Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/Hhia9JHO0K2Tt3mxGO855giqE7I.roa
File: Hhia9JHO0K2Tt3mxGO855giqE7I.roa (raw, json)
Hash identifier: rVJenXNVMP9PiW5OkS8Ik4r4pPg0dfXhWW/YKeP70b8=
Subject key identifier: 1E:18:9A:F4:91:CE:D0:AD:93:B7:79:B1:18:EF:39:E6:08:AA:13:B2
Certificate issuer: /CN=a463eb824231750be9a9f1d870400ce9e098bf93
Certificate serial: 0134E85A
Authority key identifier: A4:63:EB:82:42:31:75:0B:E9:A9:F1:D8:70:40:0C:E9:E0:98:BF:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pGPrgkIxdQvpqfHYcEAM6eCYv5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/Hhia9JHO0K2Tt3mxGO855giqE7I.roa
Signing time: Sat 01 Jan 2022 05:06:21 +0000
ROA not before: Sat 01 Jan 2022 05:06:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.201.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20244570 (0x134e85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a463eb824231750be9a9f1d870400ce9e098bf93
Validity
Not Before: Jan 1 05:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e189af491ced0ad93b779b118ef39e608aa13b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:1b:03:45:87:09:f5:c0:40:26:ba:92:fa:
ce:c1:5d:d0:28:27:62:02:2c:b5:ba:7f:67:c9:e1:
93:15:f3:1d:cc:9e:11:06:ee:b8:b6:20:c4:af:a0:
18:7b:6c:08:28:ad:f4:c0:38:ba:0c:16:2f:32:2d:
94:41:16:4b:78:fb:db:2d:d7:d8:b7:d1:50:8c:b8:
eb:d1:7c:65:1d:aa:a3:c2:ce:b7:6c:ff:08:32:49:
9c:be:cb:ad:a9:73:ba:a3:68:b5:09:8c:7f:e4:94:
80:92:dc:a8:49:1e:82:82:b2:d9:52:06:d3:a4:01:
33:fb:a3:8e:d1:37:94:65:53:ec:cf:28:c6:ec:69:
2d:be:a3:fc:b0:48:f7:ff:b3:fe:56:e4:51:44:f3:
54:2b:8b:98:60:66:6d:25:b1:1e:cd:61:13:18:4d:
a7:7b:ee:3a:8b:4c:28:cd:4d:5d:33:55:b8:27:05:
b7:f1:b0:7b:b8:bd:ee:ce:a1:5f:42:ab:ab:19:53:
0e:72:8f:6a:49:4d:47:b6:8f:85:30:27:3c:6f:06:
7f:47:5e:12:7c:33:d8:dc:b3:be:a3:64:8d:d9:fc:
58:13:04:9b:34:9a:d5:65:7f:42:b6:a9:8d:a2:f0:
f5:d7:57:56:89:ff:70:4e:e7:f3:8c:3c:3b:17:ca:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:9A:F4:91:CE:D0:AD:93:B7:79:B1:18:EF:39:E6:08:AA:13:B2
X509v3 Authority Key Identifier:
keyid:A4:63:EB:82:42:31:75:0B:E9:A9:F1:D8:70:40:0C:E9:E0:98:BF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pGPrgkIxdQvpqfHYcEAM6eCYv5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/Hhia9JHO0K2Tt3mxGO855giqE7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e2346f-4831-45eb-a1fd-a89fbc41a86c/1/pGPrgkIxdQvpqfHYcEAM6eCYv5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:aa:a0:b2:98:42:89:b3:1e:34:3a:97:fd:b7:d8:8a:dc:4f:
14:50:6a:67:0c:af:f9:0f:fd:cd:7e:0a:d0:3d:37:47:e1:db:
1f:60:94:08:2d:6f:36:dc:e1:86:3b:c6:e0:8d:eb:67:ce:0d:
99:ed:01:55:01:11:a1:be:c0:30:c7:b6:1f:7e:52:96:2c:fb:
7a:1e:a0:e6:4e:1c:0b:fb:16:b1:8c:87:b1:d9:bb:90:d3:30:
ef:9a:9a:11:bd:a1:90:ad:f3:0c:76:34:c4:9d:f3:94:ff:8c:
8b:ca:f2:90:61:75:07:c2:56:a9:dc:dc:00:3a:72:26:f2:04:
c7:af:b5:51:82:aa:07:2c:6e:5f:6a:bc:6b:15:8b:f1:4c:57:
0c:5e:0e:90:5d:7f:ef:88:94:3e:ed:0b:b7:a2:7e:44:88:15:
fb:1b:ed:71:fa:a3:57:64:00:88:fa:9b:e5:37:94:5b:0a:34:
4f:a0:f9:6b:2d:fd:80:63:3e:99:fa:8a:5e:aa:38:ec:5c:0b:
46:51:3b:a1:a1:3e:46:b8:33:aa:b7:3d:04:72:a7:db:85:b0:
d1:08:12:da:50:fa:9f:6b:e8:e1:e1:c7:e4:aa:d1:76:29:6b:
95:bf:ee:a5:66:2f:df:6b:65:6b:ad:b9:2e:e5:ff:ba:8a:af:
f7:fe:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-fra.rpki-client.org