Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/U4ngnzK8YgiDfH2feZf2700doNk.roa
File: U4ngnzK8YgiDfH2feZf2700doNk.roa (raw, json)
Hash identifier: thCRIYHeFrpUORFKgblnsKj1G4Hi0fXuahS4j5bBUCA=
Subject key identifier: 53:89:E0:9F:32:BC:62:08:83:7C:7D:9F:79:97:F6:EF:4D:1D:A0:D9
Certificate issuer: /CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Certificate serial: 018570DE45EBDB88480856C2A151817CE87E
Authority key identifier: 1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/U4ngnzK8YgiDfH2feZf2700doNk.roa
Signing time: Mon 02 Jan 2023 05:04:53 +0000
ROA not before: Mon 02 Jan 2023 05:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 160.78.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:45:eb:db:88:48:08:56:c2:a1:51:81:7c:e8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e6b3e17f9b9d0c313d053023425275b2745fc83
Validity
Not Before: Jan 2 05:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5389e09f32bc6208837c7d9f7997f6ef4d1da0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:f1:58:a6:4e:bb:b9:80:64:27:64:cc:12:
c8:b8:b4:f4:66:94:7b:4a:70:5d:24:c8:77:10:b2:
a9:63:45:f2:e6:d5:c8:a7:98:19:73:0e:94:7f:5f:
12:e7:2f:a2:0c:4b:99:fb:6d:ee:d5:40:91:da:78:
cd:53:73:a6:02:fa:42:f6:14:08:a4:10:8d:2b:ad:
9e:07:15:4c:e9:4c:f2:dd:51:8e:8b:39:9a:a4:24:
9b:21:73:e3:de:fd:d7:fa:ee:40:86:be:f8:c4:5c:
9f:01:76:3b:69:36:1e:7d:83:2e:50:1f:bb:d0:c6:
2e:a6:6a:08:0e:c5:43:e3:cb:ea:c8:b7:04:43:93:
ac:4f:e6:b2:87:76:34:2d:b8:7b:28:56:71:b3:54:
90:d1:3a:55:32:6e:ea:b6:80:90:01:d0:9d:f5:f2:
42:b3:29:dd:da:c1:26:38:41:83:c1:84:6f:f7:6e:
dc:ea:b7:71:b6:5a:e4:3f:5f:5e:55:33:1f:83:83:
8e:b5:f2:40:4d:59:e5:e5:f0:0d:36:80:26:d9:26:
c4:49:80:dd:86:f8:d6:4d:96:5d:dc:79:02:4b:10:
ca:38:74:4d:2b:ef:aa:5c:44:2a:4f:21:9b:46:29:
6d:6a:12:9a:0f:b1:84:7d:f0:4c:ef:bb:f8:e6:71:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:E0:9F:32:BC:62:08:83:7C:7D:9F:79:97:F6:EF:4D:1D:A0:D9
X509v3 Authority Key Identifier:
keyid:1E:6B:3E:17:F9:B9:D0:C3:13:D0:53:02:34:25:27:5B:27:45:FC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hms-F_m50MMT0FMCNCUnWydF_IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/U4ngnzK8YgiDfH2feZf2700doNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/56d200-416d-4430-85c8-87d3e181e594/1/Hms-F_m50MMT0FMCNCUnWydF_IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:3d:69:99:ce:a2:4e:6b:7e:4d:88:1f:0f:a8:e8:2f:b4:b2:
7a:7c:ab:72:87:bb:f6:24:d7:c5:20:5a:e7:27:bb:93:11:98:
92:0b:85:73:a8:6a:aa:a4:63:56:e0:70:6a:98:d2:df:3c:8c:
2b:ad:17:2b:f8:75:6c:2b:ae:12:06:1b:b0:d4:61:f2:e9:1a:
4c:60:94:ec:6b:36:6c:bf:32:49:0a:9d:3a:11:54:11:a9:94:
db:e6:83:be:09:c9:7e:61:33:31:43:a8:b1:64:61:d9:8f:db:
e6:9a:28:fb:c0:5c:57:b3:93:39:44:d5:60:cf:7e:0a:ea:19:
45:f7:76:3a:26:38:86:a0:63:0c:cc:11:0e:71:e1:93:0d:dd:
4a:25:09:88:51:49:b4:8d:bb:b2:8f:f5:70:16:ec:49:2b:47:
f4:ee:75:b9:71:97:92:f5:05:48:92:50:04:66:c8:36:66:27:
77:4f:33:ed:98:72:52:9f:d8:34:cf:5c:e3:bc:79:d6:ca:4c:
c0:81:44:36:d8:f9:6f:52:97:37:72:07:3c:1d:39:1b:dc:17:
26:1d:a2:6d:ba:5a:a2:a4:e1:bc:ba:2a:d5:0d:10:1a:00:4b:
60:2e:ff:36:77:67:d7:72:59:4a:0a:be:5a:5a:90:af:21:1b:
ad:ba:2a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:51 2025 by rpki-client