Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/HlzGYmmhVX-DHBxcchtnuwZ8NV8.roa
File: HlzGYmmhVX-DHBxcchtnuwZ8NV8.roa (raw, json)
Hash identifier: 0DI3DhGSUK/DvNt66hqn+5uM/6YIzGpB+cU5T+bFVl8=
Subject key identifier: 1E:5C:C6:62:69:A1:55:7F:83:1C:1C:5C:72:1B:67:BB:06:7C:35:5F
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 0B7E117D
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/HlzGYmmhVX-DHBxcchtnuwZ8NV8.roa
Signing time: Sat 01 Jan 2022 12:03:34 +0000
ROA not before: Sat 01 Jan 2022 12:03:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7007
IP address blocks: 2a0c:d2c6::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192811389 (0xb7e117d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 1 12:03:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e5cc66269a1557f831c1c5c721b67bb067c355f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:85:0b:2e:24:24:a6:a7:f1:8a:dd:4e:9c:
1e:7b:8e:da:cc:05:fe:6d:2f:08:69:fd:d6:04:ca:
00:c0:20:6b:6f:8e:6f:89:18:39:7d:81:c5:08:68:
02:4a:f2:1b:c0:4d:12:b1:a9:73:e6:d9:e3:04:7e:
f9:1e:f4:d0:5d:88:b8:b3:18:24:0a:72:87:27:1b:
10:f0:aa:10:e0:22:57:1f:75:22:04:da:52:11:07:
50:93:67:8c:e7:03:e9:5a:de:c1:c8:11:52:ae:16:
c5:e4:a1:b4:74:db:f8:08:80:58:54:07:e9:3c:65:
8c:fb:ae:ec:cf:7a:f5:90:3f:d8:5d:15:2c:de:91:
84:a9:7b:6b:14:18:7b:b2:62:3b:ad:0f:80:7a:55:
ff:7f:29:ff:10:3e:00:fe:0c:c9:e5:7d:2c:f8:f7:
7b:f0:67:c3:82:0d:8c:60:98:3e:3a:9b:84:d4:49:
f9:3a:ca:70:e1:db:23:46:c9:56:db:c5:de:a9:09:
34:dc:da:e3:23:e2:64:47:60:b1:a7:3c:58:38:d4:
1d:f1:da:83:5b:ed:df:70:92:c4:80:6a:dc:84:19:
35:2d:d2:2c:a8:6d:34:45:83:1a:e7:b3:2f:e3:8e:
ec:bc:07:3a:dc:36:0d:63:f6:a6:3a:44:1f:7c:10:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5C:C6:62:69:A1:55:7F:83:1C:1C:5C:72:1B:67:BB:06:7C:35:5F
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/HlzGYmmhVX-DHBxcchtnuwZ8NV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d2c6::/32
Signature Algorithm: sha256WithRSAEncryption
2b:74:32:74:f5:e5:ca:a7:48:dc:a0:44:c5:e1:aa:3b:a0:29:
9f:9c:d6:03:f6:2b:12:07:d2:5f:f3:d3:87:ea:94:0c:37:61:
cd:7b:87:99:37:73:94:21:81:8f:f1:2e:2c:2c:c1:4a:1b:8b:
8d:1b:95:8c:00:08:39:f5:44:c5:fa:2f:e4:c5:5e:07:45:10:
a0:a4:13:05:c0:d2:43:b0:0d:92:0c:1c:e7:64:19:f0:c7:59:
7b:21:f5:ca:dd:2b:25:8b:bc:c1:a9:2b:a9:04:88:c6:03:17:
10:60:92:5a:48:6e:e2:43:a3:ce:2b:3d:44:1b:84:24:9c:eb:
81:27:fd:d7:ac:f8:3c:9f:13:38:96:9e:cb:69:94:d5:79:3b:
fb:e0:5a:e6:f7:66:60:19:de:18:07:d0:be:d2:ba:1d:9d:60:
15:f2:2b:bd:a0:c7:53:b5:72:f0:ca:3c:65:98:13:e9:4c:25:
c7:32:87:c5:76:77:53:72:b2:79:da:bb:52:7e:38:c7:2b:8c:
1c:a7:75:06:13:2a:ce:ba:5e:bc:3d:b2:98:51:65:5e:1f:9a:
81:49:c1:b6:15:a2:50:ba:67:c8:73:14:3f:5c:f9:4d:60:9e:
19:d1:82:3b:a8:85:12:7a:05:d4:4e:c2:21:7b:e1:f9:71:b0:
25:70:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:21 2025 by rpki-client