Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/HB9Uy5QVAjahxws6i2c8JWVeFjw.roa
File: HB9Uy5QVAjahxws6i2c8JWVeFjw.roa (raw, json)
Hash identifier: 0f8ioX7xVgQ6AdkDQms5nzW6frXERfjopE0OY1DJucU=
Subject key identifier: 1C:1F:54:CB:94:15:02:36:A1:C7:0B:3A:8B:67:3C:25:65:5E:16:3C
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 19F1BEB4
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/HB9Uy5QVAjahxws6i2c8JWVeFjw.roa
Signing time: Sat 01 Jan 2022 16:05:02 +0000
ROA not before: Sat 01 Jan 2022 16:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200187
IP address blocks: 80.94.82.0/24 maxlen: 24
185.35.144.0/22 maxlen: 22
2a04:4fe0::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435273396 (0x19f1beb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 1 16:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c1f54cb94150236a1c70b3a8b673c25655e163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2a:08:6c:fa:ab:b4:6f:39:2a:a3:4b:bf:1e:
17:d8:f0:2c:c1:76:90:6a:27:aa:6e:4a:b6:bb:4d:
79:a1:15:c9:99:fd:df:a6:3c:07:b4:32:a4:7a:9f:
9d:be:b3:c3:98:23:82:f7:dd:9d:d9:2c:25:2f:cb:
d7:34:2f:1f:f6:b4:93:ca:bd:88:88:c3:65:08:be:
65:6a:ee:56:de:65:d4:3b:36:42:a6:d3:89:af:34:
79:e3:56:9e:53:8e:ff:1a:60:62:d0:19:99:1d:1f:
66:1e:a4:72:8e:ee:b1:de:80:49:66:0a:c4:1c:f3:
69:7f:85:5b:68:42:a1:9d:65:39:cc:19:d5:91:41:
f3:81:a8:46:e0:71:5f:01:30:a5:f2:8e:89:39:e7:
c9:f5:e0:c4:18:4d:89:9d:24:de:f5:6a:f7:49:bc:
e8:52:96:33:17:8c:0f:2c:52:6c:6d:bd:07:f9:28:
40:c3:ce:ea:3e:78:95:2f:c6:0e:df:bb:b1:41:20:
74:93:10:cd:d8:d5:18:16:86:e5:a2:3c:c6:ff:25:
01:b1:7f:01:b3:ca:ad:92:9e:b7:e1:10:69:2b:6d:
ee:f9:68:4b:e5:f5:b4:bb:40:5d:1f:9d:2e:ae:31:
83:56:1f:7b:ec:87:0a:73:68:b1:f5:b7:a2:94:db:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:54:CB:94:15:02:36:A1:C7:0B:3A:8B:67:3C:25:65:5E:16:3C
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/HB9Uy5QVAjahxws6i2c8JWVeFjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.82.0/24
185.35.144.0/22
IPv6:
2a04:4fe0::/30
Signature Algorithm: sha256WithRSAEncryption
05:27:8d:8c:bd:c6:74:98:ed:e7:51:25:43:46:0c:dc:d9:ff:
40:3b:3c:1a:55:51:92:23:36:96:a0:86:3b:8a:56:1c:f3:37:
99:20:ba:49:5e:d6:35:1e:d3:d7:3e:9b:61:e2:50:ec:99:b9:
a2:30:b2:53:19:9a:6f:b1:90:cd:c4:92:3f:99:41:31:fa:4b:
4f:55:1c:b3:75:d5:2c:3d:7a:a7:1f:a6:f0:0c:32:f3:84:17:
60:5d:69:b8:45:3f:42:32:0e:14:c7:b2:d8:32:93:f2:2e:da:
b2:9c:21:b5:2b:2a:45:2b:63:99:36:b8:6b:5b:0d:f5:c4:16:
5f:7c:d0:ed:d1:3d:77:30:f6:7f:bc:f5:f9:ab:12:82:b4:51:
9d:07:52:89:68:73:ff:3e:ee:e0:67:b5:aa:8e:da:21:e6:c5:
50:19:59:fa:b0:0d:0a:1d:18:96:25:7d:18:8e:6a:fe:93:d4:
53:c8:35:44:4c:d7:3b:34:b8:20:23:4b:f3:d4:34:46:9f:15:
13:3f:09:5a:00:99:5c:31:43:0a:ac:c9:7b:6f:e5:49:75:4e:
cc:57:4d:ba:6a:ff:6b:1b:b8:4a:b7:87:05:76:e4:30:b0:41:
d0:78:51:f2:e7:22:a1:7b:f8:04:74:79:9e:9b:53:95:a8:2c:
f9:df:a7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:04 2024 by rpki-client on console-fra.rpki-client.org