Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/HpycHn6Ot2Vai-aSA2PxIj9qx-M.roa
File: HpycHn6Ot2Vai-aSA2PxIj9qx-M.roa (raw, json)
Hash identifier: a2o2YXZpYGLSt1oMmvRFBOVJr9lfd1wD31fQrIPNUPY=
Subject key identifier: 1E:9C:9C:1E:7E:8E:B7:65:5A:8B:E6:92:03:63:F1:22:3F:6A:C7:E3
Certificate issuer: /CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Certificate serial: 02224CB1
Authority key identifier: BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/HpycHn6Ot2Vai-aSA2PxIj9qx-M.roa
Signing time: Sat 01 Jan 2022 00:57:27 +0000
ROA not before: Sat 01 Jan 2022 00:57:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42223
IP address blocks: 91.233.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35802289 (0x2224cb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4098e0fdedb612f239da524a04b5e0dea4c53f
Validity
Not Before: Jan 1 00:57:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e9c9c1e7e8eb7655a8be6920363f1223f6ac7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:65:a4:56:1d:b3:1b:a3:6a:90:1d:88:c9:
85:40:10:d4:96:9a:a3:36:9a:b7:a8:05:35:9d:e5:
13:b8:89:96:75:28:4b:8c:ad:56:75:48:e5:4c:77:
33:0d:22:9f:b8:90:f6:2d:e9:21:6b:0b:fd:25:ec:
5b:cd:77:44:f2:c1:ec:c7:b6:30:af:a2:d8:17:80:
bd:1c:2c:b6:61:9e:38:67:0e:17:63:be:49:49:61:
d1:1b:e1:99:2b:fe:a6:27:d7:14:45:ce:06:ec:eb:
cc:11:09:84:79:7b:2d:54:1e:70:67:bf:fd:50:4a:
f8:7a:64:29:f2:75:02:0a:bc:f5:3f:d4:39:d4:e7:
bf:d1:b2:9b:85:49:3b:ec:65:f4:48:26:07:f9:7c:
25:d6:2e:bc:45:2d:35:34:27:96:72:e3:33:90:b5:
62:3c:25:6d:53:a1:e5:77:70:21:79:29:0d:2f:a4:
cb:4d:c1:1a:82:8f:3c:53:65:5a:6e:b5:a4:10:c5:
81:f4:57:8d:4c:9a:28:ed:24:66:76:10:94:e7:e1:
e7:fe:72:02:2d:5f:52:4c:08:47:32:ab:e1:20:81:
7d:7f:c0:60:73:00:5f:d9:f1:4e:de:63:35:41:e1:
e5:92:7c:c6:b7:92:00:2b:fc:99:29:d4:4e:28:33:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9C:9C:1E:7E:8E:B7:65:5A:8B:E6:92:03:63:F1:22:3F:6A:C7:E3
X509v3 Authority Key Identifier:
keyid:BB:40:98:E0:FD:ED:B6:12:F2:39:DA:52:4A:04:B5:E0:DE:A4:C5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0CY4P3tthLyOdpSSgS14N6kxT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/HpycHn6Ot2Vai-aSA2PxIj9qx-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9b733e-9839-4f6f-b4b6-ff5aa9eef4e2/1/u0CY4P3tthLyOdpSSgS14N6kxT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.15.0/24
Signature Algorithm: sha256WithRSAEncryption
28:57:89:dd:25:e2:eb:89:3e:2f:fe:b9:a6:61:ea:f4:6b:25:
07:bb:10:c4:b5:b3:ba:8b:6a:69:ee:c1:88:8f:7a:96:42:9c:
c6:59:fe:ff:99:8d:e6:d3:7b:49:73:a6:31:73:55:9d:93:9b:
40:2d:bb:16:50:e1:a6:60:02:2f:79:75:e1:fb:85:11:c1:67:
f9:76:bf:54:0d:32:35:ee:8b:83:86:b0:ec:eb:0e:13:ac:04:
37:0c:e6:27:06:1e:10:92:bd:e8:2c:b8:e3:28:49:a1:44:47:
63:59:80:dc:fe:9a:be:21:f7:d2:ee:d7:6c:5b:45:b2:85:85:
d0:54:f7:3c:ba:96:f0:7a:82:c0:0c:2c:89:c3:b0:2e:60:6e:
20:a6:f9:f5:17:97:8d:b7:db:89:3c:e1:6f:44:49:63:07:a1:
51:d1:9e:19:f8:1f:60:49:ab:b6:45:0b:4e:b8:00:36:38:0c:
6c:9d:d7:7a:55:b0:02:22:1b:71:57:e5:e9:62:8b:11:f7:99:
1f:97:09:f6:af:37:2a:4e:a0:2b:fd:56:9c:da:01:89:49:4e:
8c:34:32:94:45:64:1f:72:31:0a:7a:21:a1:b5:45:1f:49:17:
30:38:f6:9e:84:f1:64:4c:34:ff:7d:fe:30:09:28:b2:af:8d:
e1:01:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:09 2024 by rpki-client on console-ams.rpki-client.org