Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/HUgrijaV13vCSNnCmTl-7nr7C5w.roa
File: HUgrijaV13vCSNnCmTl-7nr7C5w.roa (raw, json)
Hash identifier: F0+m7mbWhIExtqC6hUCRqpyfqZ8+ZhJZsxvdwDYPLtI=
Subject key identifier: 1D:48:2B:8A:36:95:D7:7B:C2:48:D9:C2:99:39:7E:EE:7A:FB:0B:9C
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0181D1B01C715D72E5C0CB1D9340F73351C2
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/HUgrijaV13vCSNnCmTl-7nr7C5w.roa
Signing time: Wed 06 Jul 2022 04:06:28 +0000
ROA not before: Wed 06 Jul 2022 04:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.108.56.0/23 maxlen: 23
193.108.58.0/23 maxlen: 23
193.107.21.0/24 maxlen: 24
193.108.104.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d1:b0:1c:71:5d:72:e5:c0:cb:1d:93:40:f7:33:51:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jul 6 04:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d482b8a3695d77bc248d9c299397eee7afb0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:0d:d5:a0:87:ae:d0:ae:39:80:5b:20:21:
1b:e0:46:ed:fe:77:18:bb:70:d1:d9:23:12:8f:65:
48:e5:b0:ec:ce:d5:0b:b5:1a:d0:4a:70:9c:93:a9:
1d:f1:58:d6:ac:c1:82:da:9c:29:f2:c6:b9:bb:89:
34:ae:11:0b:28:48:38:ec:6c:59:4e:5b:1e:c3:71:
2b:3c:3d:1a:d7:e0:ee:a5:02:af:b7:2d:f1:f8:ab:
aa:f4:48:45:78:b5:49:7b:ff:3d:56:e1:de:b9:4e:
e8:38:f1:54:47:36:c4:b0:09:a0:68:46:a6:e3:5a:
6a:d4:48:37:bf:4f:65:a3:02:aa:b9:76:aa:b7:d2:
c3:d2:98:68:35:f2:9a:05:ed:5b:87:f9:3b:b5:66:
92:02:77:eb:e4:a4:e6:8e:a4:38:c6:30:6d:58:9b:
03:17:90:ce:2d:b3:e1:a9:6e:c8:9f:ac:20:e6:ef:
7f:95:64:ef:4f:cb:ed:50:5d:39:0d:5b:78:e0:93:
80:27:e3:55:1e:05:95:43:1e:b9:e1:f3:50:a5:92:
01:1b:6c:b8:61:2f:b5:1b:82:0d:2f:79:b7:7b:16:
01:4e:fd:ed:f1:12:5b:de:a9:ad:a5:57:c9:3d:f0:
6e:a1:70:da:47:68:d9:a6:48:76:e6:ed:7a:eb:68:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:48:2B:8A:36:95:D7:7B:C2:48:D9:C2:99:39:7E:EE:7A:FB:0B:9C
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/HUgrijaV13vCSNnCmTl-7nr7C5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.21.0/24
193.108.56.0/22
193.108.104.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:8b:27:1b:86:ec:60:2b:7c:be:79:54:a6:75:54:ec:7e:3c:
a1:7f:5e:35:08:53:bf:93:5f:e6:55:7c:1b:02:c6:a4:c1:cc:
bd:3b:bf:93:95:3f:14:84:0d:28:b1:85:f7:9d:ba:45:62:11:
58:8f:4a:e0:d1:c5:ac:4a:de:a8:8a:f4:1a:15:3e:ea:d0:8a:
35:cc:1d:64:8f:80:a2:2a:62:19:ab:be:64:5f:a6:9f:f3:83:
78:23:22:7e:33:a2:31:e8:7e:e3:5b:5f:8b:fc:cb:5c:5d:47:
33:0d:ec:8b:c4:70:c7:23:cf:62:1f:36:f6:09:5f:f3:3f:b5:
f2:3a:9d:0d:5b:60:a8:15:d4:4b:3c:2e:6e:6b:0c:b4:62:68:
9d:96:f9:63:1d:df:9e:d6:c6:59:e4:26:bd:a2:bb:d4:01:01:
4a:68:ca:9b:17:f5:6e:5b:52:0b:b6:61:de:70:d1:6c:61:49:
d9:f7:4d:02:ac:a4:b4:45:23:de:ac:ab:f5:21:d7:9d:53:c8:
4a:8d:0b:65:65:63:eb:3e:4d:d5:07:06:bd:d4:7a:7d:fc:25:
38:4b:21:8a:a9:dc:f9:c0:b3:ea:ec:ae:05:d1:b4:df:bf:9a:
d6:60:48:4c:05:79:80:64:be:08:4d:91:fb:c6:29:e4:ae:ed:
3e:93:1d:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org