Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HVvLIqjIyowc9b7xJ4R5Lc-sAK8.roa
File: HVvLIqjIyowc9b7xJ4R5Lc-sAK8.roa (raw, json)
Hash identifier: c7C06soXRF122C92cNcCTZTnIuBvL7OGkdyFlkUbCNw=
Subject key identifier: 1D:5B:CB:22:A8:C8:CA:8C:1C:F5:BE:F1:27:84:79:2D:CF:AC:00:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 426C6E46
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HVvLIqjIyowc9b7xJ4R5Lc-sAK8.roa
Signing time: Sat 01 Jan 2022 14:03:12 +0000
ROA not before: Sat 01 Jan 2022 14:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43065
IP address blocks: 192.71.21.0/24 maxlen: 24
193.183.196.0/22 maxlen: 22
194.14.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114402374 (0x426c6e46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d5bcb22a8c8ca8c1cf5bef12784792dcfac00af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:44:20:be:ff:82:bf:9d:69:08:90:b5:34:
42:bf:9c:47:f4:6c:e7:98:a7:71:8a:9e:25:8c:45:
ec:47:63:50:ee:5b:2c:01:d5:6f:c4:93:80:f2:fb:
9c:6d:7f:61:81:ad:6f:30:ec:1b:e0:cd:6d:0a:81:
a0:a5:34:55:39:47:72:33:2b:d6:f1:01:cc:f8:20:
c2:3f:c3:4d:73:27:e6:70:98:25:ce:5f:08:6a:5d:
9e:ba:2d:60:c9:4e:f3:b9:1f:de:f8:c5:eb:69:cc:
a8:72:54:e2:f6:ef:e6:5c:f5:f6:61:6b:4d:d3:db:
c0:15:e4:ae:52:75:4e:f2:7c:55:c5:24:8c:8f:27:
6b:97:89:f9:c2:42:78:38:e8:2b:36:b3:2c:a2:4a:
00:be:bf:f6:c8:22:72:e8:85:2c:d8:b0:a3:3d:ee:
b3:7c:7c:f9:1d:a7:dd:8f:27:79:7f:f3:dd:55:a8:
fa:89:08:d9:88:9d:cd:b8:3c:c9:a8:f9:a7:6f:a9:
e8:03:d1:09:7c:41:fd:dd:58:82:f3:16:7d:9d:b9:
d3:8e:a8:5e:e9:e7:12:2f:83:f3:93:1c:56:38:de:
4a:8b:07:21:fb:02:e6:42:a2:3e:b4:9d:68:90:be:
d3:ed:e6:bf:72:5d:89:f1:02:ff:b3:89:85:bd:85:
1a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:CB:22:A8:C8:CA:8C:1C:F5:BE:F1:27:84:79:2D:CF:AC:00:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/HVvLIqjIyowc9b7xJ4R5Lc-sAK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.21.0/24
193.183.196.0/22
194.14.132.0/24
Signature Algorithm: sha256WithRSAEncryption
81:d0:fd:e6:5f:a0:ed:89:f0:e8:f0:b2:7f:09:c3:35:a0:0d:
68:93:15:ee:4e:95:3f:c4:d9:b0:cc:c4:77:d1:e4:3a:ca:dd:
84:c8:0c:0f:66:31:1c:a8:31:b7:c0:d6:7f:da:b3:36:08:0d:
12:7e:f3:bc:d8:65:1c:98:be:5a:4b:cb:b3:04:f8:76:3a:0e:
a3:c3:17:42:3b:27:e6:c8:b3:9e:31:8c:46:ce:2a:df:9e:da:
f1:3b:37:c7:ca:e5:a8:f6:3a:b3:23:e9:0b:58:da:81:ed:a3:
73:87:1f:58:ca:6a:10:ac:14:13:3e:f2:a0:ac:a5:ff:84:02:
34:39:0f:ec:cb:dc:98:2c:d9:a3:98:47:15:46:a3:84:ec:b5:
78:f8:56:50:04:64:01:dc:bd:2e:81:2f:df:b0:92:84:3b:26:
e2:13:5e:cb:6b:d0:42:cb:a7:48:f8:59:f0:78:53:4e:db:c7:
b7:08:a8:cd:91:fa:59:b9:d8:de:e1:10:79:bf:fd:0c:42:72:
e7:b0:84:64:4a:d6:00:38:62:0a:42:8e:7d:6a:65:64:8a:d4:
d6:d5:50:01:b7:d4:4f:5e:95:92:13:1f:dd:d8:94:ad:de:48:
39:78:21:b5:72:47:19:6b:00:1c:fd:6d:85:62:cb:2d:72:da:
5a:46:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:47 2023 by rpki-client on console-fra.rpki-client.org