Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/HojPgjiV4xRESnSO9K2rF0zkp1M.roa
File: HojPgjiV4xRESnSO9K2rF0zkp1M.roa (raw, json)
Hash identifier: DXlgsA7/rKOXKY9YQQcd2URWtU6ih0HQG9dIOxIUwfA=
Subject key identifier: 1E:88:CF:82:38:95:E3:14:44:4A:74:8E:F4:AD:AB:17:4C:E4:A7:53
Certificate issuer: /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial: 062A3F9A
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/HojPgjiV4xRESnSO9K2rF0zkp1M.roa
Signing time: Sat 01 Jan 2022 13:59:56 +0000
ROA not before: Sat 01 Jan 2022 13:59:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21263
IP address blocks: 193.39.67.0/24 maxlen: 24
91.196.200.0/22 maxlen: 24
2a0c:7780::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103432090 (0x62a3f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Validity
Not Before: Jan 1 13:59:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e88cf823895e314444a748ef4adab174ce4a753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:bf:7a:09:79:87:fa:1c:22:5f:d8:09:df:5f:
db:11:ba:9e:17:a2:3f:39:c4:44:44:45:40:47:8a:
8a:d4:53:f8:23:03:9e:dd:dd:a1:b5:e6:fd:c3:97:
5f:1e:0f:0d:93:42:73:20:d3:14:7a:68:e5:35:9e:
3a:c3:d5:59:ba:37:57:4b:48:99:ea:04:7d:a6:3a:
9f:b6:57:98:47:f6:e8:7f:60:c7:0c:80:86:0a:e4:
9d:89:38:8f:db:e9:08:5f:40:17:d4:d2:8a:88:06:
78:eb:01:b5:ce:d0:b0:28:29:a7:0b:82:03:e4:e1:
a0:73:2c:4f:9a:c9:51:e1:a4:4e:00:a8:f2:70:e3:
28:4b:f3:c1:6b:3f:23:f6:47:f3:0f:8f:97:ab:12:
61:9b:1b:76:7f:df:3e:fa:c9:e3:78:87:7b:f3:49:
69:2e:15:2a:7f:cd:e9:a0:1f:ae:e2:85:3e:4d:25:
b6:c7:b3:74:cd:f2:88:a8:be:35:73:cf:32:db:05:
81:9b:fe:60:c2:ca:6a:eb:5f:cc:90:b2:58:6e:0a:
96:be:17:90:48:08:74:d4:bb:e9:e9:da:40:44:a2:
a7:9c:35:b2:64:2d:2d:41:c2:84:f7:a5:57:ab:ae:
3b:7c:90:1f:f9:84:9e:e0:00:fc:db:cf:ad:a7:d2:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:88:CF:82:38:95:E3:14:44:4A:74:8E:F4:AD:AB:17:4C:E4:A7:53
X509v3 Authority Key Identifier:
keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/HojPgjiV4xRESnSO9K2rF0zkp1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.200.0/22
193.39.67.0/24
IPv6:
2a0c:7780::/29
Signature Algorithm: sha256WithRSAEncryption
70:6f:1e:50:e2:7c:c7:1b:84:fe:27:fb:d4:3a:84:52:4f:a4:
cd:85:70:e1:d1:6f:69:1a:2f:91:b0:81:9b:4f:8e:cd:2c:a6:
79:da:f2:f4:d8:b9:34:05:04:33:8b:4e:1d:c6:12:e1:bc:fd:
2e:32:77:5f:cc:34:e6:47:9a:f8:b7:77:18:4a:23:3d:be:0b:
53:ed:80:64:a4:71:56:d8:4b:7f:eb:01:df:b6:3a:92:cd:72:
55:8d:e9:c1:eb:95:40:22:ea:58:4b:6c:08:a0:76:11:20:49:
25:ae:51:d2:a7:c2:b7:ca:14:08:6e:3d:f8:ff:05:58:d6:53:
ef:fd:dd:70:03:e3:38:67:a6:76:4f:f3:f8:09:82:3f:28:ac:
75:db:26:fa:29:9f:b9:43:e7:67:71:2a:75:b5:ac:4a:c3:95:
95:44:bc:8a:b8:3c:b8:57:12:93:84:3c:ce:f9:b4:82:ef:01:
c5:3b:4d:91:77:c8:43:c9:a2:c9:0e:c6:ac:44:91:fd:6d:fa:
85:58:82:e9:ac:d0:8d:09:1e:e8:73:01:06:3b:65:14:c8:73:
31:e3:44:8e:a5:6d:d7:fe:9d:5f:10:18:5c:b1:11:26:b6:b8:
e9:2b:c9:48:31:ef:d8:28:10:1d:bf:a1:20:96:54:dd:c6:5c:
e7:64:07:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:38 2023 by rpki-client on console-fra.rpki-client.org