Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/HJ-rYjVOX-Wb5mGgWLlpiOApF-A.roa
File: HJ-rYjVOX-Wb5mGgWLlpiOApF-A.roa (raw, json)
Hash identifier: f/ehqh8B26/jyInjO7eE4jfs87tHi5CZfwUxB6Mpr9c=
Subject key identifier: 1C:9F:AB:62:35:4E:5F:E5:9B:E6:61:A0:58:B9:69:88:E0:29:17:E0
Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Certificate serial: 018746C8C101B245970E66D8A014B81FF31E
Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/HJ-rYjVOX-Wb5mGgWLlpiOApF-A.roa
Signing time: Mon 03 Apr 2023 11:02:54 +0000
ROA not before: Mon 03 Apr 2023 11:02:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 565
IP address blocks: 130.188.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:c8:c1:01:b2:45:97:0e:66:d8:a0:14:b8:1f:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f
Validity
Not Before: Apr 3 11:02:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c9fab62354e5fe59be661a058b96988e02917e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:69:c0:61:cc:bd:4d:1e:35:e2:83:cd:4e:
09:23:02:af:e6:fd:3f:43:29:f5:6f:1e:0d:b7:07:
89:a5:cc:e5:d7:10:1a:96:d8:0d:14:e3:e1:6a:87:
6f:97:c4:21:81:61:82:01:25:87:fa:6e:26:d5:cf:
1d:62:48:c3:be:86:db:dc:9d:7a:fe:ac:a4:13:fc:
51:2a:91:60:de:b8:75:28:ff:1a:95:c0:05:f7:a8:
e5:65:9a:66:1a:96:87:90:49:4e:a7:6e:bf:6a:ba:
01:1b:34:92:4f:f9:0d:10:8c:e7:17:aa:fc:87:7f:
39:26:2b:e3:b9:8f:c4:ae:df:a1:a3:74:e6:11:72:
5e:49:32:4d:64:e9:9a:63:36:32:00:a7:be:b2:da:
26:b3:c7:66:c7:49:53:f1:35:f9:c0:9d:ef:70:bd:
fb:f3:3e:ea:55:b1:92:c3:d1:e3:af:61:08:5a:69:
4d:2a:db:75:00:22:4b:0c:90:75:8f:1b:33:db:b7:
32:cc:da:2f:6d:4d:f6:59:9f:e6:3b:33:f6:1f:03:
03:58:eb:68:f9:a0:af:5a:73:ec:4b:4e:0c:94:eb:
25:85:56:23:c5:3f:0c:a7:72:d9:f0:24:ca:51:c8:
81:f1:c9:17:ad:31:d7:64:b4:50:3a:1b:40:b0:ae:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:9F:AB:62:35:4E:5F:E5:9B:E6:61:A0:58:B9:69:88:E0:29:17:E0
X509v3 Authority Key Identifier:
keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/HJ-rYjVOX-Wb5mGgWLlpiOApF-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.188.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:79:de:c3:1e:72:51:fc:8b:17:60:55:9f:d5:1b:45:94:fa:
d2:9d:d8:cd:e4:35:91:ec:52:07:87:3b:78:42:54:37:b9:ce:
0f:e5:71:fc:9b:04:fc:1c:46:29:81:5f:f2:05:e5:60:5a:f2:
a6:72:31:21:0f:8d:b5:39:94:11:5e:7e:4e:8d:d2:db:b7:cd:
3e:6c:92:9d:59:1e:c4:1c:2f:9b:d4:c9:a9:8d:da:78:a7:0b:
05:52:f0:cf:7b:d4:99:79:be:55:f4:c8:fd:6c:24:2e:cb:16:
4d:de:1e:d6:9a:91:76:f4:3a:bf:af:36:74:9d:7f:d5:53:53:
53:3f:db:3d:6c:de:f3:70:b9:d4:a2:75:6f:c4:9e:0d:75:95:
fc:fb:8a:ff:67:e6:f0:5b:8f:43:1d:b8:6a:0c:51:39:7b:56:
8f:48:ac:f8:bf:9f:80:76:34:8d:ba:3f:9b:9c:48:96:6c:6a:
f7:bc:15:52:c2:0b:a5:6d:65:7b:f2:29:03:14:cf:e6:ee:9f:
81:66:f8:c9:f4:8a:c8:5d:09:a7:66:26:e0:9b:d3:8f:1b:85:
af:fd:c7:90:01:48:25:25:48:25:98:0f:81:4e:86:25:8b:24:
5b:e1:42:95:e6:7f:b4:88:ca:41:3d:08:8c:17:9f:18:3b:ea:
cc:21:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:40 2025 by rpki-client