Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/H7eqDAUHhIq4bLGt_Al8IqG11Es.roa
File: H7eqDAUHhIq4bLGt_Al8IqG11Es.roa (raw, json)
Hash identifier: JVrz4jh15x+oeEYOPpcDJSsPSUcLJT9+Ri18AG/qMEI=
Subject key identifier: 1F:B7:AA:0C:05:07:84:8A:B8:6C:B1:AD:FC:09:7C:22:A1:B5:D4:4B
Certificate issuer: /CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Certificate serial: 0A1E2444
Authority key identifier: 8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/H7eqDAUHhIq4bLGt_Al8IqG11Es.roa
Signing time: Sat 01 Jan 2022 10:01:44 +0000
ROA not before: Sat 01 Jan 2022 10:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209792
IP address blocks: 194.93.20.0/22 maxlen: 24
2a09:2280::/48 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169747524 (0xa1e2444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c36ad879c645aee98ac4a89fc800b9a974e941f
Validity
Not Before: Jan 1 10:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fb7aa0c0507848ab86cb1adfc097c22a1b5d44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:0f:49:a3:56:cf:a0:91:92:9f:da:eb:2c:
af:05:e9:bd:e6:10:f1:44:d5:82:d2:c9:31:b2:49:
71:4c:28:46:71:a9:ed:10:50:7b:d3:b4:94:1c:a4:
44:97:58:5a:89:6f:27:bf:c5:ea:37:2f:32:7f:49:
96:1f:16:67:44:9d:37:fc:a4:70:0c:6a:15:df:6d:
89:e7:7f:b2:78:33:7f:3e:e7:40:5b:12:59:4d:9c:
42:8e:43:dd:8a:39:38:ae:6b:6a:1d:5d:1e:da:51:
d3:23:4b:d8:b9:62:b4:24:f4:64:33:d7:89:3c:39:
07:64:4c:b0:e2:46:2f:c8:8c:11:a7:73:00:ce:f6:
8b:c8:3a:4b:e6:74:21:73:ba:1f:b0:60:b3:59:86:
c3:d4:91:4f:d5:20:4c:c7:85:81:12:fb:d1:63:a4:
29:17:a5:62:28:39:ea:36:e0:f1:9c:80:94:2e:fa:
ee:77:7f:a7:6f:e1:af:00:86:ec:b3:f4:32:43:fa:
08:e5:91:a0:93:a1:74:39:f3:a5:80:1a:55:0e:11:
bf:84:c8:41:d9:d3:fe:34:53:26:5b:45:a0:b2:4f:
50:d2:b6:e0:f8:c4:4e:0e:86:fd:2a:bd:49:b7:06:
76:81:0d:e6:2e:ca:f8:06:fb:49:5f:d8:9e:6b:1a:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:AA:0C:05:07:84:8A:B8:6C:B1:AD:FC:09:7C:22:A1:B5:D4:4B
X509v3 Authority Key Identifier:
keyid:8C:36:AD:87:9C:64:5A:EE:98:AC:4A:89:FC:80:0B:9A:97:4E:94:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDath5xkWu6YrEqJ_IALmpdOlB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/H7eqDAUHhIq4bLGt_Al8IqG11Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f663a3-684e-4779-88b9-14e6ec020bfa/1/jDath5xkWu6YrEqJ_IALmpdOlB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.20.0/22
IPv6:
2a09:2280::/48
Signature Algorithm: sha256WithRSAEncryption
06:33:bb:27:5d:ca:55:7e:21:82:3c:d0:ec:95:4c:83:17:0e:
08:46:4f:7f:d2:30:79:d4:42:11:75:d5:12:b9:85:fb:9c:dc:
ee:58:3b:f4:dc:6c:7d:88:be:c9:49:7c:a7:f1:5b:1b:3e:98:
9b:c1:0a:f3:35:03:57:81:74:65:f1:16:26:ee:44:63:bf:9f:
a3:a4:75:d0:5d:95:b4:f4:86:27:48:09:5a:0b:e4:10:a6:dd:
84:77:6b:09:b0:c7:a0:0c:2c:be:00:b4:1b:96:e8:7e:02:c6:
97:65:d1:75:43:1e:03:cf:af:7e:03:5c:98:05:9c:86:9a:01:
92:1c:68:51:32:41:84:36:d5:10:57:33:3f:cb:87:10:e6:da:
3a:bd:00:c7:45:85:e1:94:9d:91:2a:c4:d2:d6:b8:f6:20:f5:
0a:16:15:4a:df:4e:6e:34:8c:d2:5e:38:01:58:3f:9c:c1:a0:
ef:a5:60:c9:11:87:8d:76:fc:2f:b3:29:40:30:4b:6c:6c:c3:
86:97:2a:9e:7e:27:ce:c1:d2:3b:3c:b3:08:62:a7:a2:5e:ce:
e8:06:20:2f:7b:9d:fc:7b:56:f4:de:1e:83:5e:7a:61:40:ef:
90:9c:1f:1b:2c:9f:d0:e2:42:0a:05:52:65:e8:b0:84:ac:3f:
dc:f0:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:31 2024 by rpki-client on console-fra.rpki-client.org