Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/HNiza2ucsNQj3B9Z5rLo0tTw2S4.roa
File: HNiza2ucsNQj3B9Z5rLo0tTw2S4.roa (raw, json)
Hash identifier: Jqhto7PmRrORiKon3nZVuOsFxszTRRwuL+7Ui0BmkDc=
Subject key identifier: 1C:D8:B3:6B:6B:9C:B0:D4:23:DC:1F:59:E6:B2:E8:D2:D4:F0:D9:2E
Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Certificate serial: 0181F7E1A8553799C0BA7ADC5A6778A399E2
Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/HNiza2ucsNQj3B9Z5rLo0tTw2S4.roa
Signing time: Wed 13 Jul 2022 14:06:09 +0000
ROA not before: Wed 13 Jul 2022 14:06:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 185.238.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f7:e1:a8:55:37:99:c0:ba:7a:dc:5a:67:78:a3:99:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd
Validity
Not Before: Jul 13 14:06:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd8b36b6b9cb0d423dc1f59e6b2e8d2d4f0d92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:86:6d:f4:50:db:53:d1:32:2b:2f:25:8c:91:
c7:80:f6:13:5e:5a:e7:99:af:38:1e:de:7c:d0:dc:
2c:13:7e:f7:cc:85:f8:16:09:8c:db:80:74:fd:bd:
e6:10:d8:d5:1f:c6:d0:25:32:db:5a:fd:5c:f6:1e:
a3:58:da:df:e4:b8:fa:68:75:18:22:f3:fd:e8:b8:
a9:a7:11:3a:18:99:f5:79:e2:60:79:4f:3a:97:69:
3b:f0:83:92:ac:61:8b:bd:45:e4:6d:48:24:0e:e2:
f9:c6:3d:fd:73:b4:38:be:86:4a:9b:22:a9:16:5a:
b9:f6:8c:5d:ff:97:03:42:c5:7f:fa:59:78:c0:73:
6b:9c:f4:18:d8:5d:37:20:9c:5e:83:19:b8:58:ea:
3a:ae:53:b9:33:c6:f6:5f:43:53:71:d7:a4:d2:1b:
50:17:88:99:38:05:8c:a8:47:00:ed:9c:64:0b:a7:
87:0b:a2:65:da:b5:85:c9:50:91:46:b0:4d:2d:64:
17:07:54:62:2b:c5:72:80:3e:0a:e4:ac:4f:bc:b3:
ec:57:1b:be:22:83:f5:57:65:dd:c7:40:c4:07:a0:
4a:84:c6:cf:3a:b6:21:2d:b5:c0:9e:13:f2:11:49:
55:1b:11:f2:ec:38:78:83:77:82:48:aa:e9:cf:8c:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D8:B3:6B:6B:9C:B0:D4:23:DC:1F:59:E6:B2:E8:D2:D4:F0:D9:2E
X509v3 Authority Key Identifier:
keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/HNiza2ucsNQj3B9Z5rLo0tTw2S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.176.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e8:ab:95:af:0d:a0:9d:43:5c:1b:2c:86:e1:3c:b2:5d:2b:
5c:e8:12:22:ba:77:5a:d9:40:4d:9f:da:2f:89:ef:be:42:3b:
3e:8c:5c:0c:9b:db:41:d5:ed:67:d7:e9:e4:49:bb:5e:dc:b4:
0c:e7:38:fd:34:ea:75:6a:04:48:f8:61:dd:1e:b5:d6:57:2a:
56:67:57:c2:bd:15:bf:52:9a:b9:6e:d7:4d:0b:a1:ec:18:c8:
8f:20:00:68:bb:b6:88:17:3d:18:2e:18:0e:c5:55:0d:5a:6c:
3d:16:8e:04:2e:8a:b4:f5:b8:c7:fd:58:6f:92:0d:87:c6:71:
57:8a:23:58:c4:6f:3b:c4:06:c6:05:6c:4f:54:35:55:13:91:
c6:da:46:a7:84:a0:3a:1d:ba:84:9e:3a:9e:c7:96:aa:66:ff:
f0:93:e0:d4:89:d3:6a:5d:2c:86:43:15:dd:d9:9a:74:6c:b0:
af:8d:bf:46:24:07:52:bf:d0:95:16:21:e8:67:d4:30:71:0c:
03:a1:93:ba:eb:6c:75:4f:66:a6:f2:03:08:56:48:31:38:d9:
c8:44:18:d1:6a:73:85:ee:64:35:2b:a7:4d:0f:82:75:4c:71:
63:ef:86:15:a6:73:a3:39:b8:ff:91:b4:ef:29:65:3a:cb:34:
78:3a:57:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:14 2023 by rpki-client on console-fra.rpki-client.org