Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/HTQfw8o5r4fKlp4oNRXkNImLMqE.roa
File: HTQfw8o5r4fKlp4oNRXkNImLMqE.roa (raw, json)
Hash identifier: 0m+a/Q1uCklIDs01WYLXyEpLreiWp4UN5QZsd37cQXE=
Subject key identifier: 1D:34:1F:C3:CA:39:AF:87:CA:96:9E:28:35:15:E4:34:89:8B:32:A1
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 0C36037E
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/HTQfw8o5r4fKlp4oNRXkNImLMqE.roa
Signing time: Sat 01 Jan 2022 10:58:33 +0000
ROA not before: Sat 01 Jan 2022 10:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51815
IP address blocks: 91.226.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204866430 (0xc36037e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Jan 1 10:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d341fc3ca39af87ca969e283515e434898b32a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:4d:2f:7f:ad:38:de:80:7f:1a:d3:8e:f6:
46:01:d7:2c:33:1f:97:66:23:a2:f4:d1:c1:df:a6:
e9:71:66:b3:48:67:65:f5:51:bd:c5:22:52:2a:e4:
2f:34:12:7e:cc:31:8b:d1:e3:72:cf:ee:68:7d:6e:
14:a9:43:61:4f:3a:01:c2:66:12:22:cd:76:b3:72:
5c:e7:24:bc:f5:f4:24:87:07:32:68:7c:e6:93:e0:
2f:29:01:05:f1:c8:ca:a6:45:77:66:ae:35:38:4f:
80:0a:f0:f6:26:69:68:3e:fe:0a:bb:03:63:21:2e:
ad:00:aa:15:40:a6:1c:d9:70:c4:8b:5a:46:c3:49:
e9:1c:e1:30:23:c4:53:75:80:0b:4a:bc:5b:f4:b1:
18:5f:1b:6b:6c:5e:f9:e8:9d:15:6e:a8:a2:da:6f:
14:93:60:3e:46:c3:08:cd:80:b1:6b:1c:4e:99:49:
af:65:53:9e:d3:6c:1d:b4:aa:ac:53:38:15:3c:c6:
bd:97:5a:79:d6:b5:93:dd:02:54:2b:94:78:3d:4f:
0f:8e:f9:a9:27:5f:14:b6:19:10:15:de:9b:1d:27:
c9:37:95:16:d6:48:f0:2c:05:4d:4a:f9:e9:86:21:
b7:4c:22:35:6f:c9:b8:97:72:8a:3b:02:b1:a0:20:
12:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:34:1F:C3:CA:39:AF:87:CA:96:9E:28:35:15:E4:34:89:8B:32:A1
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/HTQfw8o5r4fKlp4oNRXkNImLMqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.177.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e1:57:f8:1e:0f:41:b9:e0:38:4c:5c:68:9d:85:d2:bd:f8:
8f:04:d8:b5:30:3a:18:d7:52:16:cf:9a:4d:aa:8f:8f:65:7e:
72:64:ff:c5:bc:2e:23:08:a3:fb:76:e5:c3:2b:40:d3:ad:71:
95:22:13:b7:5b:3e:08:5b:5a:53:54:7a:68:96:05:4c:02:f2:
7f:f4:21:49:4c:50:86:1d:ce:22:b0:a0:26:66:dc:45:0e:e5:
8c:c1:d2:fa:ab:8e:c5:85:0e:02:d7:9e:28:e4:04:8c:d7:20:
4a:14:48:aa:6c:43:eb:f2:7b:d0:f8:45:1b:cd:5d:90:13:de:
47:01:34:81:43:c9:e5:b3:ee:08:a7:b5:3c:fa:ac:89:d7:1f:
25:be:ec:d2:01:4d:91:ba:b8:34:a9:44:3e:90:1a:f1:34:73:
4d:d1:da:2d:1f:a7:3d:8e:56:ad:da:fa:cd:14:8d:3d:f5:75:
2c:b2:3a:e2:87:c5:d5:a4:d4:da:a9:c1:20:3f:dc:33:8c:ce:
83:f5:80:cb:f5:79:a8:30:79:08:65:e9:7d:a5:ac:4c:d4:89:
ea:d4:d0:a5:1d:e1:f5:fc:74:e0:fe:66:73:93:74:c1:32:6b:
49:c9:5a:f1:47:fc:b8:c0:29:db:37:27:29:2c:0c:6c:79:40:
f8:52:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:37 2024 by rpki-client on console-fra.rpki-client.org