Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/hJWGh4xMF97ECCuO784eGlQEvcs.roa
File: hJWGh4xMF97ECCuO784eGlQEvcs.roa (raw, json)
Hash identifier: uVGwKgtWHNM5eLoZu0woYNJ9e7WFev5la7s/zm5p114=
Subject key identifier: 84:95:86:87:8C:4C:17:DE:C4:08:2B:8E:EF:CE:1E:1A:54:04:BD:CB
Certificate issuer: /CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Certificate serial: 0767CFB2
Authority key identifier: 35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/hJWGh4xMF97ECCuO784eGlQEvcs.roa
Signing time: Sat 01 Jan 2022 13:06:23 +0000
ROA not before: Sat 01 Jan 2022 13:06:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210007
IP address blocks: 195.69.252.0/23 maxlen: 23
195.69.252.0/22 maxlen: 22
195.69.254.0/23 maxlen: 23
195.69.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124243890 (0x767cfb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=356e4744731da44f08fa5e92c5eb2a474d49a892
Validity
Not Before: Jan 1 13:06:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=849586878c4c17dec4082b8eefce1e1a5404bdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:4e:39:82:aa:73:d1:81:86:d7:ce:8c:ca:
32:41:1b:55:36:08:f5:24:66:2a:05:61:0c:ce:8d:
17:47:1f:53:85:61:02:3d:7b:2d:d6:19:f1:0c:be:
57:05:b5:9c:23:89:44:6b:8b:33:03:80:05:d3:4a:
a8:7b:68:24:8d:c4:9b:37:d9:da:c9:a9:cf:8f:9f:
57:ef:d2:6b:89:99:f6:2a:46:d3:0b:b2:75:a7:ce:
24:a3:b6:17:2b:54:e1:11:27:82:35:ca:43:09:3b:
8d:c8:55:67:54:5e:b3:07:85:79:c7:e8:b2:1d:4e:
28:d1:2e:3d:84:d2:09:a7:8e:43:3f:ad:ee:93:70:
e0:0c:e0:e9:7a:d9:81:2b:62:20:5e:44:63:3b:88:
ae:b3:49:f0:ff:5f:35:4b:d0:fe:c8:35:cd:8b:3c:
b4:5c:bc:68:b1:3a:b6:6d:ab:10:7f:7f:a1:f1:7a:
3d:6b:21:eb:ad:a5:8e:77:a2:fb:b7:c1:a3:7d:5b:
2a:48:ca:fd:fa:94:c1:e3:2b:b8:31:32:1c:8c:ad:
28:83:dd:26:fa:4f:83:0e:e9:0b:9a:12:40:dc:79:
82:c9:f2:15:5a:6b:23:74:05:b2:ef:14:d9:0a:0b:
06:5b:c4:1d:78:2d:17:21:88:7b:b2:b5:ea:ee:ab:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:95:86:87:8C:4C:17:DE:C4:08:2B:8E:EF:CE:1E:1A:54:04:BD:CB
X509v3 Authority Key Identifier:
keyid:35:6E:47:44:73:1D:A4:4F:08:FA:5E:92:C5:EB:2A:47:4D:49:A8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW5HRHMdpE8I-l6SxesqR01JqJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/hJWGh4xMF97ECCuO784eGlQEvcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8f4789-963a-4c69-b165-0c501d68975a/1/NW5HRHMdpE8I-l6SxesqR01JqJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:a4:ad:13:89:23:7d:d6:e5:bd:ae:54:e4:d2:49:4c:53:ab:
06:1a:d7:ee:f2:0d:2a:f7:24:11:0e:ca:bd:18:bd:25:55:65:
3f:27:90:77:81:9b:28:32:35:55:31:49:8e:bb:65:7f:7a:ca:
9b:28:06:57:95:f0:54:5f:00:fc:bf:3f:71:e0:cc:08:60:f0:
ef:22:2b:92:b0:05:77:5a:07:23:4e:eb:c0:5f:d0:f4:81:99:
41:0f:76:b2:45:e2:90:e4:1b:b2:b4:c4:e0:a0:c3:fd:24:1b:
3e:b6:95:e9:3c:6b:07:30:8e:ee:fa:40:09:f0:06:04:3b:e3:
c8:d6:b0:f4:81:b9:3f:65:db:53:79:9b:e6:6a:76:a0:86:4a:
f3:39:eb:03:74:cf:60:11:49:b1:31:70:34:e7:88:66:01:b2:
5b:d9:2b:9e:4d:8a:f0:7a:fc:54:4e:c2:6c:b5:49:fa:9e:af:
3d:b5:6e:d2:7b:77:70:a4:a1:50:07:3a:9b:be:3f:b1:74:60:
65:a1:50:d7:84:3e:ea:a8:1e:83:e3:40:e5:3d:b8:22:b8:1c:
5b:4d:08:14:06:59:54:28:51:91:2a:bf:36:fe:af:45:a6:c0:
f6:c3:08:bf:24:84:8c:df:c3:dd:ba:44:8e:40:52:e6:ba:f3:
40:c1:dd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:20 2023 by rpki-client on console.sobornost.net