Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HSpF71m-KUVUV9krJTxFhOsjLMA.roa
File: HSpF71m-KUVUV9krJTxFhOsjLMA.roa (raw, json)
Hash identifier: k68rkoUAnz9pfH46uS3Tuf06ssfAVrlcZ6xmOkSkDIg=
Subject key identifier: 1D:2A:45:EF:59:BE:29:45:54:57:D9:2B:25:3C:45:84:EB:23:2C:C0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0184761256A204339E3017FF9C5E2E863A41
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HSpF71m-KUVUV9krJTxFhOsjLMA.roa
Signing time: Mon 14 Nov 2022 12:17:04 +0000
ROA not before: Mon 14 Nov 2022 12:17:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 81.5.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:12:56:a2:04:33:9e:30:17:ff:9c:5e:2e:86:3a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Nov 14 12:17:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d2a45ef59be29455457d92b253c4584eb232cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:92:c7:92:71:a5:ae:06:d8:81:36:3e:43:
fd:c0:0c:9f:a7:a4:ef:42:8b:39:a2:53:2e:c4:01:
03:e7:62:f5:ba:a4:4b:de:2b:d9:31:bc:e7:0c:de:
d5:21:0b:02:ca:ba:b8:1a:16:05:7b:63:f4:2e:c4:
03:16:b4:25:a9:fc:e9:95:92:1b:56:6e:4e:30:6e:
02:c1:9e:f3:e9:86:2b:ed:a6:86:55:d0:50:f2:bf:
da:c2:58:dd:87:19:ba:ba:31:f1:7c:85:76:4e:5a:
e4:07:31:b1:ae:2f:60:d8:6d:08:a0:e5:ee:5e:a2:
64:50:3f:bd:a2:69:33:9d:f4:26:24:c9:bf:bd:f2:
82:27:45:85:7b:f9:0f:10:e9:8b:c0:39:6e:4d:d6:
06:1f:43:66:82:b8:b0:82:34:73:5a:61:a9:70:c1:
3c:5f:24:ff:04:a3:0a:a8:21:a2:50:53:34:c6:84:
c6:dd:2d:0e:2d:d1:f7:6c:eb:b2:90:5b:55:08:04:
23:75:e7:20:b2:82:09:0b:6b:41:2a:9a:78:aa:14:
e0:46:88:bc:d7:20:c7:88:4f:30:30:20:3c:ba:ee:
64:85:cf:b0:9b:03:ed:34:b0:39:65:4d:5e:86:c1:
0d:03:46:78:e9:a7:0b:4e:70:10:a4:fe:85:bf:01:
65:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:45:EF:59:BE:29:45:54:57:D9:2B:25:3C:45:84:EB:23:2C:C0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HSpF71m-KUVUV9krJTxFhOsjLMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:65:99:7d:bb:9e:4b:d2:a8:93:80:66:00:c3:d1:64:6f:30:
3c:15:d9:84:4d:92:c0:ae:c5:20:98:40:13:1d:ce:4d:29:28:
7b:e9:cf:7c:f0:2f:fd:56:cd:a1:6b:40:7f:c8:42:c5:4c:26:
46:2f:50:3a:fd:c6:5e:d9:dd:d5:c8:64:08:9c:e4:e0:b3:02:
1e:78:03:13:b2:e6:1f:21:52:76:e0:0d:92:98:58:42:1d:5f:
e9:2f:dd:1a:e8:1a:c9:28:42:fd:75:3c:87:14:5e:82:6c:de:
2a:c9:d1:38:0f:a0:b5:23:15:c8:b9:16:86:5c:60:aa:bd:97:
5f:46:be:46:c8:ff:24:83:52:e9:05:87:3e:a7:b0:ea:92:8f:
75:5e:32:5d:0c:23:7a:eb:5d:c6:69:ff:1d:62:74:05:30:8d:
95:d1:0f:e2:bf:c9:d3:3c:ce:fe:4e:93:1b:86:bc:1a:e0:14:
2c:a7:48:22:e9:ef:c0:3c:cb:25:10:f2:f5:11:df:27:29:cd:
b7:43:99:1b:3b:21:5a:f6:c8:e9:0f:1d:55:c5:92:82:ac:e2:
e5:a8:2f:d1:d7:ef:dc:b9:3b:d0:48:1c:ec:3b:e8:c2:9a:a0:
b1:5d:2a:31:b8:b8:b1:9a:51:17:d2:32:f3:7d:62:6d:9b:f8:
52:f7:df:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:15 2024 by rpki-client on console-fra.rpki-client.org