Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/HZgn3FnXaIBBd23H35LCyJ9xMQE.roa
File: HZgn3FnXaIBBd23H35LCyJ9xMQE.roa (raw, json)
Hash identifier: tv0KzTpl5/5PZeq0TI3AB3niZH1CaIcHvu7HYgQg+5c=
Subject key identifier: 1D:98:27:DC:59:D7:68:80:41:77:6D:C7:DF:92:C2:C8:9F:71:31:01
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 3FBF8039
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/HZgn3FnXaIBBd23H35LCyJ9xMQE.roa
Signing time: Sat 01 Jan 2022 08:55:07 +0000
ROA not before: Sat 01 Jan 2022 08:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8323
IP address blocks: 193.193.64.0/19 maxlen: 19
195.150.0.0/17 maxlen: 17
195.150.128.0/18 maxlen: 18
2001:6d8::/29 maxlen: 29
2001:6df::/32 maxlen: 32
2001:6d8::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069514809 (0x3fbf8039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 08:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d9827dc59d7688041776dc7df92c2c89f713101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:a3:37:cd:b5:78:53:65:3b:a6:da:6f:21:
7a:cd:df:86:9c:0a:01:99:65:73:47:53:f9:2f:9e:
d4:dd:ca:3d:17:37:b4:32:15:a0:81:10:fd:d0:8e:
75:58:ef:8a:7b:5a:5b:ba:57:be:1f:81:f0:3e:53:
bd:62:5e:bf:64:7b:7f:03:6f:74:33:aa:ce:d7:3e:
7f:3a:f9:2b:9a:15:c9:0a:db:e9:94:6b:90:ec:f6:
7c:dd:c1:15:68:d0:7a:3e:67:5b:ee:b6:5b:1e:85:
3f:14:b3:dd:52:36:0e:4a:f4:11:06:f5:c6:ad:fd:
0d:b2:a6:62:cc:10:f0:5f:a7:dd:be:5b:bd:54:81:
8f:ec:f1:b1:5a:34:4a:1f:c8:0e:41:aa:56:fb:a6:
9b:8b:42:65:fd:39:ea:a2:8c:b8:c9:e5:42:e3:7b:
dd:41:23:6c:d9:3f:6e:a3:df:8e:ec:0c:c3:b6:a4:
2b:f6:7f:fd:54:3e:f4:42:d0:8b:8d:cb:ee:14:1f:
20:e9:63:73:05:97:35:ec:3d:2f:94:89:50:9e:36:
0c:37:a9:a5:56:57:75:b8:e2:73:b4:eb:b3:98:f9:
91:a3:b6:8a:2d:d5:b1:09:54:29:9a:12:76:57:7f:
8f:1e:54:b4:95:c6:5b:cb:e0:d6:3e:96:30:71:9f:
c4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:98:27:DC:59:D7:68:80:41:77:6D:C7:DF:92:C2:C8:9F:71:31:01
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/HZgn3FnXaIBBd23H35LCyJ9xMQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.64.0/19
195.150.0.0-195.150.191.255
IPv6:
2001:6d8::/29
Signature Algorithm: sha256WithRSAEncryption
52:82:7e:d4:20:f4:2e:3e:ab:65:79:8e:91:c0:72:8a:c7:1b:
55:e0:ed:81:e1:01:b1:2a:21:fb:19:42:db:cf:95:f1:22:76:
d2:ee:e6:c9:23:0a:86:ae:b8:d3:8f:8a:2f:07:f7:54:3b:85:
c4:25:c6:01:81:78:f3:56:55:87:c1:2c:d2:7b:7a:6b:95:7e:
be:da:1f:92:aa:a0:1c:e8:b4:93:2d:ff:a1:06:34:03:24:39:
a2:0e:aa:4b:90:b3:ae:26:89:c5:ef:cf:4d:75:d9:16:e2:92:
a5:16:01:df:e1:54:51:8f:25:de:1a:c2:06:fc:04:f1:74:09:
cb:34:f7:7c:e8:35:0c:1a:d9:de:3b:ff:40:b3:f8:19:73:11:
84:fc:6e:56:54:5e:a5:72:c1:55:fc:e3:8a:59:b2:25:cc:11:
79:63:26:00:83:cf:34:81:87:1a:0c:af:0a:8e:6b:00:3a:58:
8e:a9:3b:b9:8b:9c:a0:b1:63:cc:1d:07:ae:df:47:20:47:43:
dc:06:88:bb:24:fc:8a:da:37:1d:da:2c:86:e3:a6:47:ff:58:
6c:c0:85:2a:25:1a:22:70:f7:46:8d:d2:81:d8:8e:13:bc:e9:
92:46:f8:82:78:cf:12:3d:64:4c:79:19:0f:ba:de:3e:94:f7:
92:5b:57:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-ams.rpki-client.org