Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/HZFJ3BiHbWewrjDj4pRXWjMUBVw.roa
File: HZFJ3BiHbWewrjDj4pRXWjMUBVw.roa (raw, json)
Hash identifier: +osTkByzdNvRMlAQJOUo6Vbf/EqlLZMXXRpmHcGKl8E=
Subject key identifier: 1D:91:49:DC:18:87:6D:67:B0:AE:30:E3:E2:94:57:5A:33:14:05:5C
Certificate issuer: /CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Certificate serial: 01820136449B7676F83BCB81160A3A010E20
Authority key identifier: 95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/HZFJ3BiHbWewrjDj4pRXWjMUBVw.roa
Signing time: Fri 15 Jul 2022 09:35:09 +0000
ROA not before: Fri 15 Jul 2022 09:35:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60215
IP address blocks: 91.212.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:36:44:9b:76:76:f8:3b:cb:81:16:0a:3a:01:0e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950f284cf5c39f26ddd2352e7f2adf7a8dc60f8e
Validity
Not Before: Jul 15 09:35:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d9149dc18876d67b0ae30e3e294575a3314055c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:90:1d:10:e2:a9:ff:8b:58:7d:e7:86:31:
45:87:cd:0d:b6:38:57:c3:93:4b:09:53:88:f6:63:
f1:24:01:de:94:e0:09:2f:59:23:dc:cf:8d:60:08:
1e:3b:d7:77:8a:aa:2d:cf:9a:0f:90:22:26:9e:0d:
de:2b:37:6c:4c:f0:46:ad:fb:6c:f7:2c:f0:b6:93:
3c:61:e9:50:bb:9c:73:b6:a1:4a:13:15:aa:fd:56:
48:98:91:e7:86:f6:a2:1d:44:7b:f4:cd:80:d8:69:
8d:2a:23:5e:e4:79:a3:2f:14:6f:91:2c:4e:9c:12:
e8:a9:2c:df:cf:9d:e9:eb:d0:b3:a0:5f:9c:3d:49:
62:d0:fd:e5:6e:aa:73:f2:04:03:43:db:bf:1f:b6:
c2:d7:2a:56:41:9e:bc:94:30:82:6e:12:f1:6f:f1:
bc:91:fb:b7:1e:0b:71:4e:c3:4b:b9:97:38:77:30:
de:be:c1:f0:1f:22:8c:dd:81:8d:59:9f:c6:10:74:
a7:a0:a7:b5:87:7e:d6:e6:37:3f:bc:21:36:73:48:
9d:e5:25:b7:16:84:4d:1b:c1:b1:4d:f0:4d:ad:04:
b9:08:9e:4f:c1:36:c8:47:66:9f:5f:e7:6f:75:6f:
7c:c6:41:45:45:a7:0d:35:0c:1d:77:8e:84:3d:35:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:49:DC:18:87:6D:67:B0:AE:30:E3:E2:94:57:5A:33:14:05:5C
X509v3 Authority Key Identifier:
keyid:95:0F:28:4C:F5:C3:9F:26:DD:D2:35:2E:7F:2A:DF:7A:8D:C6:0F:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQ8oTPXDnybd0jUufyrfeo3GD44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/HZFJ3BiHbWewrjDj4pRXWjMUBVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1974ee-408f-4120-8f19-fa2f0d54b1d1/1/lQ8oTPXDnybd0jUufyrfeo3GD44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.24.0/24
Signature Algorithm: sha256WithRSAEncryption
58:92:86:bc:8e:47:f2:83:d1:7d:4f:00:af:fa:6f:cd:23:2b:
04:3a:dc:9f:b8:52:c7:be:6b:b6:60:22:0b:0e:30:0d:2c:5f:
d3:a2:d4:30:30:d1:dc:07:93:58:1b:8f:7a:98:8f:e7:52:0a:
2b:9d:b6:51:2a:2e:73:b3:7d:0a:c4:fd:9a:a7:03:24:1c:8b:
a6:b3:fd:4c:d0:6d:77:2c:bf:5a:b3:73:3f:33:62:6a:53:6a:
b8:be:ba:87:25:d3:fa:bc:27:a6:de:1e:7b:7c:2e:67:06:82:
62:dc:39:c1:9e:a8:a7:fa:39:c9:f4:80:40:83:01:70:86:6a:
bc:74:a9:da:72:ee:5e:bd:64:4f:0c:d9:56:1a:99:58:9b:a0:
4c:1f:72:7a:58:c1:17:20:fd:20:c0:46:e8:3d:46:56:c3:9e:
2e:6d:a1:8f:54:19:a1:c5:ed:eb:6a:bf:15:65:05:da:46:22:
8a:da:17:26:30:a4:e9:05:64:7a:31:12:10:c8:e3:a6:9e:23:
0c:44:28:be:5e:ea:6b:12:2b:7c:4c:e6:90:3b:b3:b3:89:6a:
68:df:8b:e1:33:07:d9:cb:a3:0d:48:09:f8:e9:a9:b0:3e:36:
3a:87:5d:b3:07:91:f0:79:c7:bd:54:b6:ce:a7:ef:20:9e:0e:
94:32:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:41 2025 by rpki-client