Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/HPp6wTDG0gx-z8f6RyIVP4f5T6k.roa
File: HPp6wTDG0gx-z8f6RyIVP4f5T6k.roa (raw, json)
Hash identifier: IVtYGkLVGrL/JXEkyFDnKuejvfSSTn7bZwWElx1ynp4=
Subject key identifier: 1C:FA:7A:C1:30:C6:D2:0C:7E:CF:C7:FA:47:22:15:3F:87:F9:4F:A9
Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Certificate serial: 01883FC43A270893D4274A62F33A21DA4794
Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/HPp6wTDG0gx-z8f6RyIVP4f5T6k.roa
Signing time: Sun 21 May 2023 19:23:24 +0000
ROA not before: Sun 21 May 2023 19:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207400
IP address blocks: 193.29.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:c4:3a:27:08:93:d4:27:4a:62:f3:3a:21:da:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8
Validity
Not Before: May 21 19:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cfa7ac130c6d20c7ecfc7fa4722153f87f94fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:58:6b:a0:94:40:31:e4:4d:11:37:da:94:
35:ae:f1:77:1b:78:5a:31:17:7f:b7:37:5b:a5:0e:
1c:50:96:49:9b:ae:58:24:c2:31:5b:08:14:01:4a:
74:dc:99:b3:37:cf:59:97:65:21:bf:6b:90:81:86:
15:72:40:8d:3d:dc:18:fe:65:a0:71:98:ba:18:18:
8b:41:fa:49:ab:cb:b7:22:85:30:0f:ff:5e:e9:4b:
d5:fc:2f:f4:b5:5b:e5:e4:85:12:a9:39:70:30:4b:
23:b1:6d:23:7c:88:60:32:eb:e0:84:5f:f4:d2:21:
bc:5f:50:9e:29:6b:c9:52:6c:40:0e:03:ba:99:3b:
cf:49:73:f9:a6:33:a3:e9:03:0d:81:7f:53:35:fc:
de:0f:bf:e3:4c:a3:24:12:d8:af:40:ea:1c:b9:06:
27:65:d5:b0:aa:43:d4:4d:0b:6c:4a:0a:78:04:80:
c8:ec:07:82:bc:9d:91:ff:ca:45:d4:3d:f2:cd:d1:
ce:8f:73:51:25:7f:e8:07:39:72:52:82:72:dd:e6:
20:6d:75:89:d7:bd:11:3c:61:3c:0e:db:77:39:4b:
4f:17:d5:c9:74:a9:a9:aa:48:2a:13:71:71:3b:54:
71:a5:19:52:40:1f:43:8a:e9:b3:7c:b0:2d:9a:51:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:7A:C1:30:C6:D2:0C:7E:CF:C7:FA:47:22:15:3F:87:F9:4F:A9
X509v3 Authority Key Identifier:
keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/HPp6wTDG0gx-z8f6RyIVP4f5T6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.226.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6f:1d:a6:cf:87:ee:0c:ec:fc:25:8c:52:49:d0:3f:50:bc:
7b:7f:62:b8:23:ad:aa:f1:76:40:2f:e8:b3:e5:9f:20:ad:36:
65:33:9b:fb:40:2b:ac:5d:06:06:b5:83:28:d6:86:94:76:80:
f3:76:7f:cd:d7:16:2b:d7:71:d8:6b:5a:60:35:98:ee:a7:04:
fe:f0:35:66:6d:9c:21:51:e9:fc:b4:d5:ae:5b:9f:77:67:b3:
33:5d:bc:bb:ab:d5:84:24:b4:ba:9d:a0:01:18:31:79:41:37:
72:fb:b3:9a:4d:7a:3c:b7:0f:05:2b:99:e9:d5:06:67:2e:98:
1b:bf:43:32:dd:ba:db:5a:b2:1d:14:11:7f:e2:f8:bf:c1:58:
20:32:35:6b:48:f8:d5:29:12:05:b2:30:bb:f5:c7:fd:f0:74:
33:e7:48:eb:7c:2d:a2:73:8f:15:5d:83:bc:a3:f9:8d:41:c8:
69:74:25:3a:f6:93:2b:15:a4:88:89:4e:d1:e1:5c:3c:53:6d:
fe:3d:1f:ff:8b:b6:e9:a8:f4:bc:e0:a7:2e:5e:3e:78:a6:4b:
a1:42:7a:80:94:d5:f6:5e:eb:2f:60:9d:91:58:40:86:f7:98:
ff:cb:ee:ed:ae:d2:a9:6e:9c:98:1e:33:07:35:77:b2:bd:e8:
79:15:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:06 2025 by rpki-client