Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/hhsc0-a4o2Nd-TwQQtOoBBFR8mA.roa
File: hhsc0-a4o2Nd-TwQQtOoBBFR8mA.roa (raw, json)
Hash identifier: +Ukax2OPb0Bav75SAVFV25GsKgPyuIPdiuhZ5Ci0byA=
Subject key identifier: 86:1B:1C:D3:E6:B8:A3:63:5D:F9:3C:10:42:D3:A8:04:11:51:F2:60
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 0FB7EBD9
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/hhsc0-a4o2Nd-TwQQtOoBBFR8mA.roa
Signing time: Sat 01 Jan 2022 07:02:08 +0000
ROA not before: Sat 01 Jan 2022 07:02:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60385
IP address blocks: 87.238.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263711705 (0xfb7ebd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Jan 1 07:02:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=861b1cd3e6b8a3635df93c1042d3a8041151f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:b1:b0:67:88:81:ef:58:6e:4f:af:1e:29:
9a:03:f7:7a:8c:fc:e8:31:de:e8:14:f0:22:5a:a1:
48:3c:0b:7e:82:80:9b:06:3f:bb:3d:b0:17:51:c6:
37:1e:71:de:40:66:87:10:83:a8:91:a9:ac:9f:60:
16:16:45:06:23:3a:4b:43:83:ff:7d:32:e4:70:17:
61:15:87:9a:7e:c4:4f:48:13:49:53:66:f6:28:15:
4c:bb:a7:f3:08:f1:34:4a:f9:9e:d2:71:2f:e6:6c:
fd:83:7a:c6:e1:6e:9a:5e:ea:07:03:3e:61:c8:37:
07:1d:c8:12:e1:60:77:f4:b0:2b:dc:f9:28:cb:9a:
d4:cd:33:ef:e2:f6:dc:98:f3:56:96:b8:bc:fa:21:
9c:39:ff:01:fe:05:34:02:10:55:f2:a3:26:23:c4:
74:bb:9d:9c:aa:04:da:25:18:43:95:4f:7f:0b:f4:
66:15:00:95:1b:02:fe:fc:21:88:7a:ff:79:7a:c7:
e1:a8:e1:57:a7:24:fa:84:52:be:3e:52:55:23:51:
31:67:d5:98:e0:c3:a6:9e:f2:23:e8:ba:9c:2f:2c:
42:c5:27:57:c4:b3:87:b0:37:29:b7:13:a5:22:a6:
b3:c6:36:b8:2d:f4:02:5a:23:f4:85:74:49:93:d0:
b5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:1C:D3:E6:B8:A3:63:5D:F9:3C:10:42:D3:A8:04:11:51:F2:60
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/hhsc0-a4o2Nd-TwQQtOoBBFR8mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:18:62:53:06:5e:70:57:e2:31:5c:cf:e2:35:3f:26:6d:ca:
43:99:21:73:af:7c:09:33:97:53:58:42:53:93:90:30:ad:63:
1e:85:b0:34:fd:a3:24:f8:f7:3c:fe:a3:db:3e:c6:e4:68:52:
78:67:2d:b1:9d:ef:a8:32:ff:ea:4d:49:6f:66:a1:2c:d5:e3:
d5:9c:22:6e:5e:22:d0:22:9b:14:cd:1d:9f:82:70:50:91:a1:
03:ad:7f:48:11:48:c8:22:fe:e1:bd:e3:a0:cc:76:ae:33:7a:
d6:57:c1:35:df:ef:8b:f7:85:50:ec:42:14:32:05:47:60:1e:
69:bd:d5:ce:26:13:14:ee:3a:91:c1:1e:49:72:9b:f7:b0:c0:
7b:82:68:5a:2a:3d:df:4b:5c:ae:1a:a3:ef:44:db:21:b4:99:
8f:1a:03:03:bd:a0:f0:ca:77:f6:b4:eb:78:0e:1f:f8:0b:e9:
d3:47:41:4a:11:50:54:d0:74:a8:e4:28:90:0b:2b:e5:c8:80:
2a:34:d2:cd:ae:90:78:76:a3:a2:ba:35:b3:e5:5e:80:04:f4:
9d:2e:3d:8b:c3:cd:12:8a:af:0f:fd:06:bd:e6:f5:41:dc:15:
65:9a:50:bf:f9:77:f6:eb:e1:16:9c:ff:17:66:ec:8c:b9:88:
f3:f5:ee:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:35 2023 by rpki-client on console-fra.rpki-client.org