:57:25:bb:2b:
e9:e8:eb:19:6a:69:ec:e3:83:b0:44:3d:07:65:3b:
bd:b9:74:cc:d1:2e:68:70:a6:81:7e:32:a0:0d:b1:
40:e6:73:fc:39:0c:ed:bf:5f:e1:07:78:e5:7f:a9:
d7:3a:0e:36:fe:cd:ff:cb:1c:9d:ee:75:57:54:42:
4e:81:42:2c:95:ad:7d:d1:84:22:c1:45:9d:2a:ae:
d8:42:90:22:9c:49:55:29:c1:88:57:b9:80:91:0b:
27:da:2d:6b:fe:f3:db:f8:23:29:22:fd:55:a2:d0:
5e:ff:22:3e:bc:db:31:a1:35:5b:5a:d5:0e:7c:66:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:D2:D5:51:E3:E5:3B:12:AF:2F:4B:46:19:21:94:05:07:10:7C
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/hxPS1VHj5TsSry9LRhkhlAUHEHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.224.0/20
IPv6:
2a01:698::/32
Signature Algorithm: sha256WithRSAEncryption
3d:71:1e:a2:e2:f9:e1:0e:0a:8e:4b:c1:dc:a5:80:77:43:41:
8d:69:9f:d6:c3:b2:ac:96:11:73:dc:62:ca:29:ec:6c:7c:ab:
6d:23:fa:09:42:7c:0b:43:d4:ca:7c:8e:4b:35:a9:30:2d:6c:
52:60:8b:ec:64:6f:dd:8e:5c:45:1e:aa:a0:d9:8b:17:e7:01:
99:9e:5e:31:95:9c:ba:6f:bd:d4:d9:c9:7e:6a:66:e8:a8:ae:
d3:29:8c:11:67:e7:3b:bb:fb:b7:46:33:ba:d9:6d:59:66:32:
bb:d6:37:c8:d9:b5:fb:fb:f5:04:a9:ff:fa:6e:eb:10:4b:76:
b0:e6:7f:e2:d7:bd:a6:36:11:09:ef:73:08:8a:8f:c1:44:21:
0a:09:45:fd:e9:e9:39:93:e6:c3:f4:95:a2:0a:6d:28:1f:93:
dd:77:72:ac:a9:4a:1a:47:bb:a4:32:6b:60:a1:8e:9d:91:4a:
a9:5a:1d:4d:d2:70:68:52:f9:3a:2e:08:0f:ad:d4:0e:57:86:
06:8c:66:71:4e:29:d3:7d:79:03:98:24:87:46:92:c2:dc:de:
89:91:7b:90:24:63:ae:7e:5c:a0:da:b4:33:d9:b7:3c:60:e2:
1d:97:04:6c:b9:2e:82:04:03:29:6c:c3:a5:43:35:21:aa:ea:
08:47:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:23 2023 by rpki-client on console-ams.rpki-client.org