Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/hiqzlAewq3tngd435BcCPOU5U3s.roa
File: hiqzlAewq3tngd435BcCPOU5U3s.roa (raw, json)
Hash identifier: FDOJgDy16n89x+t3hSpPhnh9GoBJDGCG88nerwE+N4k=
Subject key identifier: 86:2A:B3:94:07:B0:AB:7B:67:81:DE:37:E4:17:02:3C:E5:39:53:7B
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 5F5031
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/hiqzlAewq3tngd435BcCPOU5U3s.roa
Signing time: Sat 01 Jan 2022 01:01:44 +0000
ROA not before: Sat 01 Jan 2022 01:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200023
IP address blocks: 146.19.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6246449 (0x5f5031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jan 1 01:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=862ab39407b0ab7b6781de37e417023ce539537b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:19:67:ff:ba:c5:79:30:57:e5:2d:b0:cb:
9b:b0:1d:69:b5:b5:c1:7d:65:2f:6e:e2:83:8c:c0:
73:e3:0e:34:73:c0:be:6b:5c:fe:5d:94:42:9f:e8:
46:85:5d:fb:a5:ee:bb:78:10:a6:8b:12:7d:48:bb:
37:d4:14:ed:42:55:93:2c:51:3f:ac:d2:11:3d:9d:
59:a0:50:d3:6b:3d:2a:47:7e:2f:47:8b:fc:18:de:
dd:34:09:67:4a:21:f4:0f:b4:f5:9d:3e:64:e8:4b:
0b:34:02:9f:a8:dc:5d:4e:06:76:1b:19:f4:d4:fd:
5a:73:99:55:0a:2c:ba:42:81:ee:a0:8e:a8:58:80:
1e:74:3d:8a:66:fa:6b:97:1d:43:6e:f2:35:cd:7e:
36:58:1b:8d:fc:62:b6:9d:27:2f:b1:5f:d3:3f:42:
93:fd:de:e4:48:ec:2e:44:ed:ba:a0:cf:48:24:93:
ae:18:e7:fd:22:56:c1:16:67:27:a4:68:d5:dc:0e:
f1:ad:e3:38:29:db:6d:53:5b:15:04:0a:ae:dd:6f:
0a:9e:55:b2:32:32:18:28:f7:64:5b:9b:16:9e:07:
22:96:6d:00:64:d3:73:8d:a2:31:4d:33:a4:74:45:
7a:22:34:a1:79:57:04:75:f5:79:b6:6f:9c:85:37:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2A:B3:94:07:B0:AB:7B:67:81:DE:37:E4:17:02:3C:E5:39:53:7B
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/hiqzlAewq3tngd435BcCPOU5U3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b8:38:72:f9:f2:a5:53:26:72:b1:11:0a:1a:28:33:ec:0c:
99:2f:bd:81:36:51:d3:73:59:0d:d6:fb:2f:8c:2e:1b:6c:fe:
4f:d3:ba:8b:9b:9a:ca:b0:1b:27:c8:cb:37:34:d1:26:dc:6b:
bc:ae:ee:e6:b6:7e:9f:29:58:37:a4:aa:09:6c:e9:92:a7:bb:
2b:6d:50:99:e6:9f:7d:eb:5f:d6:0c:0f:24:df:7c:c0:4f:0c:
70:75:97:3f:39:85:6c:48:70:68:09:09:a7:77:fd:ad:55:4c:
54:75:d7:ee:bd:64:a1:2a:3e:5f:7d:fe:45:bb:b6:a6:d1:86:
f1:94:8c:64:91:1c:da:6f:71:1e:18:95:4c:6f:cd:05:b9:bb:
6c:94:53:75:4f:d4:dc:b0:d8:34:3d:af:68:8f:37:b0:51:a3:
a5:a8:e8:7b:67:45:70:70:ae:ff:42:d8:73:76:d8:50:8e:4d:
c4:4c:f6:e0:ca:2e:f7:10:3e:bf:bc:52:2e:c7:7b:69:79:5d:
a9:41:60:69:fe:5a:5f:84:f6:af:6a:02:5e:2d:db:38:d2:dd:
e5:75:88:d9:20:2b:a5:98:84:26:82:73:23:bb:a9:fc:19:7c:
08:a8:17:75:cd:e9:af:9a:f5:66:1e:ab:33:00:27:7f:98:32:
97:e5:0e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:23 2025 by rpki-client