Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/HUVXxfirFGRT0g1rGZBg-r2bZ_I.roa
File: HUVXxfirFGRT0g1rGZBg-r2bZ_I.roa (raw, json)
Hash identifier: a0u1GV0nT+0dcJWbrIa836IT+iZmN/eBrCKSd1AhS4s=
Subject key identifier: 1D:45:57:C5:F8:AB:14:64:53:D2:0D:6B:19:90:60:FA:BD:9B:67:F2
Certificate issuer: /CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Certificate serial: 089BB6E5
Authority key identifier: FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/HUVXxfirFGRT0g1rGZBg-r2bZ_I.roa
Signing time: Sat 01 Jan 2022 01:56:40 +0000
ROA not before: Sat 01 Jan 2022 01:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204756
IP address blocks: 185.240.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144422629 (0x89bb6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff37d6c1f6a5c4a92bbffd85c4142127fa3e1a30
Validity
Not Before: Jan 1 01:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d4557c5f8ab146453d20d6b199060fabd9b67f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:55:55:be:9d:d2:5d:87:bd:04:b8:34:ae:
f9:2b:e5:83:33:2f:a4:70:d2:3b:1f:e9:f5:9b:b1:
90:45:ac:48:48:d3:71:fa:f6:58:cc:f6:4d:34:ac:
f0:5f:d7:8a:ba:fc:cd:11:e7:3b:5c:1f:c1:83:6e:
86:51:61:ba:f0:e0:ba:f5:79:1e:12:58:2f:fc:25:
22:aa:0f:b1:b6:40:e4:a8:9c:df:44:08:49:d6:16:
07:18:ad:df:e4:94:ef:c7:28:6b:1b:85:b7:1d:ae:
6d:ec:db:c0:b0:f0:fb:ce:88:25:7a:35:24:22:4c:
50:41:e5:07:5f:a3:0f:3d:ef:82:39:be:df:13:e1:
32:77:21:c4:41:c5:76:c1:e2:47:74:29:59:d4:00:
43:78:fa:a2:bd:6e:02:8a:30:6b:2c:46:fb:83:d7:
18:3d:a9:9b:6c:3d:21:db:2e:62:d9:62:7e:d0:a3:
3d:df:03:d9:7f:54:39:81:69:0c:db:05:20:56:c8:
5a:98:90:61:1f:52:f0:22:bf:e4:03:4b:11:1b:85:
df:01:b1:fc:bf:a5:c4:60:25:9d:0a:ea:1c:5b:fb:
bd:5d:76:5d:ad:0f:cb:01:b5:b7:12:07:df:03:44:
72:07:3c:50:d9:2e:3e:27:4c:a1:db:2a:b1:a7:bd:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:57:C5:F8:AB:14:64:53:D2:0D:6B:19:90:60:FA:BD:9B:67:F2
X509v3 Authority Key Identifier:
keyid:FF:37:D6:C1:F6:A5:C4:A9:2B:BF:FD:85:C4:14:21:27:FA:3E:1A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zfWwfalxKkrv_2FxBQhJ_o-GjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/HUVXxfirFGRT0g1rGZBg-r2bZ_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87d43c-e0ed-48b3-b4e3-05ed86735306/1/_zfWwfalxKkrv_2FxBQhJ_o-GjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.36.0/22
Signature Algorithm: sha256WithRSAEncryption
48:e3:a7:bd:dd:93:7a:10:05:6f:1b:5a:b6:a3:ef:63:85:10:
e3:d5:12:d1:72:50:de:7f:87:e8:2c:05:be:b5:f4:ef:dc:48:
86:a7:69:27:40:08:f0:e0:5d:3b:a5:75:51:73:b5:07:95:26:
fe:31:e4:cf:ea:51:40:76:39:f0:a7:f2:12:32:99:40:11:2d:
16:25:bd:c1:9f:35:3b:63:b2:19:88:2d:aa:9d:e0:8a:04:34:
3c:53:9a:84:b0:f0:f8:14:21:11:ea:02:69:ed:bb:4d:0a:85:
75:03:09:9f:f0:f6:de:f6:25:19:dc:f4:ac:94:8a:ed:b6:df:
52:42:59:87:6b:6c:15:05:12:61:ba:ef:c7:a4:ce:7a:8a:c0:
27:f6:f1:9a:d6:f1:bc:26:7b:e7:c9:41:c1:da:36:4a:74:e7:
fc:2c:ec:f6:07:5f:f7:9a:9a:4f:3c:e2:38:92:e4:4e:31:e8:
31:ee:bc:22:86:05:6b:d1:4b:0d:ba:db:a6:8b:61:47:46:b3:
c4:80:38:69:c6:53:e3:f6:ba:7f:bf:16:f2:d3:35:1f:d4:ae:
d5:53:dc:e7:c3:fe:fe:1d:6e:6b:2d:55:0c:97:5b:f3:b1:60:
59:ab:f9:9b:7f:3e:cc:36:89:55:98:6b:41:0f:b9:2f:86:1c:
cd:11:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:31 2024 by rpki-client on console-ams.rpki-client.org