Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/HpB2TtU6g3COH8YstmgVosK94Mg.roa
File: HpB2TtU6g3COH8YstmgVosK94Mg.roa (raw, json)
Hash identifier: YsHWRmYBxzGneuEISmdOJ+3SKRb6wkBd5iHPxAWUhE0=
Subject key identifier: 1E:90:76:4E:D5:3A:83:70:8E:1F:C6:2C:B6:68:15:A2:C2:BD:E0:C8
Certificate issuer: /CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Certificate serial: 018A8D8925EF0B217C5882A090B8B6DA6E90
Authority key identifier: 1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/HpB2TtU6g3COH8YstmgVosK94Mg.roa
Signing time: Wed 13 Sep 2023 07:54:50 +0000
ROA not before: Wed 13 Sep 2023 07:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.46.38.0/24 maxlen: 24
91.213.115.0/24 maxlen: 24
91.241.6.0/23 maxlen: 24
91.200.50.0/24 maxlen: 24
2001:678:264::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:89:25:ef:0b:21:7c:58:82:a0:90:b8:b6:da:6e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a93849bff337df8b8b0bd1ae252ee6119d8a61f
Validity
Not Before: Sep 13 07:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e90764ed53a83708e1fc62cb66815a2c2bde0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b8:7f:40:4d:36:ae:98:c9:19:cb:24:03:7d:
f6:a1:31:47:e6:1a:a0:3a:d5:7a:14:a3:26:57:c6:
f2:a8:6c:96:ea:ab:a8:49:c9:02:05:6e:71:58:84:
80:4c:8e:76:60:02:ee:87:78:0d:57:2d:dd:b2:b2:
a9:d5:b3:d9:4f:14:e9:60:36:38:26:e5:3a:52:21:
0d:41:75:53:55:3a:48:8d:e3:26:87:22:a0:1d:31:
c4:8e:d7:93:98:2a:b2:ad:26:3b:5e:49:47:83:61:
76:8c:e5:dd:54:6b:07:32:2a:f8:89:4e:7a:cd:fb:
63:19:f0:9c:1c:90:26:b0:43:c7:a7:96:18:01:dd:
6f:21:05:15:b7:e2:52:f6:c2:b8:3d:f0:b9:15:f1:
d7:75:e8:12:92:cb:4c:6c:21:73:c3:0a:ee:56:dd:
4b:8c:26:c5:0c:5d:52:e5:87:8c:ae:40:a1:f3:51:
f3:96:6c:f0:04:5d:cd:15:ad:1f:aa:5a:82:ae:d3:
39:6f:f8:55:13:69:91:16:8a:52:58:b4:8b:0a:f8:
0f:82:80:c7:c4:23:3a:47:9e:21:b3:2c:b5:c4:39:
18:d9:a1:c1:f2:a9:8a:e1:1b:b9:ed:85:25:43:a4:
19:5b:f2:6d:0d:cf:75:74:d4:a2:fa:61:46:b8:bc:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:90:76:4E:D5:3A:83:70:8E:1F:C6:2C:B6:68:15:A2:C2:BD:E0:C8
X509v3 Authority Key Identifier:
keyid:1A:93:84:9B:FF:33:7D:F8:B8:B0:BD:1A:E2:52:EE:61:19:D8:A6:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpOEm_8zffi4sL0a4lLuYRnYph8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/HpB2TtU6g3COH8YstmgVosK94Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d4497a-11f2-49ac-aef9-43e67d5d0a85/1/GpOEm_8zffi4sL0a4lLuYRnYph8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.50.0/24
91.213.115.0/24
91.241.6.0/23
195.46.38.0/24
IPv6:
2001:678:264::/48
Signature Algorithm: sha256WithRSAEncryption
06:ec:9f:16:e3:08:62:3e:87:e6:f0:d5:b2:82:ad:77:3b:b3:
52:56:0c:04:62:de:41:f3:99:0a:2e:88:fc:13:71:ff:9f:0c:
c3:fe:27:2c:22:60:8b:34:9a:28:9a:57:8f:f2:44:a9:2f:52:
d8:7b:98:75:fa:f7:1a:08:93:06:af:38:21:9f:e1:a4:d4:61:
b3:0c:53:d9:8f:d3:ba:ae:2b:69:e5:e0:98:19:e2:a4:65:e7:
72:b6:e2:4e:ed:16:c6:62:94:28:dd:1b:e3:e5:e3:54:66:3d:
2b:b3:d3:dd:70:dc:32:cf:88:89:2f:2b:cf:3a:20:c8:93:0e:
e7:e8:0e:16:17:9c:97:2d:11:85:d6:cb:28:cd:4c:ba:72:05:
59:ad:23:e8:2e:ea:e7:06:df:de:a4:79:7b:a8:2f:dd:40:bd:
15:93:42:38:16:ac:fe:57:96:00:02:48:d3:e9:05:8a:12:79:
66:b4:7a:ad:df:80:cb:e9:64:92:96:ba:90:27:31:d6:68:88:
4c:7a:12:51:59:b8:88:50:bd:df:9e:b4:bd:ca:c4:1a:ce:d2:
ff:53:f1:cd:88:f1:5c:a7:c5:95:12:8d:c9:d3:d2:84:68:3e:
d6:4e:e6:70:1f:13:26:2f:6c:41:29:06:38:28:fc:f1:4a:db:
7b:8b:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:53:33 2025 by rpki-client