Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HL9K_Z6VxHE1USf5Uy8X3rlMF3s.roa
File: HL9K_Z6VxHE1USf5Uy8X3rlMF3s.roa (raw, json)
Hash identifier: ZLwuZ9qn5fq0WYwrOY4P6o59y7HZeH84/q6DqvmocVE=
Subject key identifier: 1C:BF:4A:FD:9E:95:C4:71:35:51:27:F9:53:2F:17:DE:B9:4C:17:7B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018539BCD949668E27815DCB1BFCB944CC39
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HL9K_Z6VxHE1USf5Uy8X3rlMF3s.roa
Signing time: Thu 22 Dec 2022 12:09:15 +0000
ROA not before: Thu 22 Dec 2022 12:09:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213064
IP address blocks: 45.134.90.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:bc:d9:49:66:8e:27:81:5d:cb:1b:fc:b9:44:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 22 12:09:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cbf4afd9e95c471355127f9532f17deb94c177b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:90:b2:60:2a:cc:07:c3:92:26:03:88:6a:4f:
62:81:30:27:96:78:a4:10:ef:3c:f1:51:6b:b6:30:
b0:8a:09:04:8b:24:64:16:55:70:2e:25:12:33:8c:
ef:c3:ae:e0:3f:f0:12:53:9c:6a:74:64:e7:75:5b:
0a:1e:c1:7b:d8:9c:67:04:78:74:73:98:9d:96:87:
2b:9f:cb:d8:46:10:45:e5:7d:70:79:08:6a:13:f5:
b5:9a:ec:21:1e:cf:f1:9b:ee:10:c1:df:e9:23:33:
fa:36:9e:de:aa:06:af:48:9e:84:3c:2b:df:ab:2c:
28:9f:2e:d7:82:6e:ae:8c:79:82:fb:8f:a6:30:fc:
7c:78:1a:3d:f2:d3:bd:98:98:2e:a9:16:c5:16:57:
1f:a8:f6:4a:06:4d:ba:99:3b:4e:e8:90:04:9e:b6:
8c:ea:c4:99:4a:42:31:78:42:d5:e9:e8:bc:f0:49:
7d:0d:89:b8:d4:8c:45:9c:4d:16:23:9a:8d:fe:8b:
8f:95:30:b8:cd:15:42:40:ca:ab:e0:07:9f:c1:d3:
b9:bd:ad:b8:e8:90:88:5d:70:ed:11:5a:1b:c6:04:
38:73:0e:5b:2a:d9:05:5e:c6:e9:7b:ff:20:44:7f:
ca:1e:d3:df:0b:83:b5:cb:45:a2:b3:89:2c:5f:01:
4a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BF:4A:FD:9E:95:C4:71:35:51:27:F9:53:2F:17:DE:B9:4C:17:7B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HL9K_Z6VxHE1USf5Uy8X3rlMF3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:aa:22:36:e0:62:ef:31:c9:89:30:3a:a4:be:8e:67:e7:fa:
90:43:64:d7:48:a6:10:6b:1d:5a:d8:08:b6:1f:c8:81:fb:f3:
c3:82:d9:54:84:f7:ff:7d:fd:d8:02:a8:af:5e:4d:58:bb:e6:
4a:4a:4d:00:4c:20:cd:b7:13:74:bc:20:63:93:ca:e3:95:74:
20:ca:8d:0b:a8:99:aa:80:5b:fe:04:0d:cb:7e:a8:9c:39:a5:
3b:8d:ac:57:7f:0c:e4:37:ff:87:b3:81:fd:82:bb:79:e3:07:
cc:a2:43:d1:4d:31:63:03:bf:cf:08:2b:f9:83:00:fa:9d:0f:
c3:9e:0e:d5:9d:16:30:69:d6:8a:d5:19:c6:aa:3e:1a:11:fc:
20:54:12:fb:45:3e:91:8f:68:6c:88:cc:e2:86:ef:90:50:f0:
a8:62:09:b1:52:da:5d:85:85:16:16:b8:32:51:6d:16:88:d2:
12:09:5b:3e:78:06:d0:ff:e0:23:da:13:81:a0:6a:85:41:96:
ad:61:e6:ad:ed:e6:50:bf:33:6c:74:73:cb:65:52:58:2b:27:
9a:93:fe:2d:7c:80:af:7b:d5:ae:dc:de:75:f8:e1:cd:d4:0d:
88:6f:77:08:c0:5a:aa:ab:22:73:5b:b9:02:ca:46:a2:b0:29:
d3:56:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:04 2025 by rpki-client