Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/x-HYXzX8AHsgQdHaZ8oykCYweIA.roa
File: x-HYXzX8AHsgQdHaZ8oykCYweIA.roa (raw, json)
Hash identifier: SeQuHyjsYhuVGpVCZ6sM3f+76Ab7pzypVzQaHgx9bzs=
Subject key identifier: C7:E1:D8:5F:35:FC:00:7B:20:41:D1:DA:67:CA:32:90:26:30:78:80
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 0182AAFE21F7441586CEDAF091630C47F1AF
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/x-HYXzX8AHsgQdHaZ8oykCYweIA.roa
Signing time: Wed 17 Aug 2022 08:49:17 +0000
ROA not before: Wed 17 Aug 2022 08:49:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 192.145.52.0/22 maxlen: 22
193.219.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:aa:fe:21:f7:44:15:86:ce:da:f0:91:63:0c:47:f1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Aug 17 08:49:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7e1d85f35fc007b2041d1da67ca329026307880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:63:67:aa:d4:25:b3:73:4a:6b:7f:25:07:
31:21:da:7d:11:71:b3:67:9e:39:d3:c3:9f:6d:60:
a0:fa:e7:d3:27:6b:7d:2f:35:c0:51:cc:64:df:39:
01:3f:91:01:a5:2b:e3:88:08:98:3a:0e:38:bd:e3:
59:b7:c8:8e:ba:cb:0e:bf:0f:c6:c6:9a:4f:6a:04:
66:93:99:43:89:49:ed:17:97:06:2d:ef:4b:03:a2:
9e:ad:f1:54:c3:c4:81:19:23:1d:c9:16:10:68:93:
86:62:4d:0c:cf:8f:60:64:c2:8a:01:0a:15:30:d3:
91:f2:f8:a0:c1:06:6b:05:db:7e:03:cb:78:e2:31:
12:7c:f6:35:70:cf:47:e1:f5:89:fc:7c:19:f1:c1:
11:8c:a2:cf:49:64:4f:6a:c2:33:71:65:93:87:94:
d9:90:18:4f:34:38:75:62:90:b1:a2:5c:e0:0b:e0:
4b:cd:81:e9:0e:5f:01:ad:1b:32:57:70:c2:67:b2:
60:3d:aa:5d:45:7c:5a:71:8a:51:75:3f:dd:a6:8d:
f7:a0:53:25:93:26:06:71:64:85:f1:fb:55:47:9a:
b6:8d:5a:be:c2:55:c0:43:0f:66:2d:16:f3:34:09:
66:75:0e:b1:1c:90:3c:39:96:ff:28:3c:29:dd:bf:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E1:D8:5F:35:FC:00:7B:20:41:D1:DA:67:CA:32:90:26:30:78:80
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/x-HYXzX8AHsgQdHaZ8oykCYweIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.52.0/22
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
39:78:f7:60:9b:2e:ff:68:3b:2c:f3:20:45:c6:b4:ec:7f:90:
aa:0b:8e:35:79:b4:50:5c:c6:4f:da:67:e3:41:50:ad:b3:ad:
30:60:d0:57:3a:1b:6b:9f:89:0f:46:63:ea:4e:4a:82:15:29:
24:0a:c4:4e:d4:15:38:b9:3c:c8:0c:f9:7a:e3:05:bd:a2:89:
78:69:1a:ce:9b:88:0a:5a:96:9b:9a:b3:14:9e:25:60:a8:05:
1f:ee:a1:09:bf:90:be:95:c3:96:a9:03:1f:cb:2f:81:73:e9:
55:72:69:67:a3:d7:04:43:d2:86:8c:02:f1:69:91:43:9c:23:
2e:a8:d6:39:2c:7d:b3:13:a3:c8:9f:72:25:34:88:d5:6d:88:
28:56:cf:09:99:7b:dd:3e:f2:08:cf:ef:7e:18:bd:5f:13:3c:
e1:16:05:8d:c5:06:46:b1:d4:b1:1d:62:bc:45:55:fe:55:0c:
f6:ef:12:ea:4e:09:36:a1:81:7a:f6:a4:5d:95:81:ea:6a:b5:
7d:0c:ea:52:80:1c:8b:91:90:59:f1:22:a9:33:2f:94:6f:c9:
97:10:f9:76:68:3b:2a:5e:68:0e:5e:05:8c:14:6e:cc:d4:f8:
8a:f7:ee:cc:61:8b:67:49:1b:9a:21:0b:cb:8f:b8:d4:ea:5d:
ca:9d:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org