Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/HzjG9WqzEnUhgyVRBd6RFCil5Es.roa
File: HzjG9WqzEnUhgyVRBd6RFCil5Es.roa (raw, json)
Hash identifier: 8TuLStEPhBYSfK4TQSHuuAOl5NBhL/kmbu+vt/ZhOkQ=
Subject key identifier: 1F:38:C6:F5:6A:B3:12:75:21:83:25:51:05:DE:91:14:28:A5:E4:4B
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 39FFD33D
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/HzjG9WqzEnUhgyVRBd6RFCil5Es.roa
Signing time: Sat 01 Jan 2022 14:00:36 +0000
ROA not before: Sat 01 Jan 2022 14:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62308
IP address blocks: 89.174.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 973067069 (0x39ffd33d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f38c6f56ab312752183255105de911428a5e44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:65:06:8b:5f:ef:34:5a:eb:5f:8f:a9:a4:
dd:36:47:a3:b1:12:67:43:8d:92:c9:c1:f2:28:16:
4f:74:6d:71:e4:9e:3e:ff:e2:47:fa:7d:1f:7a:32:
e8:d1:b6:d8:fe:2b:60:30:a6:40:55:7d:e8:0d:a6:
11:ab:10:54:3d:0a:f1:84:3a:97:74:90:cd:23:ef:
39:f4:2b:75:b9:78:fa:7e:54:68:c5:71:7c:18:db:
a4:ac:2b:c5:72:6f:d4:b4:15:c8:35:ed:3a:ab:86:
2d:64:2a:65:fe:fa:dd:e0:31:29:7f:8c:ab:f2:3b:
0a:3d:17:90:67:88:2d:c0:de:a7:50:fc:a7:6b:dd:
2d:2b:86:52:f7:39:eb:91:90:98:4e:e3:64:18:03:
6a:85:85:39:d4:47:4c:7b:d9:43:6e:86:12:74:a9:
47:ad:39:d3:a8:53:0b:54:28:ff:21:ff:fe:a0:0e:
13:a8:28:4f:3d:fc:ab:98:6b:47:6c:43:39:37:89:
1e:b3:df:a9:50:c7:b4:b2:c5:d8:bf:96:39:59:6e:
96:b8:34:0d:99:11:5d:41:a8:c4:a9:2c:fd:81:69:
be:be:7f:33:23:a6:27:1e:f2:dc:7a:ea:60:86:b5:
a4:88:fe:02:fd:12:07:64:e6:24:a3:49:bf:5b:5a:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:C6:F5:6A:B3:12:75:21:83:25:51:05:DE:91:14:28:A5:E4:4B
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/HzjG9WqzEnUhgyVRBd6RFCil5Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.20.0/24
Signature Algorithm: sha256WithRSAEncryption
26:7c:20:7a:4c:51:d8:52:68:8c:a0:46:ad:c7:61:9a:24:8f:
e1:d5:cd:cb:6e:e8:b6:ad:77:f0:9e:5e:e7:ad:b2:e6:f0:01:
2a:6b:dd:8a:94:ad:8d:a1:2e:78:8f:0b:08:9a:d8:01:6f:ae:
31:60:13:3a:c3:7b:7c:08:34:c2:4f:e1:16:4b:60:24:a6:de:
60:70:39:9c:3c:1b:8c:e0:e4:33:a3:95:91:77:39:78:2a:cc:
2f:14:44:6b:ca:a8:24:e3:33:a6:9c:15:63:65:1c:67:44:5d:
f1:c9:0a:ab:42:5f:82:45:d4:8a:0d:7e:35:0c:0d:f6:ed:e6:
34:74:42:e5:24:4d:96:b1:d7:0a:00:a5:2a:32:41:d9:fd:f8:
09:e3:05:da:8d:5d:f1:0b:4d:ca:29:68:a1:4f:d6:bc:b8:14:
92:2e:6e:7b:57:57:3f:56:57:e5:a3:fb:ff:ee:f8:3a:43:a4:
27:1f:57:09:fc:d4:94:01:4a:e8:0f:1a:e0:ec:73:49:c3:05:
93:f1:2c:40:9d:43:55:de:b5:60:21:9a:fa:95:c0:58:c5:de:
4c:60:be:4d:61:7b:47:f4:c6:5a:3b:18:75:04:4b:5a:a5:a1:
8e:18:e7:97:f8:bd:4f:5e:d3:5c:8c:2a:64:39:bc:0c:d6:09:
c6:c3:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-fra.rpki-client.org