Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/HPSC_h3eFL0d324kxAcPV01Bs-Y.roa
File: HPSC_h3eFL0d324kxAcPV01Bs-Y.roa (raw, json)
Hash identifier: pPIzhzLV3y0PwnDh55TmyPJxojklKRPc/Zz3pYHJzm8=
Subject key identifier: 1C:F4:82:FE:1D:DE:14:BD:1D:DF:6E:24:C4:07:0F:57:4D:41:B3:E6
Certificate issuer: /CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Certificate serial: 018139EF
Authority key identifier: 22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/HPSC_h3eFL0d324kxAcPV01Bs-Y.roa
Signing time: Sat 01 Jan 2022 03:56:58 +0000
ROA not before: Sat 01 Jan 2022 03:56:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211046
IP address blocks: 91.205.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25246191 (0x18139ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b3e4f39d1c3c14d831606bfca1666dde9bed62
Validity
Not Before: Jan 1 03:56:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cf482fe1dde14bd1ddf6e24c4070f574d41b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:22:c8:2b:94:ef:c9:a8:4c:54:ad:47:17:
df:77:b5:ac:75:56:9d:95:c8:7d:1d:58:f5:0e:cd:
f2:84:3e:37:82:0a:cd:c1:93:5d:19:fd:6c:25:f1:
66:d9:d8:6a:dc:9d:73:3f:a7:04:54:c5:5d:c1:f4:
c4:d8:91:7d:a8:bd:ba:72:81:76:9e:b5:ef:e1:46:
9a:96:f9:ca:ec:c9:81:9c:15:7a:ae:bb:8e:c5:06:
9b:1f:0d:8b:8c:bc:5e:cb:46:86:2a:24:a2:30:43:
5e:d7:45:c7:f4:d3:12:e8:fc:5e:96:0b:c4:52:ac:
4d:3b:45:1e:01:b2:58:25:d7:18:46:22:d2:b4:13:
7b:c0:1d:97:9d:e1:72:94:22:a2:0d:a8:d6:75:67:
c1:0f:11:46:c5:0e:55:e7:b3:31:ed:aa:53:24:5b:
ae:97:ba:f4:a6:fc:57:71:29:be:c3:e1:83:b2:34:
12:af:da:6f:3c:ee:67:9b:50:75:c2:02:2f:b3:19:
c1:be:7c:fe:ea:05:c4:dd:fb:c9:ee:14:e3:20:17:
35:57:ce:96:af:e9:b7:35:5c:9e:20:10:68:29:6b:
f8:34:9f:e0:15:63:23:07:8f:ab:f0:98:e0:7a:ef:
b7:37:85:a8:eb:85:73:7c:a6:f1:c0:4d:58:3d:42:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:82:FE:1D:DE:14:BD:1D:DF:6E:24:C4:07:0F:57:4D:41:B3:E6
X509v3 Authority Key Identifier:
keyid:22:B3:E4:F3:9D:1C:3C:14:D8:31:60:6B:FC:A1:66:6D:DE:9B:ED:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IrPk850cPBTYMWBr_KFmbd6b7WI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/HPSC_h3eFL0d324kxAcPV01Bs-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/51a678-3645-4ca4-8c0d-ed5947f66b70/1/IrPk850cPBTYMWBr_KFmbd6b7WI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.222.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:0d:d2:78:16:6f:05:f7:ac:50:4d:05:ad:80:6d:f3:13:07:
ea:2f:c2:07:d6:0f:fe:c4:0a:8d:fe:54:2e:88:75:03:a1:7e:
c0:be:3c:6d:a8:78:38:89:50:b2:3a:cf:44:8e:0e:6b:21:22:
3a:53:9f:82:eb:16:d2:08:6a:5e:ad:a2:a4:ce:d0:55:a8:17:
1a:7c:b8:1a:8c:83:ee:3b:5c:75:b7:22:6e:61:0e:1d:04:58:
c1:fa:35:4c:9f:58:dc:3a:24:a5:25:22:da:fd:03:32:25:3a:
4f:62:ba:87:63:9e:63:88:12:27:fd:20:78:fb:74:ae:7b:79:
7e:c6:24:f9:d9:93:2b:f1:88:86:ac:46:19:91:a4:0d:14:2a:
26:1c:38:91:27:b9:43:b5:80:45:2d:28:8f:c7:01:cb:f7:a1:
f8:25:29:89:f7:38:e6:1d:fc:1b:f5:26:28:d6:a7:ff:3a:b7:
62:78:d6:7a:0a:e5:7f:61:dd:88:4c:43:71:a7:d2:ce:a4:3c:
13:48:23:b2:3c:42:78:4c:4e:f5:d7:96:62:0e:82:97:8f:aa:
65:5f:12:d7:79:00:8a:25:9b:aa:a5:7a:ff:6e:a7:5f:e5:b2:
45:6c:3c:61:5a:a2:04:1e:0e:da:59:82:99:da:9b:c3:f6:a6:
3c:0f:91:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:51 2023 by rpki-client on console-ams.rpki-client.org