Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/HBZKRa58RvwmamgVDfmxl6l7ERY.roa
File: HBZKRa58RvwmamgVDfmxl6l7ERY.roa (raw, json)
Hash identifier: gdwG5Fljc+u6gazJ5UQAN9WQGApQ5v+QMwAmTLCeF/Q=
Subject key identifier: 1C:16:4A:45:AE:7C:46:FC:26:6A:68:15:0D:F9:B1:97:A9:7B:11:16
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 01857169BAAF5C517ED4E7D43B9E55625DAC
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/HBZKRa58RvwmamgVDfmxl6l7ERY.roa
Signing time: Mon 02 Jan 2023 07:37:12 +0000
ROA not before: Mon 02 Jan 2023 07:37:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31606
IP address blocks: 193.22.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ba:af:5c:51:7e:d4:e7:d4:3b:9e:55:62:5d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Jan 2 07:37:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c164a45ae7c46fc266a68150df9b197a97b1116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:06:cc:93:21:6b:6e:f0:9e:e9:fc:50:fb:
81:f3:81:67:e3:b6:70:a2:8b:56:1e:4a:3a:9a:2f:
91:38:f6:11:23:0b:99:dd:fa:3f:71:e1:33:59:36:
7a:46:e0:13:47:1d:3c:5d:fb:2e:09:23:48:03:55:
0e:32:3c:a6:f5:7d:b7:20:0f:47:30:58:85:63:67:
92:5c:19:49:58:4d:27:d6:1e:8b:cc:1c:cf:3f:b6:
51:66:6b:4e:47:c4:9c:f8:22:c0:92:c5:f2:08:5d:
5e:ad:17:7a:1a:ea:42:0b:aa:75:fb:38:8f:c9:f9:
d5:f0:bd:4b:3a:27:c8:90:4f:f8:58:fa:1e:88:1a:
f9:91:3b:a3:48:0e:42:f3:ca:6c:c3:f0:b7:13:47:
07:5b:e5:e9:4a:b9:58:99:51:ff:88:96:1c:dc:4e:
23:57:93:07:7b:aa:5f:54:8b:c3:dd:b7:ad:b8:9c:
ab:6f:e8:5f:de:9a:0d:ad:37:74:25:98:65:23:f1:
c4:91:5d:78:c5:79:c5:7b:da:84:54:da:d6:83:84:
c4:33:99:05:37:86:1d:89:7a:3d:91:22:e4:33:95:
5a:25:b8:f8:9c:a9:54:2b:c3:a4:2b:ba:02:b3:c5:
0c:10:04:79:21:e6:ca:6c:f6:e0:9e:90:2d:a7:ea:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:16:4A:45:AE:7C:46:FC:26:6A:68:15:0D:F9:B1:97:A9:7B:11:16
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/HBZKRa58RvwmamgVDfmxl6l7ERY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.93.0/24
Signature Algorithm: sha256WithRSAEncryption
98:42:fb:74:b4:df:c5:8e:36:f9:91:f8:d1:16:ef:9b:f0:2d:
94:da:35:b7:a0:19:6b:db:ff:d7:db:79:43:d6:95:0e:5e:14:
0c:87:50:6b:fd:bb:36:d3:f6:12:78:28:b9:4b:c7:9b:3f:d7:
bf:c1:6d:fc:8e:36:af:8a:52:ed:54:47:7b:bc:55:20:22:03:
49:68:ae:5e:16:a5:34:fb:68:62:28:68:65:3e:d1:f0:13:20:
d6:f4:ce:a6:ea:ef:c2:3c:6d:43:7f:41:0a:b3:da:54:da:03:
56:b9:a9:54:8b:39:b1:c7:51:07:47:f9:19:3d:0a:34:f2:cc:
18:c4:6a:6d:5f:f0:8c:51:fb:1a:de:63:97:86:37:6c:5a:fc:
3d:3d:63:12:17:0d:5b:f3:7a:b4:9b:2e:bd:ad:49:b4:53:e6:
49:e0:39:ac:d5:c9:73:9e:c5:64:a8:46:91:20:c3:75:f5:f0:
43:f8:5e:0c:d3:2a:b2:dd:ff:1a:c4:df:ed:bd:62:b8:81:5e:
bf:d0:60:6e:87:92:96:7e:b9:a3:5a:bd:25:71:fc:60:b4:1c:
eb:8d:63:19:ee:ae:a9:3b:6c:a3:e8:3b:0a:aa:53:cf:8f:9f:
8c:72:3c:9d:b3:0a:f8:a8:4d:d6:bf:a1:24:14:8e:a9:a8:c0:
32:ce:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:33:34 2025 by rpki-client