Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/HjYpLe504bWxJMqFjodt3GQiNwY.roa
File: HjYpLe504bWxJMqFjodt3GQiNwY.roa (raw, json)
Hash identifier: 4DqHRJf6HrwiRcprB9XeZKDIMLbJCYSqyv8sxvhiFBI=
Subject key identifier: 1E:36:29:2D:EE:74:E1:B5:B1:24:CA:85:8E:87:6D:DC:64:22:37:06
Certificate issuer: /CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Certificate serial: 1F0DBAC3
Authority key identifier: 0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/HjYpLe504bWxJMqFjodt3GQiNwY.roa
Signing time: Sat 01 Jan 2022 01:00:36 +0000
ROA not before: Sat 01 Jan 2022 01:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 196670
IP address blocks: 91.213.26.0/24 maxlen: 24
194.36.92.0/24 maxlen: 24
195.200.255.0/24 maxlen: 24
195.200.254.0/23 maxlen: 23
195.200.254.0/24 maxlen: 24
2a04:9140:3041::/48 maxlen: 48
2a04:9140:3001::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 520993475 (0x1f0dbac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0beb38e34bbe17e15772706c7a961a85e5d18b5c
Validity
Not Before: Jan 1 01:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e36292dee74e1b5b124ca858e876ddc64223706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:58:31:8a:71:35:f0:1f:6c:cd:4a:f7:e9:
eb:55:50:fc:53:a7:18:4b:d1:ec:7a:13:af:22:41:
58:6a:60:2c:0e:eb:a1:56:55:94:a2:65:49:af:a5:
7c:7e:76:10:03:b1:6f:dc:54:d6:5e:fb:69:5c:3b:
48:17:41:65:5a:76:3e:20:43:f6:9b:15:02:33:fe:
4e:d2:44:7f:fc:eb:ca:5e:e1:bf:b3:11:c4:d1:fd:
4c:97:aa:d3:ee:86:f0:8a:20:64:9f:f1:57:a1:69:
6b:42:92:39:64:ad:91:d6:33:39:26:00:8c:d0:10:
e5:56:73:7f:54:49:0a:a1:5b:03:fe:c8:5b:d5:84:
70:62:a5:e1:90:c0:7d:07:6b:71:8b:6b:0d:d7:68:
11:a1:a2:86:13:5e:c0:a2:d2:b3:e4:11:b2:5e:a6:
0d:dc:d8:9a:dc:2a:93:91:87:64:2d:9e:0c:6e:f2:
09:2a:87:96:d5:4d:a2:bc:74:97:fc:de:f1:51:e2:
31:ff:b4:86:07:df:30:1f:82:d3:2e:29:23:5f:15:
9a:5f:34:62:f2:a5:c6:93:d6:d1:6c:5a:43:4e:39:
68:79:c6:2c:5f:da:93:54:46:de:61:ea:22:11:ae:
37:3e:0c:61:48:e1:4b:09:a9:0f:9c:4a:cf:88:58:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:36:29:2D:EE:74:E1:B5:B1:24:CA:85:8E:87:6D:DC:64:22:37:06
X509v3 Authority Key Identifier:
keyid:0B:EB:38:E3:4B:BE:17:E1:57:72:70:6C:7A:96:1A:85:E5:D1:8B:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-s440u-F-FXcnBsepYaheXRi1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/HjYpLe504bWxJMqFjodt3GQiNwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/373146-2c9d-45cc-85cc-9b7997481f72/1/C-s440u-F-FXcnBsepYaheXRi1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.26.0/24
194.36.92.0/24
195.200.254.0/23
IPv6:
2a04:9140:3001::/48
2a04:9140:3041::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d1:0c:6c:52:25:00:c8:0c:5c:2d:92:18:59:ed:ae:96:5e:
df:41:ae:d8:4f:40:87:2f:c7:0e:33:f0:9d:33:5d:8e:a3:d2:
5e:29:6f:4a:da:a9:f6:91:9a:cd:4d:a9:87:b3:23:e0:15:9b:
09:d6:46:51:d1:1c:cc:3f:8e:e1:9b:35:40:c1:bd:af:8f:c9:
e9:42:7b:2b:64:17:59:85:a4:f2:21:43:2c:bf:3c:00:d6:5a:
c6:55:0d:3c:19:1d:ef:f8:73:ef:f3:63:ee:36:ab:16:f8:6d:
69:c6:1a:de:30:fe:80:e9:ad:cf:26:fc:42:53:3e:63:39:40:
ce:bb:9b:1c:df:7e:89:08:5a:db:1d:ba:13:7d:7a:76:b7:b9:
22:69:48:0a:58:ac:01:0f:80:ca:29:0c:45:ae:f0:e2:95:76:
c7:18:52:a8:c7:38:f5:6a:e1:7d:09:73:5a:df:fb:ab:82:5e:
4e:38:9a:b8:32:a3:58:b0:c0:79:84:5b:a3:9a:a9:32:e6:9a:
3f:c2:fe:42:e5:07:83:82:3c:de:cc:11:f3:80:6d:44:52:55:
5c:87:16:6d:c4:4d:98:bd:fc:3d:3a:a0:ed:c3:a4:79:ee:da:
6e:05:26:53:eb:94:e1:63:45:9a:25:3a:3a:92:c6:31:3b:fc:
42:a1:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:29 2023 by rpki-client on console-ams.rpki-client.org