Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/HS9n2DldNCAMOpH25Xm9JAKhxF4.roa
File: HS9n2DldNCAMOpH25Xm9JAKhxF4.roa (raw, json)
Hash identifier: u/831uBUIfx3T/QxlSqAL8If3sbNt9lmC7y0gnQD2Dw=
Subject key identifier: 1D:2F:67:D8:39:5D:34:20:0C:3A:91:F6:E5:79:BD:24:02:A1:C4:5E
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 44D48F40
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/HS9n2DldNCAMOpH25Xm9JAKhxF4.roa
Signing time: Thu 20 Jan 2022 09:51:16 +0000
ROA not before: Thu 20 Jan 2022 09:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47377
IP address blocks: 90.84.96.0/19 maxlen: 24
2a01:cd20::/32 maxlen: 48
2a01:caa0::/32 maxlen: 48
2a01:cc00::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154780992 (0x44d48f40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 20 09:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d2f67d8395d34200c3a91f6e579bd2402a1c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:b8:60:e6:5b:ec:bf:70:34:3f:02:5d:cd:
04:2f:cb:14:1f:a0:88:13:74:dd:9b:de:c8:ab:ae:
b4:ea:9a:a6:fc:70:19:14:80:bc:a4:ae:0a:74:6d:
97:5c:6c:56:2a:f7:6c:19:98:cd:ac:e6:43:3f:a4:
12:f5:ec:b6:84:6a:19:59:11:8d:b1:79:88:e5:a3:
c9:e7:0f:3a:98:ea:88:3a:3a:6f:c0:6a:2a:72:5f:
d5:ef:a9:d6:ac:3a:89:53:0e:33:5e:20:20:0b:8c:
15:75:b1:a7:7f:04:0c:83:80:80:e3:54:f7:1e:db:
67:98:eb:ed:04:28:60:4c:a8:0a:d8:6a:ee:a7:30:
fe:4c:e3:72:3f:40:61:bd:07:00:7a:c3:bd:d7:df:
77:57:55:06:c5:75:07:62:96:a0:7d:1e:8b:c2:cd:
87:ab:3b:aa:17:a6:5a:40:d6:44:83:b1:7c:b3:54:
e3:06:8b:a2:5d:33:32:85:9a:52:ac:ac:7c:dc:57:
e5:49:31:b6:1e:9d:76:c5:a1:3d:44:f2:6c:17:a4:
54:bf:07:38:2f:51:9e:94:ff:de:7c:4c:23:18:38:
e4:6a:b0:b8:7d:62:6f:1a:34:ca:20:73:f3:f3:f5:
c5:21:14:d7:80:1d:3d:6e:7e:e2:94:1a:5e:0f:f8:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:67:D8:39:5D:34:20:0C:3A:91:F6:E5:79:BD:24:02:A1:C4:5E
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/HS9n2DldNCAMOpH25Xm9JAKhxF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.84.96.0/19
IPv6:
2a01:caa0::/32
2a01:cc00::/32
2a01:cd20::/32
Signature Algorithm: sha256WithRSAEncryption
1c:58:fa:52:76:49:02:5e:25:f1:6e:f0:ae:cf:e2:51:0c:69:
4a:14:74:1e:64:74:7a:6a:92:ba:07:80:9e:08:3a:35:87:4a:
d9:ab:77:b5:36:a3:2e:9f:75:8f:c8:e5:99:dc:c7:0e:66:3b:
bd:1c:e2:6f:d7:b4:6f:07:ec:8b:b8:a1:0e:13:42:3b:fc:69:
79:9b:4f:7e:b5:8b:ff:90:43:f8:7b:fe:cc:0b:be:c3:64:92:
4f:f3:f0:a3:88:01:de:0e:c0:84:37:c3:90:46:f7:07:32:97:
2e:ad:85:62:45:23:2d:f2:99:eb:9b:d7:8b:eb:6d:75:89:7b:
7f:82:e8:70:8a:11:ea:4f:46:fc:2a:76:5c:d6:b5:25:75:a0:
73:ab:ff:9d:1b:31:87:be:b6:35:a2:44:68:ba:7c:9a:fd:5f:
42:ee:f8:17:3e:39:d1:0c:ef:f4:76:1b:bf:de:b0:11:32:26:
dd:99:26:c4:3f:f4:65:9b:c6:82:88:9c:9c:83:8f:94:20:b8:
ee:5a:3e:ac:7c:25:2b:a0:bb:2b:63:9a:be:6b:22:27:22:9d:
b4:5f:2b:f7:91:21:57:c1:f3:f7:21:3b:3a:0c:cf:83:b2:56:
d1:cf:b8:35:dc:1b:2f:ea:cc:2f:8d:6c:0d:2c:ba:fb:73:c2:
d8:93:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org