Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/EgO_HiQQ-zBqDAU8E4c4ULXrQok.roa
File: EgO_HiQQ-zBqDAU8E4c4ULXrQok.roa (raw, json)
Hash identifier: MrulDngHupcOptMs1NFU/YV8c9KaNPWMmMmE5duWGo4=
Subject key identifier: 12:03:BF:1E:24:10:FB:30:6A:0C:05:3C:13:87:38:50:B5:EB:42:89
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 0182F02888EC6803E0DD0AD2610D38250D6E
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/EgO_HiQQ-zBqDAU8E4c4ULXrQok.roa
Signing time: Tue 30 Aug 2022 19:09:24 +0000
ROA not before: Tue 30 Aug 2022 19:09:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55569
IP address blocks: 91.199.242.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f0:28:88:ec:68:03:e0:dd:0a:d2:61:0d:38:25:0d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Aug 30 19:09:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1203bf1e2410fb306a0c053c13873850b5eb4289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:29:34:24:93:61:b7:79:a7:15:b3:4a:b9:
d5:ba:d1:f1:fb:e0:83:8d:d2:a4:d2:f5:94:e4:32:
89:ab:9c:d3:f1:a0:73:87:16:3f:35:5f:c7:f9:20:
ec:7b:ee:52:b2:6a:c7:cd:3d:44:f1:a9:8f:c1:2f:
82:3c:bd:ca:38:44:bf:e4:d7:34:e5:1e:76:76:71:
34:34:a5:20:5e:23:b2:bf:b2:12:1d:c9:0a:19:7f:
00:14:28:9a:35:34:21:66:7b:71:9d:5c:d6:e9:ac:
31:4f:f7:3a:b7:af:23:0a:4d:e1:f1:6f:62:d0:a3:
6c:45:4d:78:59:49:4b:77:c9:b9:fc:57:59:37:81:
0d:e2:a6:44:6d:3e:e7:cc:73:e8:db:3d:35:23:73:
70:8b:e7:44:68:09:18:3b:9e:0b:94:57:9a:d3:d1:
e7:c5:27:bc:d5:ef:7e:9c:b4:22:d2:85:5d:ab:f5:
04:e3:f5:e2:4d:96:8f:68:f1:48:ab:9f:af:fb:1c:
90:61:bf:f8:ff:94:30:0b:a9:9b:8f:54:3e:74:f0:
cc:b9:dd:26:cf:27:5f:a7:b5:74:d1:75:fd:ab:e7:
75:8a:c6:e9:0d:c4:fe:d8:18:ed:3a:cb:9b:d8:07:
ae:25:e5:72:d1:88:6a:a4:28:49:d0:c1:20:9f:66:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:03:BF:1E:24:10:FB:30:6A:0C:05:3C:13:87:38:50:B5:EB:42:89
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/EgO_HiQQ-zBqDAU8E4c4ULXrQok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0e:76:4e:c0:49:e4:39:f6:d0:c7:63:3b:e2:3c:24:44:4c:
54:f6:26:8f:96:3c:8d:72:9a:9d:43:15:f9:54:08:74:96:5d:
7a:31:36:1e:1b:07:2b:93:50:c5:69:a7:67:df:a3:dc:91:31:
09:11:6e:3a:8b:90:b4:90:3d:f4:a5:e6:93:fc:17:cc:55:b6:
c7:c6:2d:dc:13:a9:34:f9:3b:cf:92:d3:2f:3e:60:75:54:ed:
5a:9a:9b:9b:43:ef:68:88:15:25:af:2e:21:6d:72:af:cd:df:
b0:c3:f1:6f:58:22:68:cf:3c:1b:ce:51:03:1e:5f:4d:65:26:
13:02:be:fa:3a:d3:43:30:eb:e3:43:b8:bb:82:4d:dd:df:f1:
f9:8e:ca:9a:85:8f:46:7c:33:38:f4:50:00:a0:0e:79:ce:b9:
d0:d1:ae:d0:38:bf:d5:dd:44:dd:51:c7:b4:53:30:c7:97:48:
cb:1a:ae:49:97:dc:69:df:08:b0:40:96:c8:cf:9a:27:f5:c5:
2c:d0:04:1b:6f:37:08:0f:38:95:93:bb:e7:c4:30:f8:52:51:
4f:04:11:82:3c:92:aa:21:02:b6:c1:1b:62:51:cd:b8:67:3c:
24:56:36:36:c0:e3:ef:ec:01:66:ce:db:17:82:f6:ac:04:df:
cf:b7:ad:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:49 2024 by rpki-client on console-ams.rpki-client.org