Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/HA5kULT52ewlBqcAuYxRUxirfeA.roa
File: HA5kULT52ewlBqcAuYxRUxirfeA.roa (raw, json)
Hash identifier: L44TkOZ/P3JvcCnuNd9VLL7+YXxRGQGJJFcPDV9W7pc=
Subject key identifier: 1C:0E:64:50:B4:F9:D9:EC:25:06:A7:00:B9:8C:51:53:18:AB:7D:E0
Certificate issuer: /CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Certificate serial: 018281EF545C4CA93F043C80E89645243BD1
Authority key identifier: FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/HA5kULT52ewlBqcAuYxRUxirfeA.roa
Signing time: Tue 09 Aug 2022 09:28:41 +0000
ROA not before: Tue 09 Aug 2022 09:28:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47505
IP address blocks: 91.206.78.0/23 maxlen: 23
193.142.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:ef:54:5c:4c:a9:3f:04:3c:80:e8:96:45:24:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd717f3ab63945a1be739c2b3a2589bea55ddb6e
Validity
Not Before: Aug 9 09:28:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c0e6450b4f9d9ec2506a700b98c515318ab7de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:36:ae:b7:36:82:ac:b0:39:c3:b7:11:1c:
17:65:7a:3a:0d:eb:0a:67:3d:c5:b7:5f:a3:e9:89:
03:2a:0c:fb:6d:ba:c4:79:4e:5b:5d:0c:72:fa:20:
4c:3f:7f:16:f4:cf:08:c8:61:1c:d3:59:23:f4:b1:
2c:6d:ac:b6:fd:91:75:04:c0:41:b5:0d:ac:df:16:
5d:b3:39:be:b7:3a:0c:03:19:2a:d9:88:c3:68:69:
3e:7b:f8:a7:9b:82:b5:09:c7:64:ac:3f:16:79:a3:
24:b2:d2:cb:ff:01:4d:f2:73:59:bc:10:94:70:93:
02:a0:bf:ef:47:a9:2d:0c:0a:d2:38:96:15:5a:c8:
d9:f8:ac:c7:59:a1:36:5c:a5:80:b0:7f:c7:15:a0:
61:28:4a:ac:1d:80:95:f4:df:0b:b1:94:37:47:82:
cc:10:3b:d6:89:19:23:c7:a3:8e:3e:c5:18:62:df:
7f:bf:23:bb:cd:c7:4b:35:83:7f:93:2e:87:fd:08:
f8:ca:92:2b:52:c5:97:c4:bd:cb:1c:fe:5c:17:f1:
8e:3d:e9:79:b3:25:1d:89:c4:5b:e7:da:f7:0e:c6:
4f:bb:cd:54:5f:ef:24:1e:a1:e8:2e:4c:6f:3c:57:
d1:88:d3:1a:9d:47:22:32:48:c4:69:6b:c8:fe:88:
f4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:64:50:B4:F9:D9:EC:25:06:A7:00:B9:8C:51:53:18:AB:7D:E0
X509v3 Authority Key Identifier:
keyid:FD:71:7F:3A:B6:39:45:A1:BE:73:9C:2B:3A:25:89:BE:A5:5D:DB:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XF_OrY5RaG-c5wrOiWJvqVd224.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/HA5kULT52ewlBqcAuYxRUxirfeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2f0a66-1634-40fb-99b0-931505ff41c5/1/_XF_OrY5RaG-c5wrOiWJvqVd224.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.78.0/23
193.142.208.0/24
Signature Algorithm: sha256WithRSAEncryption
10:a5:e1:37:a4:91:fc:a7:95:d7:57:9e:26:ad:99:4f:fc:1b:
b6:21:98:fd:dd:be:d7:dc:9d:2d:68:44:cc:e7:5d:7e:46:1a:
76:df:26:78:ad:c6:77:4c:0b:4f:03:57:ba:59:aa:35:75:b0:
e4:a2:0c:61:2c:4d:9a:d9:1e:8a:d5:3c:6e:63:78:ee:14:ce:
c9:36:2c:b1:82:4c:63:28:c4:6b:f0:5f:1e:24:42:4c:59:b6:
e8:89:95:c2:64:b8:9b:ac:73:d1:61:69:80:13:75:f7:39:14:
3b:48:80:aa:d0:67:a2:dc:a3:cb:ee:87:e1:99:76:e0:87:5a:
c9:07:d4:4f:ec:be:9d:33:54:a6:b6:97:21:d0:6b:0c:b7:b5:
41:c4:22:d4:62:5b:e3:1c:af:cc:b6:2a:89:01:11:57:4c:39:
f7:1c:b5:27:ca:ef:72:10:f2:e2:97:eb:c2:68:9c:c5:95:d4:
5a:54:cb:c4:52:d6:8f:e3:f7:f3:16:f9:bf:86:7c:ac:d3:4b:
31:0e:39:50:7e:98:1b:5d:2e:0d:fe:d8:82:68:f7:01:3e:cf:
ee:d4:4f:49:ca:63:b0:42:22:6f:ed:88:8c:1d:28:23:43:e0:
3b:5b:dd:76:47:b8:89:4f:7c:7c:b6:25:ff:16:7d:ec:53:b3:
14:10:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:43 2024 by rpki-client on console-ams.rpki-client.org