Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0hZ6UamXUu34LLWCh4PuB9LQtek.roa
File: 0hZ6UamXUu34LLWCh4PuB9LQtek.roa (raw, json)
Hash identifier: 7eacQrifThqjQsrqPgLBwfMHZ3gDT5//sBACZdy6vf0=
Subject key identifier: D2:16:7A:51:A9:97:52:ED:F8:2C:B5:82:87:83:EE:07:D2:D0:B5:E9
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018571DE77EFA83F286F1C9D28BA66609CCB
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0hZ6UamXUu34LLWCh4PuB9LQtek.roa
Signing time: Mon 02 Jan 2023 09:44:43 +0000
ROA not before: Mon 02 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133929
IP address blocks: 185.243.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:77:ef:a8:3f:28:6f:1c:9d:28:ba:66:60:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2167a51a99752edf82cb5828783ee07d2d0b5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5a:59:56:3b:84:6b:5d:09:c4:83:79:55:59:
03:4c:7a:1c:c8:0c:02:be:0f:1c:84:21:39:49:54:
c0:cd:94:fa:cb:ae:38:f1:ca:95:cc:47:f3:3e:e5:
45:2b:ed:2e:e6:bd:ad:68:fb:6f:78:7e:f4:28:44:
40:47:36:d8:76:12:8b:6a:80:31:b8:27:47:d4:c5:
60:ce:43:17:c5:77:af:29:d7:2c:52:0d:68:2c:77:
d9:f0:29:ef:26:a4:ed:54:a3:2d:db:12:1e:b8:eb:
b6:80:37:a8:e8:fd:f5:a3:87:97:9f:43:60:a0:8a:
66:0a:3f:4e:f8:29:0f:81:bf:be:5e:4f:98:d8:98:
c4:cc:25:86:bf:8f:42:f9:60:62:58:ee:9f:9f:31:
04:f3:c8:36:74:b4:98:8e:d3:ac:ee:3f:fb:a8:ff:
69:3d:17:91:71:68:04:46:ee:aa:96:18:b8:0e:df:
ff:fd:42:b0:18:6e:65:30:87:da:3a:77:49:f8:66:
2f:9e:d5:e6:50:2a:00:34:44:eb:a3:2f:13:07:15:
0b:23:37:c6:4d:50:a1:ad:d4:56:4c:93:90:52:34:
1c:81:2e:41:3d:a4:eb:45:52:6a:ac:ba:d2:10:2c:
6e:a6:d5:01:93:21:89:0c:14:c1:9d:7b:83:5a:7d:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:16:7A:51:A9:97:52:ED:F8:2C:B5:82:87:83:EE:07:D2:D0:B5:E9
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/0hZ6UamXUu34LLWCh4PuB9LQtek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8c:0d:60:b7:0d:36:fc:5a:4c:b2:28:04:7a:9a:9c:fb:d6:
ef:d7:66:c9:39:42:e0:cf:97:03:8f:6f:d6:ef:0d:f4:06:08:
e9:c8:b5:6e:48:87:fc:2f:7b:ad:de:a8:33:77:02:03:b1:7f:
d4:43:af:e4:1a:4d:1e:ac:e7:0b:8f:e0:27:a1:e1:10:e5:bc:
22:2d:4e:8d:22:d1:a0:3f:1c:0d:7c:9d:74:95:78:30:d4:f1:
30:81:59:92:87:59:ec:fb:41:4a:c9:38:74:71:ea:c4:06:49:
8a:8a:61:3f:ed:6f:42:fe:bb:f7:84:01:04:02:ac:30:fa:f0:
f3:e2:2c:a9:f2:2f:0a:d7:a5:11:2a:88:25:96:84:eb:91:4d:
1c:e6:35:3f:09:11:7e:05:74:7e:34:2c:ec:eb:8d:48:5c:7e:
44:11:cf:75:1c:d3:d3:03:35:64:3d:88:54:1e:fa:aa:fc:8f:
9a:fb:c2:8b:4d:a1:c8:4b:4a:f0:45:02:a6:f0:d2:38:ae:9e:
9a:9b:ef:5a:fa:55:71:0b:82:f0:39:6c:01:e1:a6:6a:c7:6d:
a9:2e:6a:4a:ec:81:4f:65:c4:1a:89:a1:c8:b7:2a:c8:ab:3e:
28:4f:c0:93:95:d0:dd:a3:c4:b8:0d:0e:24:10:a0:93:0f:89:
6d:3e:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:39 2025 by rpki-client