Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/hCmm1lezB9lphzX2rH4TdSpsQlU.roa
File: hCmm1lezB9lphzX2rH4TdSpsQlU.roa (raw, json)
Hash identifier: Urk/CcVstkfZ+fOqch6XeZZUiD/IKT3edJP8z2cEfTI=
Subject key identifier: 84:29:A6:D6:57:B3:07:D9:69:87:35:F6:AC:7E:13:75:2A:6C:42:55
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 1189C464
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/hCmm1lezB9lphzX2rH4TdSpsQlU.roa
Signing time: Sat 01 Jan 2022 10:57:29 +0000
ROA not before: Sat 01 Jan 2022 10:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48809
IP address blocks: 2a05:36c0:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294241380 (0x1189c464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Jan 1 10:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8429a6d657b307d9698735f6ac7e13752a6c4255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:3d:7d:64:41:2a:88:1e:88:5a:10:f3:d8:
37:23:2a:39:a3:e5:60:92:bc:bc:66:53:28:95:37:
15:a8:c5:36:0c:10:d2:02:d5:6a:c0:53:b9:ee:7f:
cd:6a:0f:08:0c:a3:30:46:a5:d8:08:68:f8:2b:a6:
db:fd:0f:6d:f2:a9:00:8e:cb:59:8d:08:57:0e:4d:
33:b9:62:71:d0:d3:bb:aa:fe:1a:25:3d:3d:25:df:
3b:bc:0b:88:09:a7:5b:c0:7d:46:e0:9b:ba:dc:cc:
6f:29:3b:21:ba:d2:80:6b:2c:e1:dc:0f:9e:65:e2:
3d:ff:89:55:fa:0b:ba:a7:9b:3e:bb:15:c5:cd:29:
20:6b:f4:70:21:2b:ad:01:1e:4d:00:0c:ba:68:73:
2d:f0:d6:b1:1a:4c:2b:94:72:53:8a:23:a8:ed:ac:
16:32:4d:2f:a2:fe:07:64:f5:df:ba:36:48:32:6f:
9c:3f:54:02:82:7b:30:ea:e3:9d:dd:98:7e:4c:4f:
19:cd:9b:36:56:39:5a:e2:aa:42:14:9c:1d:2f:06:
2d:07:21:22:b4:db:bc:3d:2f:9a:04:7f:f2:5e:69:
cc:e2:81:42:65:fe:0a:a1:be:ef:be:ce:34:d3:78:
a7:2f:d2:e2:30:f0:51:e2:34:e6:e6:8b:81:8e:78:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:29:A6:D6:57:B3:07:D9:69:87:35:F6:AC:7E:13:75:2A:6C:42:55
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/hCmm1lezB9lphzX2rH4TdSpsQlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:36c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
00:b1:83:55:61:83:7f:bc:34:61:69:2c:79:0f:8c:b1:fb:0b:
3d:01:3b:ea:4d:a0:4a:3c:8e:13:37:5b:db:4b:38:94:7d:7a:
4d:8b:30:85:59:fb:36:0b:a0:c6:68:a3:a7:2b:ef:99:36:80:
8c:6f:7a:9b:fb:87:b6:4a:3a:76:fa:c0:39:3b:36:d2:3b:b3:
bf:a9:67:08:c6:73:52:25:13:5d:8a:65:19:cc:77:83:a7:2e:
8e:d9:db:cc:80:54:db:ea:d8:65:20:be:e3:48:f7:b7:de:1d:
90:8d:e3:95:44:7f:53:bc:79:3f:76:2c:68:ee:06:3e:c5:3f:
35:03:1a:bb:9a:db:62:6b:83:3a:9c:70:c7:d7:cf:c1:55:d6:
b3:be:77:73:1d:7d:ba:bf:14:81:e0:35:62:78:fa:b1:e9:b2:
b3:a3:9a:e4:d2:12:a3:f6:cb:3b:30:db:cf:0f:64:6e:6f:d7:
5c:fa:4b:2c:d3:5f:90:a5:54:ab:d8:47:89:ca:dc:c1:bf:53:
cb:21:e1:38:d0:e5:bc:ad:95:b5:bd:b4:1c:15:a6:a6:e7:e2:
e0:b9:aa:52:c7:69:fe:d2:64:08:8e:24:c3:1e:0d:48:01:24:
55:cc:5e:52:4d:2e:51:f9:90:95:59:e8:58:8d:9f:5c:1f:4c:
12:cc:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:46:41 2025 by rpki-client