Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/HwataM0i5kwe6Mz4_1RjTTqfCPs.roa
File: HwataM0i5kwe6Mz4_1RjTTqfCPs.roa (raw, json)
Hash identifier: bQG4BKpN+EA2SDqzV89XzezbcKW0skSPcLmwyjZJogc=
Subject key identifier: 1F:06:AD:68:CD:22:E6:4C:1E:E8:CC:F8:FF:54:63:4D:3A:9F:08:FB
Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Certificate serial: 06C8E921
Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/HwataM0i5kwe6Mz4_1RjTTqfCPs.roa
Signing time: Sat 01 Jan 2022 10:55:05 +0000
ROA not before: Sat 01 Jan 2022 10:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 91.204.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113830177 (0x6c8e921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201
Validity
Not Before: Jan 1 10:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f06ad68cd22e64c1ee8ccf8ff54634d3a9f08fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:40:9d:35:f7:d5:3f:6a:21:eb:93:1d:06:ad:
b2:b0:4d:25:7f:16:fc:7d:0e:8a:0a:c4:3b:bb:34:
b5:63:89:6f:11:b8:16:0d:09:d7:77:66:ec:87:c8:
83:64:97:8d:10:8c:19:d6:15:f3:d0:12:f9:ae:e3:
d2:4c:eb:97:7a:d3:d6:a5:d6:b7:7d:27:9e:be:07:
97:3c:d6:87:8e:14:1e:47:a8:a2:1e:58:ad:f9:a3:
c2:16:78:8d:d4:93:3b:bf:03:7f:b7:40:cd:b5:4b:
7c:c0:d9:b8:8d:e4:52:ea:52:2d:e8:c8:71:ea:63:
d1:68:ef:f3:b7:83:7c:74:38:b7:dc:53:96:3c:37:
f5:de:d6:26:42:05:74:ee:0f:d2:d2:66:29:64:a3:
de:d3:a2:47:42:50:f2:08:6b:b6:b1:4f:8c:ff:24:
10:24:95:63:e8:f9:df:eb:3c:b3:ef:63:fc:91:ac:
fb:27:ac:af:eb:fa:3f:9c:1d:c5:36:35:8c:8a:2e:
e0:d9:87:7f:2b:fe:02:ee:8b:22:db:9b:36:b1:77:
ab:4e:3f:df:dd:e4:01:a4:85:d4:86:59:fb:d7:e2:
de:53:7b:ad:fd:04:f0:e6:45:5b:83:d4:66:31:b9:
1e:c3:78:5a:00:28:77:8d:48:e0:ba:f6:a9:a3:3f:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:06:AD:68:CD:22:E6:4C:1E:E8:CC:F8:FF:54:63:4D:3A:9F:08:FB
X509v3 Authority Key Identifier:
keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/HwataM0i5kwe6Mz4_1RjTTqfCPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.83.0/24
Signature Algorithm: sha256WithRSAEncryption
81:aa:69:b7:72:50:1b:7c:b3:dd:3c:ca:c3:f7:b8:bc:67:bd:
4a:5a:cb:64:af:92:b0:c5:4d:ed:43:d6:aa:17:a1:11:01:aa:
cf:d4:78:3f:7a:b7:e4:dc:95:b0:99:d2:9c:4c:fc:85:10:72:
0a:40:ee:17:e4:75:80:8f:ce:5c:43:a6:a7:8a:19:16:00:d5:
fc:88:72:0c:a2:ab:1b:ae:7e:84:e4:63:fe:b3:ee:26:14:42:
58:a6:8f:b4:89:86:8a:9b:04:6c:4e:22:3c:95:d6:93:1c:e7:
f4:2c:9d:e9:4a:ba:07:f0:f6:4f:14:95:1d:52:64:1f:7f:be:
00:5e:94:51:45:29:5f:0f:e0:b1:2c:31:f3:37:8b:41:00:03:
22:6b:da:35:2a:93:d0:57:e5:cd:31:98:ca:9e:82:10:ff:fb:
4d:f0:9d:7b:3f:01:09:cb:bc:cb:12:ab:ec:5e:99:8d:64:27:
26:2e:03:b2:16:49:f5:68:5b:7a:4c:7b:5a:a8:fc:72:fa:38:
d8:f3:7d:ef:4b:2d:e6:3a:cc:cd:dc:73:05:ec:eb:be:95:95:
6b:1d:71:5a:42:fe:0f:9f:1f:1a:a4:23:8d:3e:0a:8f:65:f6:
77:cf:26:e6:94:96:91:16:87:ea:7e:2d:7b:b5:14:f1:20:b0:
d7:fd:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:47 2023 by rpki-client on console-fra.rpki-client.org