Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H-CuqglarUGNUHlXNb1rMN7HDfo.roa
File: H-CuqglarUGNUHlXNb1rMN7HDfo.roa (raw, json)
Hash identifier: hq4QtmAoTrQ2xCwlfnFQfqs7EuAX/g8KNjcme+1rrFI=
Subject key identifier: 1F:E0:AE:AA:09:5A:AD:41:8D:50:79:57:35:BD:6B:30:DE:C7:0D:FA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 11C6C5D8
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H-CuqglarUGNUHlXNb1rMN7HDfo.roa
Signing time: Sat 01 Jan 2022 15:05:41 +0000
ROA not before: Sat 01 Jan 2022 15:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49849
IP address blocks: 91.148.128.0/22 maxlen: 24
79.124.40.0/22 maxlen: 24
79.124.80.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298239448 (0x11c6c5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 1 15:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fe0aeaa095aad418d50795735bd6b30dec70dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:74:1b:5a:4b:6a:80:e7:02:0c:92:c3:3b:
1b:94:93:12:49:c1:1a:77:99:35:66:b0:31:d1:c3:
b5:5a:6b:d0:f7:9b:e0:4b:0b:7e:6e:b0:ba:2e:7d:
66:5e:10:15:fd:1a:1f:b1:fd:d2:3b:96:62:10:a7:
cd:6e:cc:bf:bb:43:4c:a5:34:2a:71:12:a7:a8:9a:
a4:2b:51:4d:29:2f:cb:45:ff:04:a2:89:17:5b:57:
5c:63:c5:1d:4c:40:f3:6e:56:fa:c5:72:1d:fc:7d:
ca:12:c2:bb:be:04:3b:ba:18:85:9a:96:3b:38:e6:
48:6b:c9:65:00:31:45:58:50:1a:27:30:7b:34:73:
5f:69:75:a7:6b:a6:79:17:40:90:7d:af:c1:36:3f:
5f:43:fa:ed:ac:21:39:33:62:de:5a:44:30:df:f0:
a6:4c:d5:ab:15:a6:31:db:02:28:34:12:cb:63:44:
b9:57:2a:7b:df:b2:b0:eb:5b:97:1e:49:cc:71:71:
7e:16:7c:5d:74:f8:4d:25:57:80:49:e4:ed:71:e3:
f7:97:63:1d:9c:88:7b:ae:c9:92:c6:37:70:b8:37:
d6:98:a8:5e:3f:57:3b:7e:fe:e0:96:1d:91:e9:ed:
60:f7:88:27:13:ff:91:00:55:73:23:7c:aa:71:e4:
de:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E0:AE:AA:09:5A:AD:41:8D:50:79:57:35:BD:6B:30:DE:C7:0D:FA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/H-CuqglarUGNUHlXNb1rMN7HDfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.40.0/22
79.124.80.0/22
91.148.128.0/22
Signature Algorithm: sha256WithRSAEncryption
02:42:e6:b0:89:f7:5f:68:ee:89:11:a4:0b:7b:05:a9:d5:2a:
1c:20:85:be:fa:ee:4f:f9:8e:83:e5:af:5c:3f:35:36:39:12:
c8:3a:9e:5f:20:1c:ee:31:a8:89:88:f2:8e:56:ee:bb:eb:7e:
e3:dc:97:70:54:34:c1:f0:0d:23:aa:c6:91:0f:13:66:1c:28:
dd:ad:33:05:59:f2:a5:3b:ed:4d:3f:6e:f6:8a:16:c4:08:9a:
a2:0d:06:ca:bc:09:27:f8:46:5a:e8:c8:f1:a8:cc:ae:75:37:
8f:cf:ac:61:a7:86:d1:de:b9:d7:5c:02:93:dc:76:fc:87:67:
cc:bf:64:da:7f:a3:e8:8b:36:93:36:d3:a0:c2:2e:69:f1:a2:
68:02:30:34:be:af:b5:39:b6:99:30:d2:4f:fe:80:d7:c0:b3:
81:c4:85:43:74:df:27:38:69:1d:17:69:b3:99:da:01:16:d2:
75:57:fd:12:d4:51:60:e4:0e:9e:9f:bb:89:11:89:d5:e9:bb:
dd:77:65:2d:51:47:ad:e4:2f:90:ef:d1:c1:37:08:47:f6:7d:
b7:25:49:26:e1:af:d2:05:e3:22:81:ac:73:1e:be:6f:04:15:
66:93:e6:62:06:c9:71:43:8d:48:53:e2:f6:89:e2:ce:f6:72:
11:85:0a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:12 2024 by rpki-client on console-ams.rpki-client.org