Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/HrvSIM_qxI3AhZXw-QkVIgdII1Y.roa
File: HrvSIM_qxI3AhZXw-QkVIgdII1Y.roa (raw, json)
Hash identifier: ynROydsAM/bQSuhpEVbjsOTTADxrulXnZbpyCkonifo=
Subject key identifier: 1E:BB:D2:20:CF:EA:C4:8D:C0:85:95:F0:F9:09:15:22:07:48:23:56
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 1998A676
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/HrvSIM_qxI3AhZXw-QkVIgdII1Y.roa
Signing time: Sat 04 Jun 2022 10:04:21 +0000
ROA not before: Sat 04 Jun 2022 10:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201583
IP address blocks: 84.40.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429434486 (0x1998a676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jun 4 10:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ebbd220cfeac48dc08595f0f909152207482356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1e:7f:12:20:8d:d6:5d:ad:29:eb:13:50:e4:
41:0b:09:7c:97:5d:a2:da:16:26:82:03:0a:33:ce:
8e:df:8d:b5:fb:51:0c:91:91:c2:ce:e8:84:83:e5:
81:12:48:dd:5b:5d:e7:94:6d:21:84:91:e6:2f:6c:
f5:37:e5:73:62:4b:98:51:93:76:27:9f:fb:e1:3a:
60:ac:c4:87:db:a6:79:ca:a0:68:24:a7:5f:b5:25:
bc:05:90:eb:84:8c:c2:b1:2f:41:51:cc:18:1d:1d:
40:10:dc:45:59:f7:43:59:0e:e0:b7:2c:2d:e7:a8:
28:f9:be:f3:82:ab:26:7a:08:51:89:b3:a1:50:66:
c7:09:da:18:0c:e2:b6:ad:96:e5:4d:0a:e5:49:d0:
ed:4b:10:f4:2d:09:d0:81:f0:12:ce:77:a4:57:d3:
06:05:0c:b5:a9:31:c9:80:a5:c7:43:06:57:12:2b:
22:84:1b:38:d4:68:02:96:fa:bb:86:ee:61:5c:37:
bf:54:fe:2c:81:c5:fd:dd:5f:4e:af:6e:43:6a:76:
60:f7:2f:91:bb:73:90:cb:90:f5:01:99:2a:5e:d6:
c7:d7:5e:7a:e1:3e:40:1c:de:2f:9d:8c:51:92:e1:
56:c4:3a:d9:5c:d9:15:1b:9e:4c:d1:bd:09:b2:fd:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BB:D2:20:CF:EA:C4:8D:C0:85:95:F0:F9:09:15:22:07:48:23:56
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/HrvSIM_qxI3AhZXw-QkVIgdII1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.40.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4a:a3:27:5b:c5:6e:3a:ef:f9:ee:96:2c:a0:4a:86:af:ca:
ab:81:fb:18:d4:9f:de:0b:8e:92:c4:f2:7f:21:e6:7a:e7:e8:
88:87:ed:a8:ff:de:2a:d6:52:cd:82:a5:e2:ba:43:2a:ef:32:
10:25:6f:74:a8:d4:3e:11:ec:14:7a:ff:57:25:c0:a4:c2:94:
85:48:31:40:59:07:37:44:d0:ba:e7:21:34:ba:c6:49:bd:4b:
33:38:9e:99:34:48:67:49:00:00:e2:14:c3:07:cf:e6:7e:9c:
35:63:85:a7:58:a7:e9:ea:0d:66:59:53:e0:61:e9:57:5c:5d:
11:94:62:aa:5c:a9:bf:5a:a7:c4:21:dd:b2:77:0b:37:ca:d2:
48:21:2e:f4:e4:f0:d1:48:59:40:a2:27:d3:c5:aa:80:5a:15:
5f:08:8d:a5:64:f0:11:11:7b:61:19:90:8e:de:bc:46:81:10:
28:15:c3:57:38:fa:01:7b:af:df:6c:6f:92:2f:0b:98:8e:2c:
c0:bb:81:7a:41:6e:d2:91:3e:d9:5a:13:2c:58:c9:0e:de:86:
d3:12:60:45:d5:72:f8:0e:78:62:51:1b:ee:5d:3a:28:e9:3a:
de:fc:5b:2a:90:9f:5f:d3:a2:cf:67:36:fc:1e:c6:c1:a2:07:
66:17:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org