Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/Hfi-pVepyKb3P1sgTR-cJCgEA6o.roa
File: Hfi-pVepyKb3P1sgTR-cJCgEA6o.roa (raw, json)
Hash identifier: C3XasIG66rhKbyXKdvj6ZjdkAOwfL8jeTFqqErmpvOQ=
Subject key identifier: 1D:F8:BE:A5:57:A9:C8:A6:F7:3F:5B:20:4D:1F:9C:24:28:04:03:AA
Certificate issuer: /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial: 0165B4
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/Hfi-pVepyKb3P1sgTR-cJCgEA6o.roa
Signing time: Tue 26 Apr 2022 15:19:08 +0000
ROA not before: Tue 26 Apr 2022 15:19:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51877
IP address blocks: 91.220.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91572 (0x165b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
Validity
Not Before: Apr 26 15:19:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1df8bea557a9c8a6f73f5b204d1f9c24280403aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:3a:55:4b:c3:0b:83:66:f1:69:67:92:64:
7c:d4:57:e0:02:b5:48:33:40:5a:71:36:86:63:6d:
da:60:ce:ad:ba:2b:89:99:28:73:1f:df:1b:ff:23:
51:9d:93:63:06:0c:67:74:81:d1:d6:cd:1d:08:07:
6f:99:a4:65:50:4e:f2:9a:3a:dc:4a:62:6b:79:0b:
12:07:1e:58:ac:d2:15:cb:ba:39:a7:86:cf:d9:88:
c9:65:69:4f:a4:6e:4c:d6:72:c2:5c:41:c5:7c:63:
2d:c5:20:6e:20:1d:44:98:3e:0d:91:d1:f4:7c:e7:
86:1a:54:8f:07:9e:f1:05:af:4c:38:bd:33:44:e5:
35:76:ba:24:f5:d4:59:8c:27:83:f1:54:84:59:ab:
fa:6f:1b:7c:46:ed:59:e8:89:d2:06:7c:cb:56:9a:
40:ff:e6:12:c8:91:16:32:86:38:49:36:c2:51:a9:
71:cc:27:09:32:d8:45:f1:b3:37:53:de:9b:7e:1e:
ac:74:90:93:1e:09:65:12:4c:07:2a:2f:77:be:6b:
24:19:78:31:81:41:4a:40:b3:6c:4c:c4:33:e8:74:
7f:8f:34:ab:98:6b:85:7c:e8:07:37:1a:2f:84:b1:
3f:3b:b8:75:2a:ab:6a:4e:b0:1a:3e:ae:89:30:fa:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:BE:A5:57:A9:C8:A6:F7:3F:5B:20:4D:1F:9C:24:28:04:03:AA
X509v3 Authority Key Identifier:
keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/Hfi-pVepyKb3P1sgTR-cJCgEA6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.162.0/24
Signature Algorithm: sha256WithRSAEncryption
38:21:57:1e:b3:8f:1f:ac:7c:7c:c0:a1:9b:12:20:90:2c:9d:
1c:0a:fb:b4:29:e0:49:e5:a7:03:de:4f:b0:a3:6a:e8:7f:6a:
ab:47:44:32:76:40:6c:2c:a6:2d:35:cb:3d:e1:0f:14:76:ba:
1c:7c:ef:25:2a:e8:bf:52:f0:34:bc:af:78:b3:3e:15:de:22:
f7:45:eb:d9:0f:a5:6b:29:de:b2:4f:c7:2a:d4:77:d4:20:49:
89:13:43:73:00:e9:b2:b8:8b:45:ac:2e:db:e7:9f:23:5a:d3:
19:58:d3:d2:a9:06:f4:75:cf:c7:75:b7:82:32:31:b6:b3:41:
a4:a7:e8:b8:8e:76:6a:e9:ca:52:09:65:2b:1e:ae:f7:41:e5:
22:43:d1:07:45:a6:32:e5:c1:c6:18:8c:a6:e5:82:76:d2:65:
40:97:64:f0:cf:e5:14:d4:4c:a1:f1:cc:06:22:90:cd:1a:a2:
82:3e:a5:6e:ad:c8:98:d5:eb:43:e5:8a:97:53:6f:df:98:fc:
59:0f:0f:c3:cc:fe:3f:2d:c9:29:99:a9:c4:9e:d0:79:85:f9:
22:c4:85:c9:c1:15:c1:82:a1:5f:d5:3f:a8:a5:08:3a:6e:0c:
83:dd:a8:17:1a:fe:e1:17:29:4e:b8:e4:b4:4f:2b:bf:7b:d5:
c0:87:a7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:49 2024 by rpki-client on console-fra.rpki-client.org