Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/Husm4W7-DbTc7vg7FY0LAH1Fnpg.roa
File: Husm4W7-DbTc7vg7FY0LAH1Fnpg.roa (raw, json)
Hash identifier: AWAYR2A241Y/q87K+UtZ1/g9Xx4axLaRWiN515m+4vs=
Subject key identifier: 1E:EB:26:E1:6E:FE:0D:B4:DC:EE:F8:3B:15:8D:0B:00:7D:45:9E:98
Certificate issuer: /CN=b1427bdcd47c78431f662a08589005acb50b9341
Certificate serial: 0184595D1A96923BAA4FC700FBE68B562BA4
Authority key identifier: B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/Husm4W7-DbTc7vg7FY0LAH1Fnpg.roa
Signing time: Tue 08 Nov 2022 22:29:44 +0000
ROA not before: Tue 08 Nov 2022 22:29:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8749
IP address blocks: 91.236.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:5d:1a:96:92:3b:aa:4f:c7:00:fb:e6:8b:56:2b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1427bdcd47c78431f662a08589005acb50b9341
Validity
Not Before: Nov 8 22:29:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eeb26e16efe0db4dceef83b158d0b007d459e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:2d:7f:1f:90:bd:83:f9:b4:40:c4:58:d7:
78:17:21:33:72:9a:a7:1d:51:1b:d9:ee:07:d7:30:
87:6c:f3:74:5c:86:4c:91:37:04:d6:3b:40:1a:8e:
ad:04:f2:42:3b:2f:4f:70:04:8a:2f:1c:00:86:94:
dc:e3:8a:66:15:63:b8:16:65:29:ed:7e:bf:b3:3d:
c3:3b:a6:91:3a:c9:31:4d:d0:e2:c4:02:2a:eb:a8:
63:fc:ef:2c:dc:5d:80:59:c2:99:5e:ff:a8:70:28:
66:c4:1b:7a:e7:64:80:34:e2:34:43:7e:6b:cc:27:
c4:eb:b9:92:7a:f0:f8:c3:44:42:25:de:6c:27:62:
b7:0b:08:9b:e2:96:5b:30:9c:bc:f7:0b:c5:3d:b4:
82:7a:37:aa:2f:6d:19:97:35:32:ad:eb:59:e5:b5:
89:c0:bb:29:74:ec:d1:23:4e:a4:72:57:d2:8e:9a:
2c:dd:07:40:2b:90:8f:45:f4:82:a5:22:b8:7c:a7:
b5:20:9d:54:8b:c2:82:f4:d0:d6:f1:cf:7e:ce:69:
4c:2d:ad:9c:e0:97:71:f5:25:53:07:63:ae:9f:dc:
d1:d2:3b:a5:f3:86:02:e8:5c:3e:18:83:e7:d3:69:
b2:1e:f0:96:e6:e3:7d:91:71:cf:5e:8b:46:ac:45:
c5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EB:26:E1:6E:FE:0D:B4:DC:EE:F8:3B:15:8D:0B:00:7D:45:9E:98
X509v3 Authority Key Identifier:
keyid:B1:42:7B:DC:D4:7C:78:43:1F:66:2A:08:58:90:05:AC:B5:0B:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUJ73NR8eEMfZioIWJAFrLULk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/Husm4W7-DbTc7vg7FY0LAH1Fnpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/20a767-7b41-463b-a6c9-5fc8e6327889/1/sUJ73NR8eEMfZioIWJAFrLULk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:6e:00:97:f3:26:84:93:26:0b:54:0f:a0:93:ca:cf:3a:8f:
39:a4:89:90:a3:4f:63:00:68:af:e1:a2:1d:65:2a:d4:07:ce:
75:9d:63:1b:d0:a2:76:8f:77:d7:2c:1e:18:bf:43:ec:89:39:
8a:9e:6d:04:ae:6d:91:64:77:4b:3e:42:f6:cf:fe:02:69:9e:
5d:1e:35:fb:09:27:21:ef:f9:82:85:46:66:0f:25:1a:83:b2:
57:af:34:54:8f:2a:e8:34:04:4d:78:77:83:22:cb:8c:99:45:
f0:3d:bb:9c:0e:e6:34:c1:39:a2:57:65:90:55:49:9c:52:05:
ba:db:e8:43:ff:22:06:20:a1:77:1c:7c:0a:94:93:42:05:92:
d4:c7:ea:8d:18:76:21:f1:a6:78:08:99:05:19:87:c7:a0:7b:
ef:9d:e0:c8:8a:44:71:3e:60:e9:6c:f1:79:63:00:41:4c:e9:
94:4d:7c:a5:b1:34:05:31:29:4d:74:62:06:55:43:22:5c:09:
0f:02:85:97:fa:ec:2f:4e:f3:08:a9:e0:37:fe:b4:d2:00:50:
14:73:9f:ee:cb:b1:cf:1e:08:82:f5:8f:a6:94:86:61:b8:28:
81:a4:51:fa:fb:0a:e6:c2:56:a7:f4:72:a8:20:40:d9:f9:07:
6f:13:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:59 2024 by rpki-client on console-fra.rpki-client.org