Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/HvPnxtg-dMK-8VOjAQYO5GB6zbg.roa
File: HvPnxtg-dMK-8VOjAQYO5GB6zbg.roa (raw, json)
Hash identifier: +ETlOPnDkfXGKuWNK5LaiCJc3KiELFy0sdy6kvAbDaI=
Subject key identifier: 1E:F3:E7:C6:D8:3E:74:C2:BE:F1:53:A3:01:06:0E:E4:60:7A:CD:B8
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 06E9C24A
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/HvPnxtg-dMK-8VOjAQYO5GB6zbg.roa
Signing time: Sat 01 Jan 2022 08:53:20 +0000
ROA not before: Sat 01 Jan 2022 08:53:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12360
IP address blocks: 194.55.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115982922 (0x6e9c24a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: Jan 1 08:53:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ef3e7c6d83e74c2bef153a301060ee4607acdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:02:a3:06:b2:50:dc:98:b3:06:2a:ec:ed:
3a:2c:94:15:30:39:b5:b0:8f:e8:81:c7:e1:b9:96:
00:ac:91:0e:dd:1c:7b:66:03:ac:32:94:a3:b1:66:
85:cf:43:f1:a6:49:d5:8b:db:70:fc:5b:2b:e2:db:
ac:19:60:a0:eb:28:5e:d9:86:f6:b2:25:7e:f9:67:
28:7f:f0:8b:68:91:6a:d3:95:99:83:7a:0e:b1:db:
fb:d9:09:40:f2:02:46:2f:88:4a:44:ec:34:da:d2:
72:0b:b8:55:41:4c:b5:ff:4b:70:4d:65:6a:35:18:
7b:f8:63:b9:72:4c:39:95:86:05:61:87:49:4a:6f:
24:37:1c:85:70:61:8d:b1:1d:b2:18:cc:53:7c:f8:
48:bc:05:7d:02:74:ba:2a:ab:41:69:21:1b:e5:3e:
91:50:4e:3c:89:c5:9a:f6:61:24:63:74:49:a2:e3:
3f:a1:80:c1:94:4a:9b:fe:a4:dc:91:c8:d5:16:a2:
99:9d:84:a6:d7:56:ce:18:e7:53:6a:c8:72:2d:5e:
0e:cc:1b:3d:16:d4:e9:a8:b8:35:43:60:1b:15:c8:
13:21:cb:e8:ba:9b:8e:51:d8:90:55:81:12:7b:4e:
e7:dd:0b:0d:de:20:e2:74:07:eb:4f:0f:5b:42:eb:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F3:E7:C6:D8:3E:74:C2:BE:F1:53:A3:01:06:0E:E4:60:7A:CD:B8
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/HvPnxtg-dMK-8VOjAQYO5GB6zbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.138.0/24
Signature Algorithm: sha256WithRSAEncryption
39:12:66:eb:4a:82:90:e8:bf:51:e8:09:01:18:ea:6d:b2:2e:
bd:67:5b:c1:34:6e:e7:d4:55:40:c7:1f:2e:f5:27:c0:f5:cd:
ad:aa:eb:b1:f1:cb:46:db:4c:37:60:67:fd:c5:b1:76:07:7d:
18:37:8f:93:49:f9:34:b6:84:2f:4d:6e:7b:d8:3d:e1:a4:80:
81:c6:e6:9a:dc:a4:e7:0d:d5:51:7f:c6:5c:da:9f:8e:f5:be:
52:bc:df:d6:fa:a9:34:ee:3e:0a:1e:d4:56:8e:bb:2c:02:a7:
45:52:d5:09:4b:d1:2a:93:05:3d:2c:4e:10:dd:4d:1a:9f:4f:
b7:7d:31:e9:24:ce:bc:c4:dc:3e:22:49:16:68:84:45:dc:a0:
09:60:0f:f0:89:50:cd:17:41:26:27:3f:4d:d7:e5:3e:5f:e6:
e3:c7:11:5c:97:e9:9b:55:18:bf:5b:89:d9:39:43:c4:f7:b4:
8f:b5:ca:cf:82:ca:6a:0b:d3:26:1b:f4:08:fb:c0:c0:20:0a:
2f:8c:47:41:f9:e3:f9:00:57:02:ea:31:5b:28:c3:68:1c:e2:
29:89:b0:8d:29:a9:99:14:09:46:96:e0:09:db:5b:8e:83:84:
cd:3b:47:d7:81:d6:8d:84:9b:8e:32:2d:44:9d:6b:2c:8c:11:
29:41:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:43 2024 by rpki-client on console-fra.rpki-client.org