Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/hzTe9x_xEqypaUrLac0EAytmVnQ.roa
File: hzTe9x_xEqypaUrLac0EAytmVnQ.roa (raw, json)
Hash identifier: +86bMA+NNJdlk8cG0jdtLVf6klDtXKFLIp74ufNGd2Y=
Subject key identifier: 87:34:DE:F7:1F:F1:12:AC:A9:69:4A:CB:69:CD:04:03:2B:66:56:74
Certificate issuer: /CN=3e20c700d98d76a9c640173889f9367da9de8997
Certificate serial: 3653F017
Authority key identifier: 3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/hzTe9x_xEqypaUrLac0EAytmVnQ.roa
Signing time: Tue 10 May 2022 20:31:02 +0000
ROA not before: Tue 10 May 2022 20:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41095
IP address blocks: 176.56.160.0/19 maxlen: 24
91.194.116.0/23 maxlen: 24
185.65.172.0/22 maxlen: 24
193.33.70.0/23 maxlen: 24
195.189.120.0/22 maxlen: 24
87.239.184.0/21 maxlen: 24
2a03:9d40::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911470615 (0x3653f017)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e20c700d98d76a9c640173889f9367da9de8997
Validity
Not Before: May 10 20:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8734def71ff112aca9694acb69cd04032b665674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:39:b1:ff:a7:98:3a:06:c8:16:54:e1:d9:09:
73:cf:05:fb:92:6d:fc:77:e1:2f:03:10:38:dc:66:
23:a6:21:34:b3:83:b2:70:9f:e8:75:65:ff:0e:0c:
72:be:e1:b6:56:21:b1:23:0f:c7:b4:68:2c:c9:4c:
a4:9b:d5:3a:68:77:7c:5f:8d:d8:f2:e3:1b:44:9e:
33:4a:28:98:a5:9e:72:46:da:f8:47:62:82:93:18:
ad:5a:7a:18:e3:16:ab:87:a2:a3:72:93:69:24:b9:
90:23:38:7c:68:e8:59:79:2a:2c:9e:db:43:29:5e:
ff:d2:ea:da:0f:9d:c5:62:98:1a:e6:a4:74:61:e4:
03:01:dc:30:cc:f6:1e:84:5e:cb:b0:b4:1e:69:7e:
76:43:9a:9e:08:20:a3:b6:cb:56:23:1f:16:55:48:
66:df:d1:f2:55:dc:c8:17:d8:cf:81:fb:f7:4b:3f:
01:fd:4b:dd:d1:18:10:63:20:56:06:fe:07:80:04:
8c:ef:93:9b:52:5b:fc:2c:e7:58:ed:77:64:ec:35:
5b:3e:b8:5f:7d:32:f5:14:1e:4c:44:8a:da:6c:e4:
58:2c:e9:05:de:30:8c:a4:10:bd:26:62:ea:5a:54:
b7:34:d0:dd:08:57:6f:bd:56:82:c5:b9:00:54:9e:
32:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:34:DE:F7:1F:F1:12:AC:A9:69:4A:CB:69:CD:04:03:2B:66:56:74
X509v3 Authority Key Identifier:
keyid:3E:20:C7:00:D9:8D:76:A9:C6:40:17:38:89:F9:36:7D:A9:DE:89:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiDHANmNdqnGQBc4ifk2faneiZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/hzTe9x_xEqypaUrLac0EAytmVnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ac6c7b-d059-4014-a968-e46d8d16a15f/1/PiDHANmNdqnGQBc4ifk2faneiZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.239.184.0/21
91.194.116.0/23
176.56.160.0/19
185.65.172.0/22
193.33.70.0/23
195.189.120.0/22
IPv6:
2a03:9d40::/32
Signature Algorithm: sha256WithRSAEncryption
32:13:5e:68:3f:8e:16:02:00:43:13:6a:a2:5d:da:84:d9:78:
cd:b7:ef:d0:e9:6b:d2:b8:c7:3c:89:65:6f:91:24:a7:a6:11:
4a:62:dd:26:e9:78:b7:e4:6e:8b:df:29:76:f3:84:47:c2:63:
1d:22:58:a1:00:3b:ea:03:6a:f7:63:6d:bc:b4:80:05:54:f7:
14:f9:a1:a6:59:6a:c8:f9:5f:bb:be:ea:c4:b0:8c:46:bf:f0:
29:68:b6:7e:6c:95:ce:c4:a1:a0:ba:44:1f:9f:1e:c7:77:1a:
fe:52:75:e2:45:b8:a3:cc:5d:f7:4d:de:77:95:99:79:c8:4d:
53:d8:51:22:cf:62:30:61:1f:02:c7:43:42:a2:66:0e:54:9f:
63:78:58:ef:de:67:65:1f:37:23:8b:ad:67:b5:82:fb:d1:cc:
0f:ec:db:eb:1e:ce:f8:e2:02:90:24:46:7a:52:35:61:e1:b8:
f0:07:9d:e7:2d:ff:f2:a2:96:9c:b9:3b:97:f5:15:28:2e:8a:
70:b4:fb:d1:29:62:8b:ba:67:bd:a3:a1:59:93:b3:c1:84:0e:
09:71:07:d6:92:02:9a:dd:11:d2:0e:1a:8d:97:7a:4b:73:18:
73:30:cc:05:99:4d:22:9e:10:4c:52:79:6c:dc:64:57:f7:0f:
69:ce:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:32 2024 by rpki-client on console-ams.rpki-client.org