Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/HucDHFZz2V9zwmhdq5lmdpzDzX0.roa
File: HucDHFZz2V9zwmhdq5lmdpzDzX0.roa (raw, json)
Hash identifier: r5LdX5PDEF+O78aNtnxqxcJZnKB1U6LcuhaUErFbwbk=
Subject key identifier: 1E:E7:03:1C:56:73:D9:5F:73:C2:68:5D:AB:99:66:76:9C:C3:CD:7D
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 0185712793B1E7E026CBB4249E090F0DADB2
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/HucDHFZz2V9zwmhdq5lmdpzDzX0.roa
Signing time: Mon 02 Jan 2023 06:24:57 +0000
ROA not before: Mon 02 Jan 2023 06:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212452
IP address blocks: 188.93.241.176/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:93:b1:e7:e0:26:cb:b4:24:9e:09:0f:0d:ad:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 2 06:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ee7031c5673d95f73c2685dab9966769cc3cd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:63:c5:71:1e:ea:6f:27:0d:3c:54:99:96:
70:60:d4:f4:50:5d:bd:a0:86:00:37:e1:11:b2:15:
fc:b8:78:d7:09:a4:9d:e1:cc:2b:65:52:a0:cb:ae:
2f:39:7a:09:5a:bc:3e:70:b3:cb:90:f6:b6:57:33:
97:f2:30:61:64:61:67:07:07:0a:9c:ee:6d:16:89:
6b:93:83:8e:b6:1a:15:be:d3:f6:f0:63:84:df:ae:
a1:e1:03:7d:f9:53:db:f1:c3:b2:5f:b3:9e:5c:d0:
b1:68:09:0f:ac:3b:0f:32:26:64:85:8e:16:b3:f9:
45:91:ea:9c:a5:6a:87:7b:cb:f4:39:29:eb:b9:c1:
24:c3:00:64:12:19:b0:a9:5a:29:10:1c:e3:3e:3c:
76:3d:79:a3:81:cb:62:7e:40:d0:f8:96:da:c1:5b:
f1:c9:22:2f:4d:9b:e2:87:9d:d2:4c:78:da:fa:35:
54:91:13:78:a0:28:bc:0e:d7:54:64:f7:40:ce:36:
7f:8a:74:e9:6b:4f:9f:9a:38:4f:28:fd:11:1e:04:
4c:db:4e:c9:cd:f0:5d:eb:24:d7:3f:d6:7c:00:6a:
06:4b:ec:22:2f:bb:46:3a:fa:02:dd:66:56:a8:1c:
21:88:3d:31:f1:04:51:52:10:d2:01:f6:68:9a:02:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:03:1C:56:73:D9:5F:73:C2:68:5D:AB:99:66:76:9C:C3:CD:7D
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/HucDHFZz2V9zwmhdq5lmdpzDzX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.241.176/28
Signature Algorithm: sha256WithRSAEncryption
05:5b:1e:0b:c0:e8:4e:9e:93:c3:ec:fb:52:6e:dd:bb:30:2b:
25:05:97:db:db:9b:3e:e0:04:cd:03:d1:8b:f0:5a:76:37:91:
c7:d6:46:00:8c:69:49:13:a0:fe:9d:fa:8c:7f:f6:dd:4a:17:
23:e0:3c:2b:93:2e:b5:3a:e0:fa:e2:a6:4a:eb:48:8e:5d:14:
00:39:81:85:79:b2:55:d7:fc:b7:f8:ea:9c:9e:52:f4:f5:07:
c4:03:14:b1:93:02:55:be:e4:3e:77:de:41:b7:a6:c0:1b:f5:
5c:30:87:ab:df:53:06:ef:a6:d8:60:b2:9c:9b:d8:3b:89:4f:
43:c7:c4:f9:fc:ca:ac:69:86:3d:e6:cf:85:5c:09:75:ee:77:
96:11:8b:a9:a7:a5:b5:9d:7b:fc:fc:0f:f8:ea:c3:84:8b:a6:
2d:0b:99:32:90:a4:76:22:d4:8c:8f:c7:5d:9c:48:d8:5c:7d:
fa:5d:2d:fd:54:47:8e:9a:12:41:87:f5:79:53:f6:b7:8b:06:
e2:42:d1:b4:f7:3c:97:bb:a8:f8:ab:de:94:f3:bf:78:20:b0:
04:2b:53:ac:96:b2:3e:b2:76:b8:8a:14:6b:40:f7:1e:ab:42:
5e:cd:20:c5:b1:bc:ee:8a:c9:31:db:a0:a5:a1:7a:90:b3:d7:
2b:1c:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:28:18 2025 by rpki-client