Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/hpjWK--sr_aw7oOaDlzmjOmbue4.roa
File: hpjWK--sr_aw7oOaDlzmjOmbue4.roa (raw, json)
Hash identifier: CFUNXYGpWla88PdFyGHQu7cqPCbUJJ6JoZ8chRTORuU=
Subject key identifier: 86:98:D6:2B:EF:AC:AF:F6:B0:EE:83:9A:0E:5C:E6:8C:E9:9B:B9:EE
Certificate issuer: /CN=225cf0d31704b59d7eeb018548202d3a570da932
Certificate serial: 01856F8244B5B6A1CB4536397B9B435CAF8B
Authority key identifier: 22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/hpjWK--sr_aw7oOaDlzmjOmbue4.roa
Signing time: Sun 01 Jan 2023 22:44:46 +0000
ROA not before: Sun 01 Jan 2023 22:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1836
IP address blocks: 2001:678:810::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:44:b5:b6:a1:cb:45:36:39:7b:9b:43:5c:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=225cf0d31704b59d7eeb018548202d3a570da932
Validity
Not Before: Jan 1 22:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8698d62befacaff6b0ee839a0e5ce68ce99bb9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:a1:6e:d2:e1:c4:60:99:39:61:d7:96:a8:
0f:51:58:f6:f4:89:5b:1e:ea:33:c1:50:4c:6f:d4:
51:47:ed:9a:54:e7:ed:81:af:50:88:99:a1:08:a7:
a8:29:32:98:13:dd:11:7a:e7:01:d9:6f:c9:e1:2a:
a6:bf:2d:52:26:32:01:a7:3a:77:c8:c5:ec:cd:f4:
a8:93:0e:3a:a0:30:d1:15:42:67:ff:c4:db:d0:4b:
07:a8:72:dd:2a:49:bb:54:a0:da:f3:2b:c1:2e:45:
ef:87:56:fe:83:2a:e3:27:1d:0d:9e:7f:f1:88:45:
a7:77:a1:57:0b:01:17:4d:07:a5:d2:3d:ae:d9:87:
23:9f:69:0c:aa:b3:d9:69:6b:90:6d:c7:e5:81:a8:
9a:95:fd:50:0a:92:a4:0d:ce:bc:74:47:c8:dd:a9:
07:36:d8:e8:b0:38:54:48:80:c8:ab:52:5b:04:89:
72:7e:09:59:43:a0:b4:55:4e:5a:16:e0:87:bb:f2:
61:62:d7:ff:db:f8:04:f9:2d:55:73:ed:9f:8a:64:
d8:0a:bf:ea:a9:79:a0:c7:80:e7:56:d9:b0:d0:cd:
f4:69:c1:55:5b:c7:e0:e1:d7:2e:e8:74:99:37:6b:
1d:7c:ca:c1:18:45:b0:89:9b:68:6b:fc:78:f5:5b:
17:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:D6:2B:EF:AC:AF:F6:B0:EE:83:9A:0E:5C:E6:8C:E9:9B:B9:EE
X509v3 Authority Key Identifier:
keyid:22:5C:F0:D3:17:04:B5:9D:7E:EB:01:85:48:20:2D:3A:57:0D:A9:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/hpjWK--sr_aw7oOaDlzmjOmbue4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4df429-f776-4fd3-8de4-00bc903d2621/1/Ilzw0xcEtZ1-6wGFSCAtOlcNqTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:810::/48
Signature Algorithm: sha256WithRSAEncryption
10:73:2f:7a:30:1d:72:0d:79:78:13:65:34:9e:81:d2:f7:54:
0b:5d:14:24:f4:eb:ac:e6:34:49:10:a9:f9:07:1c:c6:1e:2b:
85:21:4f:5a:78:0c:41:c5:18:9a:03:7d:a6:14:33:36:0b:37:
72:83:1a:20:dc:ce:26:b8:dd:2f:ae:ce:57:a4:97:5e:50:96:
64:9c:10:60:b7:86:92:70:39:c0:9c:4b:22:ab:a0:36:08:0f:
31:09:37:0c:d0:8a:dd:55:3d:02:5f:68:e2:34:85:6c:7e:58:
6c:64:41:57:26:10:ff:66:70:6e:64:71:b4:44:25:1b:96:21:
eb:bf:5a:1e:3e:26:c4:9e:7a:7f:3b:e6:bc:2d:60:fe:3c:d0:
2a:d1:71:f1:ea:c7:42:27:f0:dd:33:ef:8d:84:0c:91:ac:7c:
23:03:f0:6e:a8:09:8c:7d:56:4a:fc:04:bd:c5:09:e9:50:9c:
b0:97:46:48:b7:5c:21:2d:2a:f1:0e:d4:eb:03:86:aa:a1:23:
4d:29:df:b6:19:f3:ee:65:c6:62:d4:01:0a:66:b7:d6:eb:79:
a6:0a:9c:e3:64:44:83:92:4e:fa:4f:22:57:0f:08:df:f2:34:
4e:f9:48:db:78:d8:b5:d8:28:1a:43:14:e7:5d:2a:6e:77:f9:
ce:2e:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:44:57 2025 by rpki-client