Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/HArDqrUwUOUqR0EvCmq024fTgaY.roa
File: HArDqrUwUOUqR0EvCmq024fTgaY.roa (raw, json)
Hash identifier: Gf+a+vmLzIRmN0LqWlGFUPpryR1Ls+VVv9UuztVBC48=
Subject key identifier: 1C:0A:C3:AA:B5:30:50:E5:2A:47:41:2F:0A:6A:B4:DB:87:D3:81:A6
Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Certificate serial: 04A293
Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/HArDqrUwUOUqR0EvCmq024fTgaY.roa
Signing time: Wed 06 Apr 2022 13:57:48 +0000
ROA not before: Wed 06 Apr 2022 13:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16365
IP address blocks: 212.149.0.0/18 maxlen: 18
212.149.0.0/19 maxlen: 19
212.149.32.0/19 maxlen: 19
2a00:d580:4900::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303763 (0x4a293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef
Validity
Not Before: Apr 6 13:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c0ac3aab53050e52a47412f0a6ab4db87d381a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:0f:d2:85:43:4f:cf:de:70:81:15:4c:98:
9b:60:0f:21:b0:b6:45:ea:02:93:21:6e:45:82:67:
8b:03:33:10:4c:c8:9e:fe:3f:61:c9:00:41:a2:88:
03:64:dc:5a:a9:b4:96:b9:a9:66:8a:a5:07:ee:e1:
08:2d:9d:53:44:f9:a1:fa:29:8c:78:04:c9:75:6b:
b2:7c:6d:17:9a:56:da:0a:59:ff:7f:2b:56:ff:87:
7c:75:99:85:87:b3:5b:d2:87:d5:c2:ac:c1:13:f5:
e3:d5:69:36:f7:41:65:59:df:b5:bf:8b:1b:97:6f:
07:a3:0e:da:4c:e6:c5:69:42:5f:31:d4:0e:e1:45:
f1:03:bc:e2:e9:1e:08:91:54:bc:c6:89:43:c4:7b:
68:b4:92:78:df:27:c6:a8:e8:ca:00:f1:27:e5:f2:
b6:e9:bc:23:f2:73:9d:a9:5d:a2:5d:bb:66:cd:b3:
4a:c0:8f:06:61:d1:95:fb:24:4c:00:da:e6:cb:8e:
b5:81:7f:1f:ce:63:02:76:8e:af:32:9f:a0:bb:77:
35:14:db:7f:97:0c:e1:82:66:b6:3e:1e:5f:07:ef:
fa:46:44:c0:62:6d:fa:c8:41:4b:36:ea:0e:7f:9c:
f8:5f:99:1a:6e:df:37:a1:73:e9:03:2e:89:02:e2:
2b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:C3:AA:B5:30:50:E5:2A:47:41:2F:0A:6A:B4:DB:87:D3:81:A6
X509v3 Authority Key Identifier:
keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/HArDqrUwUOUqR0EvCmq024fTgaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.149.0.0/18
IPv6:
2a00:d580:4900::/40
Signature Algorithm: sha256WithRSAEncryption
60:4a:de:f0:9b:ec:63:9e:86:65:5c:fc:f6:52:cd:1f:b2:83:
c4:78:fe:e6:c4:60:50:6c:73:22:1c:ef:ce:eb:62:cd:09:19:
c1:ba:8d:5d:9b:a7:9d:0d:60:f9:62:a4:a4:99:13:6f:b7:42:
b7:ab:4d:3f:43:0d:9c:a7:bd:65:54:3b:0f:8b:97:0a:80:32:
b7:44:33:2f:7b:81:13:07:f6:b4:06:92:56:e1:da:46:7e:a3:
08:f1:5b:00:86:c0:2d:2d:7b:0e:91:e9:2c:02:fc:a7:46:3e:
41:14:75:a4:87:0b:56:d1:e9:8d:fe:52:b3:00:df:4a:ac:6f:
af:73:15:0d:c0:17:1d:f7:82:2e:10:a5:6d:a2:05:18:28:1e:
ce:f6:5e:65:c6:a6:e1:33:83:fa:0d:ab:0f:f0:d2:7b:3d:ff:
f4:14:0a:41:37:56:e3:98:76:fa:6d:5e:5c:1e:98:e9:60:5c:
79:50:a8:b5:16:e1:6d:68:f8:51:9f:8f:0a:6d:4e:d4:0b:3c:
63:ab:f3:45:90:02:08:88:dd:8d:37:e1:e4:43:05:7a:0f:d7:
88:c6:91:30:f3:78:ad:4a:91:30:e5:44:09:a2:40:be:91:c7:
b5:43:7b:f4:23:73:71:d6:b3:f7:e2:2b:5f:17:ee:5c:ab:a0:
50:3e:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:31 2024 by rpki-client on console-ams.rpki-client.org