Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/HVv3vJao434aJw1R4Iz1HO0MvkY.roa
File: HVv3vJao434aJw1R4Iz1HO0MvkY.roa (raw, json)
Hash identifier: /fN4TJUemWzxyW+O5ObJTgLaVCEWBebFDY7gt5SF6/s=
Subject key identifier: 1D:5B:F7:BC:96:A8:E3:7E:1A:27:0D:51:E0:8C:F5:1C:ED:0C:BE:46
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 03B25BB3
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/HVv3vJao434aJw1R4Iz1HO0MvkY.roa
Signing time: Sat 01 Jan 2022 08:57:00 +0000
ROA not before: Sat 01 Jan 2022 08:57:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50495
IP address blocks: 91.223.99.0/24 maxlen: 24
91.223.102.0/24 maxlen: 24
91.223.126.0/24 maxlen: 24
194.39.32.0/22 maxlen: 22
91.223.163.0/24 maxlen: 24
77.83.232.0/22 maxlen: 22
2a06:ef40::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62020531 (0x3b25bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 1 08:57:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d5bf7bc96a8e37e1a270d51e08cf51ced0cbe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:ea:c8:15:12:aa:53:ac:42:54:72:0b:5f:
9d:7b:f3:ad:5f:1c:8c:fd:ff:ef:58:26:5e:b7:63:
f5:b3:c5:9c:4b:df:21:4f:a8:ad:90:a2:0d:e8:9d:
03:3a:d8:e4:52:d8:24:6f:ee:33:95:c3:0b:fb:de:
9d:a9:ba:e2:d9:ba:fa:15:90:e1:ff:ea:1d:99:a3:
fd:aa:bd:ab:4f:75:a3:0b:e9:53:09:1d:3b:71:47:
81:9b:7a:e3:d1:5c:ca:a4:27:2c:44:42:2a:b4:1b:
22:fc:da:c8:e5:9d:b0:52:73:09:78:14:aa:33:f9:
82:dc:71:84:15:18:2e:c4:b2:1a:85:ef:07:07:35:
ab:3c:f9:35:d3:4a:40:9f:43:29:a4:f2:63:5f:59:
19:ce:c1:d7:4c:02:b8:ae:61:c7:3e:b1:2a:74:dd:
ce:51:97:b9:25:1b:ba:a7:26:bb:03:4e:f8:98:e4:
c2:be:6f:13:18:42:d7:bd:f3:7c:df:ba:1b:cf:2c:
d0:4f:1c:c4:b1:e9:8e:d2:9e:51:cb:ba:58:74:8c:
93:26:b9:da:04:ce:72:d3:7a:86:d8:57:e1:7c:4d:
9c:ef:ea:4d:08:b5:d3:49:92:0f:f3:29:3a:e8:91:
8a:10:bf:af:96:9e:7f:27:29:7a:c9:37:9b:ee:b2:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:F7:BC:96:A8:E3:7E:1A:27:0D:51:E0:8C:F5:1C:ED:0C:BE:46
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/HVv3vJao434aJw1R4Iz1HO0MvkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.232.0/22
91.223.99.0/24
91.223.102.0/24
91.223.126.0/24
91.223.163.0/24
194.39.32.0/22
IPv6:
2a06:ef40::/32
Signature Algorithm: sha256WithRSAEncryption
c3:fe:82:56:9d:1d:25:24:f4:74:2e:b1:b9:78:17:2b:8c:b0:
26:28:fd:ca:ea:30:12:1e:57:50:af:4d:47:bb:f7:3b:74:ef:
d2:68:f2:65:ab:a5:6d:29:6e:fd:81:a8:ac:25:c7:ee:2c:69:
70:0a:65:ca:54:dc:08:6e:e7:86:24:45:a7:e7:8a:26:a3:96:
b2:3e:c4:8c:46:cf:c3:8e:07:0c:4b:af:80:0c:89:38:2c:39:
1f:e0:d2:d0:51:9d:db:aa:f9:10:8d:2d:d2:a4:12:c9:5d:67:
b9:c3:76:bf:4b:39:31:25:b6:48:da:09:63:44:52:83:7a:46:
0f:c5:a9:ca:a8:3f:f0:81:f8:51:61:f1:56:78:25:7d:b2:f8:
08:da:ae:12:9d:be:09:71:b5:b6:ca:5d:39:57:5e:6c:74:cf:
04:97:54:ee:d8:e8:b9:7d:0f:71:dc:b2:b4:e4:f2:b1:50:d8:
b2:06:55:61:76:18:97:49:ba:e6:4d:6f:25:b7:41:8b:a1:11:
b8:73:a3:d5:41:3e:9e:bb:0d:7c:52:92:da:ca:1f:d2:c4:36:
28:0e:8c:91:23:3d:c4:91:94:c6:09:74:2d:36:68:60:28:22:
87:d4:c6:46:7b:61:de:94:db:4d:5f:d4:bf:55:25:ec:83:b9:
31:ea:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org