Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/HebCcyEtD-z0RlqmiWCXdxPkF5Q.roa
File: HebCcyEtD-z0RlqmiWCXdxPkF5Q.roa (raw, json)
Hash identifier: e5mPHStBAD1Qz+3rxtrV6fSwl/OMngugsF5GIZAZqu4=
Subject key identifier: 1D:E6:C2:73:21:2D:0F:EC:F4:46:5A:A6:89:60:97:77:13:E4:17:94
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 01EDAB
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/HebCcyEtD-z0RlqmiWCXdxPkF5Q.roa
Signing time: Mon 21 Mar 2022 11:44:42 +0000
ROA not before: Mon 21 Mar 2022 11:44:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198948
IP address blocks: 178.218.193.0/24 maxlen: 24
91.239.248.0/22 maxlen: 22
185.129.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126379 (0x1edab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Mar 21 11:44:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1de6c273212d0fecf4465aa68960977713e41794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:ad:44:0f:0f:5c:1b:73:4d:9a:87:b5:4c:
b0:dd:2b:1a:c3:4b:2b:55:35:28:98:d1:ff:61:4a:
71:7b:d6:7a:af:1e:99:f9:4d:5e:a1:97:9c:25:df:
e6:bd:f4:ce:1d:7c:b5:57:96:3a:f7:35:9c:92:7e:
f5:a3:f5:dd:d9:a5:c7:5b:b0:d2:ef:8a:00:a9:15:
71:8a:d7:49:3c:46:11:a5:69:b6:4c:83:41:19:a4:
87:2b:b2:4a:f1:b2:11:f0:2a:92:ed:04:cf:55:70:
63:b2:18:f7:2c:ea:13:14:47:83:84:4b:8a:d0:6a:
2b:c9:1a:84:aa:e4:ef:00:64:81:e6:f5:16:5d:81:
7e:f0:87:8b:2f:43:52:b9:a9:a7:fd:e0:47:9a:cc:
7a:db:eb:85:9c:a3:67:2d:78:40:53:60:e7:30:7b:
46:9f:6c:05:da:4e:4e:d1:9b:87:17:fd:78:79:e6:
26:13:64:d0:35:5d:f6:63:1b:2a:14:82:28:09:18:
38:3f:43:42:f0:8b:23:73:90:cc:0a:9a:5d:c3:62:
8c:a6:35:25:4d:07:cf:4c:12:b9:95:75:81:0f:f6:
c6:49:79:da:95:fb:1c:b7:b7:07:c1:1c:68:1d:8d:
dc:79:d4:8a:15:38:42:79:f6:a1:06:cb:0b:22:e5:
a8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:C2:73:21:2D:0F:EC:F4:46:5A:A6:89:60:97:77:13:E4:17:94
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/HebCcyEtD-z0RlqmiWCXdxPkF5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.248.0/22
178.218.193.0/24
185.129.112.0/22
Signature Algorithm: sha256WithRSAEncryption
13:4f:e7:9d:09:5e:0e:77:15:32:15:16:44:a5:3c:cb:03:86:
ee:a7:37:65:9d:5e:36:f4:9e:85:dd:13:11:a5:5f:a5:c2:b5:
48:28:96:c1:19:1b:66:9a:73:fd:9a:8f:92:28:3b:51:7e:84:
d3:47:16:eb:76:ef:e6:32:53:ca:91:42:0c:05:20:19:b5:68:
57:82:84:98:d5:eb:ab:d5:6d:1f:80:d2:62:2b:56:9e:f0:e5:
9d:63:c3:fa:e6:a1:9e:af:02:87:f1:7b:b4:ed:b4:9f:ff:0d:
6b:ce:2b:3a:99:37:cb:a4:cc:f9:f9:a7:c9:a7:38:4e:dc:6f:
08:8c:b2:a9:97:cc:91:fa:8d:15:75:24:a4:42:76:38:d8:49:
02:36:8d:ca:b9:ec:96:e8:26:c7:65:e6:2c:a9:05:2c:aa:9b:
83:ef:40:60:41:52:1d:10:8c:88:48:f9:33:c1:80:94:fa:3b:
78:d9:28:04:aa:a2:5b:05:00:d7:53:92:b0:7e:bd:f2:78:d5:
5a:12:b2:73:a0:aa:d9:ab:a7:e2:b5:aa:11:4a:f0:a4:98:41:
df:6c:41:54:48:e3:12:5a:ff:36:1a:cd:2c:52:9d:3b:16:a6:
5c:08:e9:3c:9d:2e:33:68:29:da:46:ee:38:49:75:3d:59:db:
a2:17:4f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:17 2023 by rpki-client on console-fra.rpki-client.org