Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/HoUD_SoQI0625HMcKUopbXBFgEI.roa
File: HoUD_SoQI0625HMcKUopbXBFgEI.roa (raw, json)
Hash identifier: YtLF9AfUjaJukZfvXoCyRkBTOmIcaqZ2jNwqPupusJY=
Subject key identifier: 1E:85:03:FD:2A:10:23:4E:B6:E4:73:1C:29:4A:29:6D:70:45:80:42
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 029407C6
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/HoUD_SoQI0625HMcKUopbXBFgEI.roa
Signing time: Sat 01 Jan 2022 06:59:04 +0000
ROA not before: Sat 01 Jan 2022 06:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47713
IP address blocks: 95.140.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43255750 (0x29407c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 1 06:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e8503fd2a10234eb6e4731c294a296d70458042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:e9:80:db:dd:2e:5e:54:4a:78:82:6d:22:
5d:33:d6:9c:ed:2c:fa:86:6f:27:7a:1a:b5:b8:9f:
bf:84:52:c7:f0:f6:cc:d2:13:11:2d:a3:21:cb:2d:
58:29:56:69:7c:65:8b:10:ae:5e:f9:82:78:8b:5c:
f5:2e:fe:3c:bb:5e:f2:b9:a4:7b:a9:68:92:bf:b4:
d5:e8:07:d5:2e:10:ce:61:09:f0:73:90:ed:20:02:
20:2d:a8:0a:ba:a7:17:e2:c4:76:4e:08:9a:5d:7c:
04:65:18:72:9e:3d:f8:4b:ad:bd:da:a5:aa:d5:69:
9c:e0:32:11:5e:8c:d0:81:fd:86:8a:53:dd:b0:10:
93:2a:92:dd:f2:52:f0:2f:63:46:90:01:4c:d2:0b:
7c:2c:c1:e5:16:34:35:e5:d1:92:50:82:42:91:7c:
39:e1:f9:9b:e2:eb:78:a2:94:39:48:af:2d:8a:32:
d9:b2:eb:c7:a0:d2:d6:39:56:c9:f7:fb:a7:6d:25:
33:81:08:8e:a7:5c:cc:da:86:5a:3e:c9:46:d2:b5:
ae:c0:68:6a:df:bf:cf:52:cb:0e:b9:b0:c8:00:b1:
ac:dc:9a:3f:40:4d:8a:31:f7:81:4f:77:e7:9a:ea:
60:90:3a:9e:c4:bd:0a:89:4c:4c:10:91:b4:fd:52:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:03:FD:2A:10:23:4E:B6:E4:73:1C:29:4A:29:6D:70:45:80:42
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/HoUD_SoQI0625HMcKUopbXBFgEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3e:ec:90:19:00:e5:4e:ea:9c:50:68:7a:42:b2:d7:68:40:
64:22:e5:46:2f:0a:2a:50:1a:ce:97:9c:e4:45:7d:67:d2:9d:
37:d7:61:90:ac:74:67:68:b0:9a:5f:21:21:86:03:99:b8:42:
9d:a7:fd:d6:ff:1f:44:47:bd:bf:7d:40:3d:a3:c8:e2:32:d7:
0b:13:0f:5a:1c:49:e0:d2:7f:0f:96:d6:3a:14:ca:11:05:b6:
63:24:a5:49:cd:52:6b:2a:61:9e:84:20:08:f1:fa:ad:21:66:
09:17:4b:b8:ee:07:eb:16:74:7e:22:d7:54:f2:6e:60:8f:a2:
32:45:ee:07:d5:4f:8a:33:7d:c8:7b:d3:ed:0a:18:5d:8e:2d:
62:27:6d:7f:89:32:77:9f:e1:33:73:26:71:0d:9d:92:91:f6:
d2:dd:0f:9e:f7:68:56:18:95:40:32:be:e2:b9:9d:86:d2:85:
b6:d4:63:bb:8a:16:e8:1b:de:78:38:5e:92:3b:07:48:d6:0b:
6d:3a:b8:3b:9b:36:56:4d:50:17:9f:21:7b:f6:a0:55:eb:c7:
61:4e:66:8b:fc:03:27:c0:d9:a0:ff:d0:62:7c:76:d8:79:2d:
61:e3:9e:66:6b:ab:2c:4e:e2:53:8f:25:bc:83:a9:72:3a:33:
0b:a3:27:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:41 2023 by rpki-client on console-fra.rpki-client.org