Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/hzUdgKJQeS_XGG8id1zJIHIGFNw.roa
File: hzUdgKJQeS_XGG8id1zJIHIGFNw.roa (raw, json)
Hash identifier: yoS04vztH2TfmYRBSFTgGQs3X6UjE7GmfQJMEsoG8Ds=
Subject key identifier: 87:35:1D:80:A2:50:79:2F:D7:18:6F:22:77:5C:C9:20:72:06:14:DC
Certificate issuer: /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial: 04E7892F
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/hzUdgKJQeS_XGG8id1zJIHIGFNw.roa
Signing time: Sat 01 Jan 2022 05:53:00 +0000
ROA not before: Sat 01 Jan 2022 05:53:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21257
IP address blocks: 194.106.216.0/23 maxlen: 23
193.109.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82282799 (0x4e7892f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Validity
Not Before: Jan 1 05:53:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87351d80a250792fd7186f22775cc920720614dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:56:5a:db:8d:62:dc:de:b1:85:fd:3b:f1:
9d:e1:0a:04:18:ae:cc:b0:08:4d:49:d4:3b:60:2c:
20:cb:5c:5e:f9:88:bf:eb:c7:e7:14:7b:bf:c3:29:
14:33:9d:06:9a:ee:ef:14:2c:cc:48:f0:b1:3b:34:
07:8f:79:ea:91:5f:2e:61:04:e8:ab:4d:43:b3:51:
bd:6d:59:3a:1e:11:57:7a:b5:be:09:58:ba:3f:10:
47:8b:1f:0b:18:60:0f:42:66:02:d1:90:9e:f0:e9:
80:12:6b:eb:33:87:59:f1:68:65:52:50:42:c6:a8:
9e:1b:c2:0e:99:bd:84:8e:a9:19:bd:f6:46:7a:74:
9a:3d:d1:5f:2f:5a:18:b6:4d:ac:5e:70:89:6c:1a:
6d:f1:d7:dc:84:b8:28:83:8a:70:04:1f:4e:eb:ca:
dd:9e:33:c6:90:48:6f:bb:6b:82:2c:2f:f4:95:75:
4d:92:0c:06:34:7b:90:cd:d0:a5:98:7e:71:f7:ea:
06:7e:06:79:c4:0a:08:8c:a8:6f:13:40:6b:87:bd:
ab:6f:24:9f:c8:87:48:30:de:3a:92:07:06:22:ea:
dd:78:00:e4:1f:5f:55:0b:5c:3a:e1:c2:65:46:2f:
5f:08:4a:fd:dd:55:97:f9:2e:a8:f4:3c:c9:6f:5a:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:1D:80:A2:50:79:2F:D7:18:6F:22:77:5C:C9:20:72:06:14:DC
X509v3 Authority Key Identifier:
keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/hzUdgKJQeS_XGG8id1zJIHIGFNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.240.0/24
194.106.216.0/23
Signature Algorithm: sha256WithRSAEncryption
45:10:4e:de:6f:0f:82:36:ef:f5:11:30:16:ff:9a:3c:97:ad:
b4:d1:61:90:a8:96:29:9f:e9:76:1d:dc:73:51:8d:e1:24:83:
e9:32:26:a1:12:75:c4:9b:ad:e5:07:94:7a:60:76:57:06:7d:
3c:73:65:bc:f4:01:cd:92:ee:24:bc:74:ad:95:97:cb:d2:fb:
28:b8:a3:d8:79:ac:e9:8c:22:17:57:c9:97:39:d7:69:1b:64:
c4:5d:3a:df:7d:73:81:bf:70:e1:dd:59:6a:6b:87:06:27:d9:
be:2a:0e:ad:85:05:48:9a:ad:f5:f0:05:04:58:36:7b:fc:f4:
49:91:40:b3:e1:aa:01:28:77:67:a0:19:34:9d:60:80:2d:47:
70:c1:c5:95:46:a5:a3:e0:0d:49:bd:a9:b0:dc:43:45:d9:54:
0a:b6:5f:b8:5c:60:ba:44:89:03:1a:2c:0f:05:7d:c2:b5:78:
05:2d:b7:06:ed:e0:8b:bf:c8:0c:20:54:c0:66:fe:6f:d6:2a:
a1:bc:b6:23:f2:08:a4:0d:8b:f6:74:fe:6b:21:91:42:50:6e:
65:e4:de:22:1c:8d:a3:f9:9a:d6:fd:e6:59:42:2c:c5:ea:c7:
81:00:d2:6d:39:76:6c:70:20:0d:0e:2d:bf:d9:1d:e0:b2:d5:
73:c6:69:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:29 2025 by rpki-client