Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/HjItL3JZI6TuWfOQ2kg2sROmcN8.roa
File: HjItL3JZI6TuWfOQ2kg2sROmcN8.roa (raw, json)
Hash identifier: cat8tHCO2bnw7PlxHYPj3yIKB+oCpfVegQhwDUZukFw=
Subject key identifier: 1E:32:2D:2F:72:59:23:A4:EE:59:F3:90:DA:48:36:B1:13:A6:70:DF
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 1B6BBC2A
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/HjItL3JZI6TuWfOQ2kg2sROmcN8.roa
Signing time: Sat 01 Jan 2022 10:02:42 +0000
ROA not before: Sat 01 Jan 2022 10:02:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47979
IP address blocks: 91.120.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460045354 (0x1b6bbc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 10:02:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e322d2f725923a4ee59f390da4836b113a670df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:07:e0:05:f7:9f:90:0a:41:d8:3f:c1:50:
d2:7c:53:a6:54:1d:af:e3:56:c0:6f:b5:33:ad:11:
1a:01:d7:f7:f6:aa:ef:eb:18:68:d8:88:a2:da:cd:
86:a9:9c:be:e7:b2:7d:dd:59:ce:e5:ce:bf:d7:a4:
bc:3b:b4:5e:b5:84:46:52:55:7b:28:2e:92:bb:6a:
d7:4b:8f:c8:c8:69:ee:57:a5:e0:a8:3b:e4:4a:03:
9b:6d:82:b4:b1:a2:be:cd:0c:1d:33:ec:3a:2e:64:
72:a7:e3:64:07:7c:f6:29:3b:b8:d5:9d:08:fe:5c:
13:fc:c8:64:61:3e:02:88:30:e4:5a:c3:40:76:89:
1c:6d:ed:15:7b:7b:97:64:a7:a1:65:29:50:bb:21:
4e:f2:83:c4:eb:5d:3a:f3:a0:85:48:df:39:6d:31:
c2:1f:30:18:8d:7c:3b:4f:01:06:63:06:c9:3b:1e:
22:97:60:f7:dd:61:ea:3e:6a:8a:56:1d:b2:39:99:
f1:58:47:46:a2:32:eb:4d:85:b4:f2:2c:70:98:57:
4c:2a:18:aa:c7:19:70:0e:8d:0f:bc:04:66:16:a6:
90:cb:d8:dd:6d:bd:c0:3e:80:0f:e2:54:07:6d:e1:
8d:06:8c:66:ce:25:f4:0e:21:5b:8b:57:de:ff:35:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:2D:2F:72:59:23:A4:EE:59:F3:90:DA:48:36:B1:13:A6:70:DF
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/HjItL3JZI6TuWfOQ2kg2sROmcN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.120.44.0/24
Signature Algorithm: sha256WithRSAEncryption
61:df:5b:24:a7:3c:0e:9c:46:25:ba:7d:84:c8:66:d9:e4:b7:
6d:4d:3a:5e:fe:20:43:51:bf:3d:d3:28:3c:39:ab:fa:62:21:
89:00:02:f2:b5:ed:28:ee:06:99:f6:8f:71:d9:fa:ae:50:e1:
8a:f9:5c:09:dc:de:e9:f6:93:33:4f:23:f9:f4:f0:f7:da:7c:
b4:35:fd:f8:92:25:d6:b8:8a:17:a7:a4:08:66:77:90:2c:38:
b8:66:90:15:1c:eb:36:bd:7b:26:89:11:e2:b6:3d:0d:f5:cb:
6e:80:e0:18:78:c8:db:35:1e:5e:6b:a6:ce:e4:77:ec:d3:d6:
15:6a:10:70:09:ba:8a:d1:6b:9e:09:74:ea:96:e7:a1:d6:08:
bd:bb:b4:0c:71:ff:48:56:3e:ca:29:7c:10:3a:83:57:e5:fb:
a0:12:ba:e4:a0:cc:2b:da:de:d4:da:ec:a8:cc:f1:ef:c7:4f:
16:8b:c0:b5:a2:99:da:02:eb:6f:e5:22:6d:14:f9:2e:aa:37:
26:c2:e5:c9:3f:f5:a8:ea:b9:d1:2b:d7:db:f5:9f:ec:4c:69:
f1:d8:19:db:ee:50:be:d9:b9:e6:6f:0b:83:6d:55:a1:33:f7:
eb:11:e7:ef:fc:21:a8:16:17:c3:52:3b:94:dc:45:2c:d9:d9:
1d:cf:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org