Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/Hc0nW7Qaa0W7t51v4-NcdAmtBmw.roa
File: Hc0nW7Qaa0W7t51v4-NcdAmtBmw.roa (raw, json)
Hash identifier: q5HMRRu/nke1zqPq3GqUbjKXQ1pAdH4+t7yW/JK5/t8=
Subject key identifier: 1D:CD:27:5B:B4:1A:6B:45:BB:B7:9D:6F:E3:E3:5C:74:09:AD:06:6C
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 1A92FFDC
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/Hc0nW7Qaa0W7t51v4-NcdAmtBmw.roa
Signing time: Sat 01 Jan 2022 12:56:00 +0000
ROA not before: Sat 01 Jan 2022 12:56:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29551
IP address blocks: 195.200.80.0/23 maxlen: 24
185.37.16.0/22 maxlen: 22
2a00:f520::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445841372 (0x1a92ffdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Jan 1 12:56:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dcd275bb41a6b45bbb79d6fe3e35c7409ad066c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:71:c5:98:7e:96:ed:15:b0:30:fe:e9:a9:
8e:9b:bc:53:6d:a1:b1:ef:5f:54:42:a0:ff:f6:aa:
bd:60:98:c5:88:7c:c2:fb:bb:19:a7:29:ee:fb:e8:
92:c8:d0:7d:e6:bf:f4:10:90:61:57:1d:8d:a3:9c:
88:e6:b8:fc:38:a9:83:79:3a:4c:6a:bf:98:21:e8:
e1:d0:3a:a8:7b:5d:95:f6:76:af:3e:90:03:38:e9:
c1:fb:8f:bb:fb:fd:02:2e:89:7f:11:a0:bc:a0:45:
05:b6:7f:b9:27:e6:ee:03:7a:b2:b7:b1:24:e3:55:
04:09:dc:67:45:d0:bc:b3:b9:5f:14:4a:1b:1d:0a:
fd:5a:96:fe:e3:18:ae:da:b7:7d:03:06:29:40:b7:
d6:e1:e4:c6:c6:1c:46:af:8c:8e:be:1b:75:7b:01:
10:c9:b9:80:51:45:39:02:de:13:c4:69:20:02:44:
b7:6b:66:78:f0:ab:78:13:b0:0e:5c:23:2d:54:9e:
ab:8b:cc:be:b8:e7:40:e8:c8:48:a0:a1:5c:18:9c:
18:e4:da:73:00:68:bd:1e:2e:59:e3:29:52:50:40:
77:31:55:85:65:ba:6c:c6:34:90:83:59:25:ab:ce:
c0:ec:7f:11:18:ea:e5:89:fb:de:70:5d:6c:e7:78:
3d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CD:27:5B:B4:1A:6B:45:BB:B7:9D:6F:E3:E3:5C:74:09:AD:06:6C
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/Hc0nW7Qaa0W7t51v4-NcdAmtBmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.16.0/22
195.200.80.0/23
IPv6:
2a00:f520::/32
Signature Algorithm: sha256WithRSAEncryption
38:58:bc:34:69:73:4b:24:9a:f8:24:66:fa:6a:af:4c:65:ab:
5e:ed:03:f1:b4:8f:57:b8:e1:18:c4:f6:e6:d5:db:3d:21:de:
4c:cf:63:c4:7a:24:95:11:db:dc:5a:39:bf:1e:49:8b:fd:a9:
ad:2c:3f:13:85:0f:7a:c1:cf:9e:45:46:77:c2:4f:8d:21:3a:
c9:a6:2d:cb:26:91:f1:d5:51:f8:a2:30:d5:06:bb:c7:b9:1f:
91:a7:6c:3d:19:8b:37:7d:fa:17:5d:e4:f4:b6:00:38:aa:1a:
4f:3e:4c:c3:b8:fd:fb:81:61:0e:9f:11:47:1e:a1:86:f1:cb:
88:40:c1:32:59:a8:b5:03:51:39:86:74:a0:02:0c:74:47:50:
a1:ae:0b:45:3a:21:3a:ee:bd:f2:d5:3e:5a:7d:35:f3:12:22:
a5:9f:d0:21:79:fd:1e:43:d2:28:58:39:cd:d6:05:16:2a:75:
2b:33:6e:96:43:9d:8d:17:7c:5b:31:20:81:26:0d:c7:34:c9:
d7:c9:ef:b0:e8:81:86:16:f8:08:29:1c:b8:3e:1b:e8:cd:b8:
89:ab:76:09:30:72:98:f3:fe:f4:05:3e:1b:77:82:6a:9c:64:
85:95:fc:71:21:84:13:60:3a:7d:e5:95:3f:9c:d5:15:72:ee:
d8:52:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:53 2024 by rpki-client on console-ams.rpki-client.org