Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/HTFqL_Kagc0VBz613wg3IB242yY.roa
File: HTFqL_Kagc0VBz613wg3IB242yY.roa (raw, json)
Hash identifier: eXLx8kqeZtqBXKHWRx21BPPS4mL7qUv5Iqdd5ijHDFw=
Subject key identifier: 1D:31:6A:2F:F2:9A:81:CD:15:07:3E:B5:DF:08:37:20:1D:B8:DB:26
Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Certificate serial: 0183557D7B3654C0E33A9D0E0EFA03FFECE1
Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/HTFqL_Kagc0VBz613wg3IB242yY.roa
Signing time: Mon 19 Sep 2022 11:23:50 +0000
ROA not before: Mon 19 Sep 2022 11:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21221
IP address blocks: 82.210.96.0/19 maxlen: 24
84.35.0.0/16 maxlen: 24
212.29.160.0/19 maxlen: 24
2001:15b0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:7d:7b:36:54:c0:e3:3a:9d:0e:0e:fa:03:ff:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186
Validity
Not Before: Sep 19 11:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d316a2ff29a81cd15073eb5df0837201db8db26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:a0:d2:a4:49:fb:b7:0c:f3:59:af:c3:2b:
49:7d:cb:73:2a:f2:d0:d7:93:d8:68:e2:bf:a9:df:
15:c0:35:5c:bf:6f:cd:7d:51:dd:bb:21:96:69:23:
f8:d8:56:2d:79:fe:88:e6:4b:c6:b8:40:5c:22:a7:
21:2a:81:1e:5b:70:c2:7a:1d:a6:1d:61:34:e7:56:
d7:9c:fa:bf:8d:8e:d4:8f:7f:b3:16:8d:f6:d7:d2:
4f:07:4c:73:19:08:72:ed:20:51:b6:2a:09:39:bd:
45:66:27:4b:bb:ac:11:2e:04:60:d9:d4:55:76:09:
6a:52:83:32:b1:84:7b:15:57:e9:bb:a3:fd:37:ca:
84:a5:00:84:fb:3a:c5:2c:93:15:83:ba:24:78:9b:
05:cb:b4:f7:81:9f:07:73:69:de:41:38:76:de:34:
8d:bf:92:5a:05:a6:42:c9:ca:94:5e:64:63:1a:08:
23:94:b5:a8:37:1c:7e:65:2a:53:4b:b3:6b:5a:7e:
88:43:61:56:f5:1a:ce:c5:ed:ac:7f:96:72:bd:fb:
9d:7e:d4:66:42:ca:89:7b:c2:1c:13:c0:da:07:79:
87:8b:d2:38:3d:8d:c3:cf:18:fc:18:64:aa:23:0f:
59:f8:54:4d:66:9e:12:89:ae:6b:ca:45:04:52:4e:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:31:6A:2F:F2:9A:81:CD:15:07:3E:B5:DF:08:37:20:1D:B8:DB:26
X509v3 Authority Key Identifier:
keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/HTFqL_Kagc0VBz613wg3IB242yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.210.96.0/19
84.35.0.0/16
212.29.160.0/19
IPv6:
2001:15b0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:e9:64:9b:a1:46:01:d6:c2:a8:a5:3e:86:f7:31:1c:17:d0:
de:de:5b:16:4f:97:ac:21:aa:f1:65:c5:01:84:99:3e:f5:01:
fd:8b:ad:9c:e1:9c:bc:32:fa:bc:0f:bd:10:30:f1:3c:b9:4d:
91:3c:39:9a:20:e1:0a:96:ca:32:d6:1e:c1:ff:84:be:8c:69:
6f:65:c9:4d:68:bf:73:38:34:76:17:e7:61:02:49:4f:60:15:
d5:c6:8d:e0:9a:0f:c1:c2:62:c5:7e:10:73:f5:c3:ff:ab:ab:
e9:e8:e8:a8:05:dc:de:64:1e:c6:62:6f:5f:fb:f9:54:f9:58:
bd:4b:29:a3:39:6c:f0:0d:9c:cb:30:d3:6a:38:0e:05:7e:5d:
6b:57:9e:71:01:28:29:c6:cd:7c:a3:40:60:1c:78:3e:74:1b:
24:28:e4:16:b0:ec:c5:77:34:10:89:d4:52:32:ae:bf:22:22:
4e:e5:6d:88:37:fa:1b:12:42:25:36:3b:e7:6d:24:7a:e5:38:
36:90:7a:ca:19:d5:3a:cb:03:13:a2:10:d4:92:75:83:5a:b3:
8d:5c:f1:6c:4b:74:a4:9e:17:2f:ee:c7:67:fd:1b:fb:a1:5a:
f0:c1:85:2c:6f:84:7f:d2:91:df:98:59:2a:61:93:89:9a:74:
b2:a6:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org