Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/8HSEPqdctG3pBjQVNbl5QhFIX5E.roa
File: 8HSEPqdctG3pBjQVNbl5QhFIX5E.roa (raw, json)
Hash identifier: E+TNBEY1B7JOAy7ym6kqPv+1r06LWVNb7g0vrsg/btU=
Subject key identifier: F0:74:84:3E:A7:5C:B4:6D:E9:06:34:15:35:B9:79:42:11:48:5F:91
Certificate issuer: /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial: 386978DA
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/8HSEPqdctG3pBjQVNbl5QhFIX5E.roa
Signing time: Sat 26 Mar 2022 12:27:08 +0000
ROA not before: Sat 26 Mar 2022 12:27:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50827
IP address blocks: 212.63.223.0/24 maxlen: 24
193.42.215.0/24 maxlen: 24
2a01:298:fd::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 946436314 (0x386978da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Validity
Not Before: Mar 26 12:27:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f074843ea75cb46de906341535b9794211485f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:91:05:55:0c:d8:20:a5:52:b7:8d:71:a6:
da:37:f9:d6:73:dd:a4:80:eb:d5:30:47:ce:19:06:
81:87:0c:20:ec:77:ab:df:dc:7e:0a:a6:c7:19:f7:
17:74:a6:0a:cb:54:d2:d4:24:c7:00:40:b8:11:5a:
be:14:a9:f8:48:4e:df:c2:0d:ff:69:3e:ad:e9:86:
84:3f:77:ed:71:76:9d:f2:f2:b5:82:31:0c:18:7f:
d3:ad:5e:a3:32:6c:86:95:be:ac:73:9d:c7:18:9d:
e4:5a:ff:92:c1:88:68:ee:0d:0a:50:af:01:db:8b:
2e:89:87:91:5a:a5:96:e4:62:0f:7b:39:77:c8:ea:
9b:2b:5d:b4:a7:fa:8e:0d:cf:67:6b:91:62:32:d5:
b9:e0:88:13:8b:58:f7:3b:59:c2:99:fb:bf:44:a6:
2e:3e:bf:41:33:27:30:8d:0a:78:8d:95:7a:1f:35:
7e:b4:e6:b1:4a:24:8d:a3:98:b6:6f:a8:21:e0:f3:
67:25:d0:89:e3:15:c2:77:06:e5:a8:21:96:94:1a:
b5:6d:19:c8:e4:c9:e1:2a:3d:fe:66:12:fe:0b:31:
63:78:ac:7a:fe:16:87:df:d5:78:de:c4:17:98:9a:
09:71:ff:06:26:df:33:d4:da:9d:f7:fd:20:92:71:
c8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:74:84:3E:A7:5C:B4:6D:E9:06:34:15:35:B9:79:42:11:48:5F:91
X509v3 Authority Key Identifier:
keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/8HSEPqdctG3pBjQVNbl5QhFIX5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.215.0/24
212.63.223.0/24
IPv6:
2a01:298:fd::/48
Signature Algorithm: sha256WithRSAEncryption
21:a8:83:2c:93:eb:83:e8:24:b9:be:1f:6d:ad:cc:20:6d:11:
6e:e0:e8:3e:f0:91:3f:12:e2:c2:06:1e:21:0e:c4:d9:0c:6c:
83:d8:c4:ed:f1:3f:2e:12:42:b9:5a:33:34:b8:ba:1d:99:98:
f8:2d:ab:9f:cd:80:db:3b:7d:0b:71:0e:64:03:3a:b5:fd:6f:
be:63:ea:05:fb:c0:75:ea:34:8f:eb:bf:ed:42:15:b8:f2:ff:
ef:e8:19:1f:59:89:c6:69:e1:71:16:0c:d9:6d:9b:ba:a5:69:
fd:df:fa:ff:dc:6f:3f:51:80:4d:17:aa:03:e8:b3:ea:a0:55:
32:27:be:5e:25:58:73:31:29:cf:c9:8a:cc:3c:fb:af:ed:35:
15:82:a3:83:bc:96:56:2d:21:21:2d:88:06:f0:8a:76:17:38:
0e:a0:74:c0:76:41:02:08:47:67:6e:f3:e4:7c:dd:fe:aa:12:
d5:9c:87:ed:6d:d3:ed:95:42:33:76:69:52:89:c5:70:2d:92:
7b:04:ce:67:10:1f:e2:11:ef:e4:33:53:4b:d6:74:ed:7e:7e:
b1:a9:51:90:42:b3:0d:d3:e0:bf:4d:00:4a:fe:3d:f2:e5:99:
70:87:50:73:11:dd:28:1d:32:2a:6c:cd:14:63:eb:af:22:67:
f7:4a:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:16 2024 by rpki-client on console-ams.rpki-client.org