Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/HjjDLPCGPPIFYjx4Kg60jDW5DiY.roa
File: HjjDLPCGPPIFYjx4Kg60jDW5DiY.roa (raw, json)
Hash identifier: q3ibzOq+IfAirwxLiviWUQ+ldUulUa0pAWvRDYUC074=
Subject key identifier: 1E:38:C3:2C:F0:86:3C:F2:05:62:3C:78:2A:0E:B4:8C:35:B9:0E:26
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 047F721A
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/HjjDLPCGPPIFYjx4Kg60jDW5DiY.roa
Signing time: Tue 15 Mar 2022 14:49:04 +0000
ROA not before: Tue 15 Mar 2022 14:49:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33876
IP address blocks: 185.76.4.0/22 maxlen: 24
176.111.104.0/22 maxlen: 22
185.12.116.0/22 maxlen: 24
185.11.164.0/22 maxlen: 24
91.198.47.0/24 maxlen: 24
94.126.168.0/21 maxlen: 24
176.61.144.0/21 maxlen: 21
194.8.30.0/24 maxlen: 24
2a03:8bc0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75461146 (0x47f721a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Mar 15 14:49:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e38c32cf0863cf205623c782a0eb48c35b90e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:36:de:55:c6:c5:25:86:48:3c:a4:34:34:
c8:2d:ac:93:27:61:18:27:02:d9:c8:8a:0b:1e:96:
dd:72:8b:58:fb:bf:85:a9:e7:a8:15:83:4f:5f:d5:
bc:5c:95:3c:48:81:f8:7e:ae:b3:6e:30:e7:ee:ad:
00:9a:aa:b7:75:06:1f:bc:d9:d7:7a:f5:55:78:62:
59:92:6d:21:3d:a7:47:39:e2:49:85:3e:a1:00:54:
83:93:92:e6:39:07:1b:cc:fa:75:1b:8d:2c:d7:a3:
37:9a:de:1f:89:88:02:a3:6d:3f:31:99:53:ab:ff:
07:8f:14:8a:34:53:cf:25:c3:50:86:e5:10:b0:8a:
07:8b:dc:d8:af:51:56:f2:6f:cd:75:b0:98:8f:dc:
10:76:cf:c0:e0:d3:29:9b:11:c4:10:21:e6:c6:e9:
47:9f:57:0e:42:45:12:4a:14:e9:e5:75:eb:ad:15:
9b:59:36:26:1e:14:06:8e:52:84:a0:09:c4:4c:b6:
3d:b3:2d:2e:d1:9d:3b:b6:48:bd:43:23:a4:dc:32:
59:6f:90:63:8e:f6:01:99:69:0d:27:51:3a:78:68:
fe:81:5a:66:8f:eb:51:ec:0a:28:00:c4:b2:65:79:
0f:03:67:d6:81:50:10:4b:e2:6d:66:8c:28:3c:b7:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:38:C3:2C:F0:86:3C:F2:05:62:3C:78:2A:0E:B4:8C:35:B9:0E:26
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/HjjDLPCGPPIFYjx4Kg60jDW5DiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.47.0/24
94.126.168.0/21
176.61.144.0/21
176.111.104.0/22
185.11.164.0/22
185.12.116.0/22
185.76.4.0/22
194.8.30.0/24
IPv6:
2a03:8bc0::/32
Signature Algorithm: sha256WithRSAEncryption
42:78:69:ad:a2:4f:9b:c2:31:05:88:08:cf:dd:96:34:7d:3c:
ff:b8:1f:8c:cf:47:e6:9f:99:9a:3e:a4:1f:fd:71:cc:ad:d5:
3d:b5:47:85:b7:11:e9:ce:3f:dd:ae:75:09:ee:26:d2:f6:f4:
13:73:1a:ad:90:db:4f:a2:de:89:9f:47:48:98:f7:e9:9e:01:
8a:68:dd:0e:d7:d3:1b:87:d6:79:66:66:48:b8:7b:7a:97:13:
91:6e:aa:db:ae:1f:2b:db:d6:af:57:54:1d:13:2b:97:17:a8:
e6:76:90:fb:07:d8:0c:03:1b:00:d3:4a:c4:5b:bf:9a:a3:59:
7d:34:3c:5f:e0:b9:d9:f5:fd:c7:ac:05:63:59:86:4c:dd:7b:
f5:e4:0d:a1:c5:82:ee:79:da:7e:93:aa:8e:27:1a:05:f1:ca:
c1:4d:bf:a1:a7:5e:ab:01:9f:56:a4:fc:58:c3:a3:73:c6:43:
50:9b:c1:da:b6:dd:4e:8f:f9:39:31:c2:d2:75:00:5c:6d:b7:
d4:4f:69:73:22:55:e2:d2:54:02:ae:f7:57:ac:3d:31:c5:47:
07:32:0a:aa:38:b2:d7:d1:94:08:55:ad:eb:88:d2:93:85:5e:
e1:dd:d9:6e:e8:48:75:3b:bd:fb:68:c4:ba:dd:df:3f:d4:f6:
a8:f0:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:46 2023 by rpki-client on console-ams.rpki-client.org