Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/HKyn6g9SZO69YzZ9xVQ2NleJ7NU.roa
File: HKyn6g9SZO69YzZ9xVQ2NleJ7NU.roa (raw, json)
Hash identifier: GoOqPqErXpYDjlbhv1iblTktur90RQEjUSsnA+Ev3+8=
Subject key identifier: 1C:AC:A7:EA:0F:52:64:EE:BD:63:36:7D:C5:54:36:36:57:89:EC:D5
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 1B018DE7
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/HKyn6g9SZO69YzZ9xVQ2NleJ7NU.roa
Signing time: Sat 01 Jan 2022 06:59:17 +0000
ROA not before: Sat 01 Jan 2022 06:59:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208671
IP address blocks: 5.32.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 453086695 (0x1b018de7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 06:59:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1caca7ea0f5264eebd63367dc55436365789ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:6a:95:82:6c:95:4b:f2:3d:f9:b0:4a:f6:
b4:6b:2d:a9:74:b1:3f:90:df:8c:ff:7f:b4:e5:c4:
4b:22:79:f6:98:71:e9:2c:e8:9f:f9:9b:eb:f0:8f:
2a:fa:e9:7c:23:89:2b:de:0c:b4:ac:f2:b1:9d:ff:
a4:55:20:4d:bd:0c:d2:ed:b9:c9:b4:9e:4e:dd:71:
17:d4:b8:82:e9:7a:52:52:e1:d5:3b:64:b0:47:7e:
8c:5f:bd:2e:79:90:3d:b0:a7:9e:a1:73:2a:ee:8b:
83:e9:65:f6:82:0f:eb:ee:a8:3e:b2:05:7b:17:6d:
a5:b0:73:68:2c:dc:2c:b9:90:e7:7d:14:c7:36:1a:
bd:e7:14:31:71:16:64:bf:3d:6b:84:b8:31:0f:b0:
eb:32:a0:01:7d:a4:13:11:15:f8:aa:12:91:e1:76:
d7:e2:17:ad:bf:08:29:60:01:31:8d:4d:c6:54:72:
c9:d0:31:2c:63:a8:7d:d7:e4:30:01:f5:54:be:f3:
96:29:83:68:40:41:8d:07:2e:bb:8d:bc:b7:21:1b:
f7:9a:31:b2:52:76:27:72:da:99:74:44:8b:64:9a:
e8:ba:54:9d:45:98:17:d3:5c:99:a8:16:28:ef:be:
45:0e:de:3c:ab:b5:59:ca:c4:89:03:95:90:30:1f:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AC:A7:EA:0F:52:64:EE:BD:63:36:7D:C5:54:36:36:57:89:EC:D5
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/HKyn6g9SZO69YzZ9xVQ2NleJ7NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f0:5d:1a:19:06:ad:7a:b6:cd:09:9f:62:8e:53:51:d6:17:
39:78:cd:31:24:2c:b2:27:eb:4f:09:cd:e4:ed:e1:ff:a7:91:
21:b0:ed:2e:59:c1:4a:83:8c:fb:00:11:da:36:79:eb:56:f9:
5a:93:26:a8:f4:c3:58:2b:85:39:d4:88:03:d8:f7:4e:e8:e7:
99:d1:60:5a:47:55:e9:c3:1d:5c:ee:a1:f0:0b:8e:57:cb:bf:
e2:ae:9c:d7:bc:76:e9:cc:42:54:3f:a1:fc:40:8e:90:f1:75:
21:b9:1c:3f:bf:3b:25:21:81:ec:6b:32:be:ba:21:15:b2:cf:
9a:4c:23:58:fa:00:d3:83:b0:25:58:d4:c5:2e:be:93:f8:29:
e3:cb:f8:eb:38:99:07:39:f8:5e:24:61:f2:4f:b3:b6:77:98:
38:10:13:47:d7:46:c6:72:2c:ee:f3:70:bf:23:0e:d3:34:07:
36:f6:41:cf:5d:dc:74:ac:61:0e:b9:58:d8:30:2c:28:b6:0a:
31:29:a7:ec:d1:46:57:b1:a7:12:f4:ba:62:71:e3:db:87:78:
20:9e:6f:3a:5a:68:a7:07:b5:b7:c7:4e:a5:be:37:c4:4d:7f:
2d:c2:8c:43:99:12:43:97:fb:99:d6:f4:ab:f9:60:e0:1d:69:
ba:b1:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:41 2024 by rpki-client on console-fra.rpki-client.org