Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/HSxA-WgG2g8AH-KAXTKQPJUUNyo.roa
File: HSxA-WgG2g8AH-KAXTKQPJUUNyo.roa (raw, json)
Hash identifier: XhcezHmh9MdLGwOii8B95HPSiKs7/JJWtGdz8YCXrbQ=
Subject key identifier: 1D:2C:40:F9:68:06:DA:0F:00:1F:E2:80:5D:32:90:3C:95:14:37:2A
Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Certificate serial: 116DA6EE
Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/HSxA-WgG2g8AH-KAXTKQPJUUNyo.roa
Signing time: Sat 01 Jan 2022 05:00:11 +0000
ROA not before: Sat 01 Jan 2022 05:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50357
IP address blocks: 193.106.124.0/22 maxlen: 22
193.106.124.0/23 maxlen: 23
193.106.126.0/24 maxlen: 24
193.106.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292398830 (0x116da6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126
Validity
Not Before: Jan 1 05:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d2c40f96806da0f001fe2805d32903c9514372a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:03:4a:84:7a:14:12:05:f3:7b:25:bd:2f:
7f:3b:e8:a3:07:09:5d:13:56:2a:92:24:c1:12:d7:
24:60:7a:20:a1:77:d5:ac:57:1a:71:02:f7:c2:15:
3b:12:c8:30:ae:90:10:26:e3:d5:d4:fb:b4:04:43:
f8:ce:7c:b3:8d:40:70:d4:34:b6:bc:2e:9b:47:8f:
56:03:ae:d1:fb:6a:24:8c:47:2e:34:28:c3:44:18:
e9:77:32:09:a4:35:ec:f4:7a:95:18:ba:4a:9c:10:
de:74:ba:a0:23:96:c7:d0:ca:66:25:f8:4e:a1:03:
cb:79:a4:b8:92:10:66:34:22:0d:0e:25:8d:1d:ea:
bb:f8:33:f4:88:68:b7:57:0e:3c:4b:c2:c6:1f:ed:
8a:8d:fa:4b:47:95:3b:86:80:14:b3:ac:f9:1c:5e:
d7:1a:33:2b:ea:11:d7:33:fe:d5:ce:0b:be:66:d3:
b2:f5:d7:87:ea:52:3b:be:cf:d8:07:4e:67:2a:9b:
62:a8:77:ef:e9:ed:bd:f1:7a:34:c1:52:e4:1b:76:
6b:4a:0d:4b:22:6b:87:0a:d1:62:7a:fd:89:4b:73:
40:8a:5c:63:2b:33:9b:8c:69:aa:f1:aa:91:cb:fb:
73:d8:fe:59:15:11:ff:a0:d0:1f:de:b3:e3:38:74:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:40:F9:68:06:DA:0F:00:1F:E2:80:5D:32:90:3C:95:14:37:2A
X509v3 Authority Key Identifier:
keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/HSxA-WgG2g8AH-KAXTKQPJUUNyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:df:3b:1d:ca:34:5e:a6:f5:35:f1:8e:e0:15:e1:34:39:24:
37:6a:56:7a:48:86:8c:f1:ca:04:56:96:a7:fa:90:44:81:f5:
08:be:e2:05:72:fe:7b:f2:3d:4a:72:72:7d:51:76:34:60:02:
6f:de:77:43:00:ef:2b:7b:5d:38:53:c3:55:22:0e:05:e1:a2:
f1:b9:2a:77:63:bd:fa:b7:40:bc:61:a0:31:7f:c6:0e:3f:c6:
bd:2b:fe:1e:b0:76:69:c1:d1:16:5a:75:32:5a:c3:4a:22:6e:
81:f7:57:1d:19:a4:66:06:30:cb:38:f6:10:cc:f4:03:c8:4e:
20:61:0b:1f:3b:72:5c:4f:3c:64:bb:30:b0:95:91:68:15:15:
4a:11:29:7a:39:c0:b7:ee:28:60:5f:4d:c2:9a:27:1f:d7:ce:
32:11:fb:f4:12:f2:25:72:e3:80:f4:34:12:0e:fa:63:e8:75:
10:5a:49:1d:21:97:91:97:64:47:9d:0b:2a:c4:5a:e8:40:07:
c6:a5:57:1e:f1:77:78:47:ef:ec:f2:84:38:8f:43:d1:26:cb:
2d:41:44:59:0c:7f:9d:f5:a5:39:27:fe:09:ca:8f:be:ac:78:
5c:3e:17:6e:4d:b1:d8:4d:4f:de:11:cb:cc:38:dc:9f:62:61:
72:9b:97:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:19 2024 by rpki-client on console-fra.rpki-client.org