Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/hhKinDZdKAsrZt9BMHJsGj7NeE4.roa
File: hhKinDZdKAsrZt9BMHJsGj7NeE4.roa (raw, json)
Hash identifier: kcuEAa24pDW96XTd2on5PEH0UA2buwZKLalY7usj6oM=
Subject key identifier: 86:12:A2:9C:36:5D:28:0B:2B:66:DF:41:30:72:6C:1A:3E:CD:78:4E
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 0639F5FF
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/hhKinDZdKAsrZt9BMHJsGj7NeE4.roa
Signing time: Sat 01 Jan 2022 06:03:03 +0000
ROA not before: Sat 01 Jan 2022 06:03:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56457
IP address blocks: 176.119.210.0/24 maxlen: 24
2a06:5780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104461823 (0x639f5ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Jan 1 06:03:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8612a29c365d280b2b66df4130726c1a3ecd784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:18:d1:ac:8e:9a:5c:06:2a:c8:1e:23:c6:
41:8f:db:72:38:32:bf:f8:ac:61:3a:8a:83:7f:e6:
cf:56:e7:73:0d:00:48:e4:8c:7c:8c:b8:d8:0e:57:
65:b1:1a:09:86:25:b5:f5:e8:19:d4:34:88:4f:5c:
fa:65:b8:32:77:fb:50:13:33:2d:64:94:56:67:bd:
7b:0b:f6:fb:4b:d0:44:ad:3c:8b:40:12:3d:27:19:
03:aa:1f:ae:c7:d6:c0:68:eb:f6:0e:83:cb:1a:43:
a7:bb:fc:50:1f:87:fe:c1:20:ac:c3:a7:a1:4a:56:
5f:eb:65:e8:e6:0b:9c:1a:94:16:f2:8a:0d:f8:05:
e1:d1:85:e1:32:82:1a:57:4a:08:b4:ad:e8:10:d9:
ab:c3:bd:a5:da:cc:13:a5:2b:1e:04:4a:57:54:5d:
06:04:6d:b5:5e:25:2d:72:76:8d:4c:3c:fe:39:f5:
0e:66:5e:4c:49:44:f5:49:16:a9:55:d0:27:78:1a:
fc:1a:17:3e:c4:26:59:64:b0:24:3d:4b:61:83:a6:
ac:b0:bf:c5:32:28:da:ad:0e:9c:f7:19:57:92:36:
f0:4b:48:8a:3c:ea:84:11:89:4c:9a:14:e1:7d:3a:
f0:14:7c:54:dc:23:c9:24:e6:45:f8:8a:13:5f:1f:
94:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:12:A2:9C:36:5D:28:0B:2B:66:DF:41:30:72:6C:1A:3E:CD:78:4E
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/hhKinDZdKAsrZt9BMHJsGj7NeE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.210.0/24
IPv6:
2a06:5780::/29
Signature Algorithm: sha256WithRSAEncryption
67:a9:2d:a4:5d:c3:5e:5c:03:45:17:0e:20:c3:5a:10:f0:8b:
32:c0:9e:4b:6e:b2:64:ff:a5:26:88:35:77:2b:57:e7:73:71:
aa:13:d5:5e:0e:0f:9f:69:74:92:cd:7e:35:6c:5c:46:57:96:
8f:d6:08:3f:a3:eb:ff:49:60:f3:e5:3b:b7:42:c9:fd:1d:38:
d7:61:2e:75:ab:9f:e5:dc:ce:4a:14:9c:a4:01:5b:f2:f2:f4:
5a:95:71:7e:ca:35:7d:7c:37:5e:36:a6:bd:18:eb:9f:30:f2:
b2:0c:92:d5:b2:7c:14:11:6b:13:29:a0:c5:f9:a1:ff:ca:84:
5c:a7:fa:cb:02:31:00:4b:0d:c7:1a:84:5e:03:4e:f8:0d:d1:
4a:8b:2c:41:4d:b3:ea:bb:92:92:bb:c5:b5:c9:b8:51:0f:8a:
c9:2e:17:65:2e:23:11:40:35:18:0e:85:c6:a8:3d:25:39:98:
bf:be:23:ba:e8:ae:ef:cc:6c:f6:86:a5:46:79:b2:e3:5c:02:
0e:cf:54:4a:6f:00:2a:fc:39:12:0f:e3:b1:ac:a8:b9:fc:43:
be:7d:d5:41:86:f6:f8:67:cc:30:bc:55:f0:72:69:b5:47:01:
da:e5:94:c7:03:d7:43:da:59:6c:31:9d:a4:84:4f:1a:59:70:
a3:0c:2b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:06 2024 by rpki-client on console-ams.rpki-client.org