Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/HRZuy-CjGx2xQ4BDOVpNgN0jRK8.roa
File: HRZuy-CjGx2xQ4BDOVpNgN0jRK8.roa (raw, json)
Hash identifier: OqntFzZe+NZ2+L3HW2HEg60H5cakNRDCKdRlmISUZE4=
Subject key identifier: 1D:16:6E:CB:E0:A3:1B:1D:B1:43:80:43:39:5A:4D:80:DD:23:44:AF
Certificate issuer: /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial: 17F8DFCB
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/HRZuy-CjGx2xQ4BDOVpNgN0jRK8.roa
Signing time: Sat 01 Jan 2022 08:04:05 +0000
ROA not before: Sat 01 Jan 2022 08:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44574
IP address blocks: 193.238.80.0/22 maxlen: 24
193.227.246.0/23 maxlen: 24
2001:67c:2278::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402186187 (0x17f8dfcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Validity
Not Before: Jan 1 08:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d166ecbe0a31b1db1438043395a4d80dd2344af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:8d:be:ab:a5:96:a6:12:24:57:02:b6:89:
6c:c7:b6:98:22:d9:37:27:3a:9b:3c:88:ae:65:79:
7f:d0:e6:93:f5:55:e1:19:ae:b9:c0:57:fc:43:44:
f5:99:6e:99:6e:8d:5c:2b:71:80:81:13:69:64:02:
bf:8c:71:b3:eb:d3:7f:66:56:76:9d:79:34:2a:c7:
2e:73:68:20:0f:ae:a8:31:0b:97:4a:42:e0:92:c0:
54:35:91:81:82:6f:fc:7a:25:86:c1:95:3a:d8:e2:
44:d3:3e:c2:0c:b2:a0:50:e3:d9:ab:15:12:d5:c9:
5f:c5:e1:19:57:36:08:2a:44:bc:f3:d5:e2:8c:32:
1b:5b:85:09:29:32:b3:b6:0c:3b:4b:43:b0:4d:0d:
c0:55:ea:d2:2b:ff:68:51:b2:2e:08:f9:b8:a1:b9:
c8:86:ba:82:b3:20:9a:5e:e7:0b:55:8f:25:09:a2:
13:a8:31:de:91:a5:9c:96:5b:da:b2:70:09:f7:9b:
1c:74:a4:b4:e9:c8:12:73:6b:13:af:59:f0:e7:d8:
59:d0:12:d0:f5:8f:c2:7a:2b:f2:ed:18:73:b7:8d:
1e:89:ce:23:b5:0b:86:0d:ce:ed:dd:db:c6:82:24:
9d:ed:47:ee:b8:14:39:02:65:cb:ab:40:0e:68:e9:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:16:6E:CB:E0:A3:1B:1D:B1:43:80:43:39:5A:4D:80:DD:23:44:AF
X509v3 Authority Key Identifier:
keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/HRZuy-CjGx2xQ4BDOVpNgN0jRK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
193.238.80.0/22
IPv6:
2001:67c:2278::/48
Signature Algorithm: sha256WithRSAEncryption
6c:c8:80:97:f0:1c:bb:49:d1:b2:ba:85:bc:50:b4:06:32:16:
ba:64:4b:93:cc:7e:03:ee:b1:4b:d3:98:d1:d2:85:7a:c2:07:
2d:1e:53:14:16:b0:06:67:ac:b9:f4:fe:33:3b:04:39:79:9f:
43:90:6f:0a:f9:7b:de:fe:87:fb:40:9a:33:20:23:a9:52:d8:
05:ae:54:f1:a2:3b:23:3b:16:43:5e:71:e2:c2:18:be:4e:30:
47:0d:7b:8e:95:01:13:fd:0d:dc:17:f5:a2:aa:a7:ad:5c:91:
f5:96:ba:9e:46:f0:9b:c1:ee:89:9b:49:e3:15:77:eb:02:49:
b6:b2:01:45:bb:c8:b7:5d:5d:1d:e1:30:9d:f8:f0:2c:85:92:
5f:42:7c:56:40:3e:fe:8a:0a:7e:d3:42:a6:1a:eb:a8:2e:33:
fc:69:97:56:34:cd:d5:a2:77:63:fb:38:01:5e:24:b5:d0:c7:
40:47:0c:f3:8c:82:de:e4:1c:0e:18:a4:af:5a:bb:ba:47:c9:
3c:17:c0:ce:de:1a:01:bb:5a:61:03:54:b4:8d:ca:4a:89:18:
5b:60:d1:91:ab:85:02:81:9d:1b:0a:cb:33:34:c4:7e:6c:5d:
38:af:9a:1c:aa:91:63:90:1a:91:72:20:5d:c2:ae:4c:a9:f1:
54:78:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:54 2023 by rpki-client on console-ams.rpki-client.org