Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/H5jod5qzBK6cglaE4_lSJv_qjXE.roa
File: H5jod5qzBK6cglaE4_lSJv_qjXE.roa (raw, json)
Hash identifier: HeTQWuo30syLZbhexo4yc/5kimMdxHo61yaCYBdfP3E=
Subject key identifier: 1F:98:E8:77:9A:B3:04:AE:9C:82:56:84:E3:F9:52:26:FF:EA:8D:71
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 10BAA57B
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/H5jod5qzBK6cglaE4_lSJv_qjXE.roa
Signing time: Sat 01 Jan 2022 13:02:17 +0000
ROA not before: Sat 01 Jan 2022 13:02:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61256
IP address blocks: 82.160.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 280667515 (0x10baa57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 13:02:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f98e8779ab304ae9c825684e3f95226ffea8d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:46:37:8e:97:48:4b:6f:8b:92:3d:b9:b5:
53:a2:49:8c:6a:61:03:06:6c:c4:fa:20:0c:d9:ad:
d2:c5:86:23:1e:55:40:0f:ac:9f:24:2e:61:de:f3:
f4:a6:0d:e8:68:ad:1b:ca:bc:06:6a:b7:39:36:3a:
47:01:47:af:92:02:6d:b1:e3:78:4f:bf:a1:15:ed:
b1:d1:fa:4d:a2:63:e0:a3:e0:b7:a1:b5:28:ec:66:
21:23:27:f1:a6:d3:d0:d8:b6:90:7d:60:ba:32:e1:
4e:94:93:99:32:d4:c4:bb:04:21:31:0f:86:95:af:
de:bd:c1:80:6d:ed:94:e7:71:1c:27:46:61:cc:02:
6b:ac:c1:ef:47:e9:87:d2:fd:77:b0:8f:ba:ed:1f:
7e:aa:3e:95:eb:3e:37:d2:ef:fe:36:9d:3b:e1:d4:
92:e3:41:d7:99:a3:2c:7c:d0:89:a8:ba:77:e6:24:
67:3f:0c:cf:eb:1e:08:15:25:69:a2:2f:b0:8e:90:
f8:43:36:7b:d5:7f:90:f5:ce:66:5f:41:f1:23:af:
4f:5a:3b:a4:92:59:2d:36:13:53:1c:76:6c:fb:ca:
1d:df:02:c2:ee:b1:dc:4c:31:10:16:44:c0:28:d3:
d4:01:6f:7b:0a:9f:f8:06:ab:37:c5:6a:59:36:0f:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:98:E8:77:9A:B3:04:AE:9C:82:56:84:E3:F9:52:26:FF:EA:8D:71
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/H5jod5qzBK6cglaE4_lSJv_qjXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.29.0/24
Signature Algorithm: sha256WithRSAEncryption
11:33:50:ac:db:61:dc:23:e3:41:e3:41:4a:3f:38:c0:e8:51:
44:79:8e:67:06:08:35:74:a3:c6:e0:bd:6a:6c:a1:a9:27:37:
18:be:5b:d8:0c:6d:d1:3b:34:0f:bd:b9:ee:ee:86:31:f9:e4:
2b:46:8c:03:c3:d7:57:a5:cf:e1:55:2e:b5:7a:ba:cd:9a:5f:
7e:99:8e:1c:83:51:05:4f:5e:58:02:41:ba:8e:d2:b3:20:10:
c8:a5:69:38:ef:4e:a4:bb:fd:ad:d6:3c:1b:f1:5e:98:33:1f:
3a:5d:b0:64:ff:3f:5a:bd:fb:d1:db:c1:90:60:fe:63:1e:92:
3b:d2:d9:20:b3:63:78:b4:d8:59:bd:47:e0:a9:a1:6b:75:21:
23:6b:ca:77:b3:67:db:50:28:8b:d4:71:0c:8e:e9:b1:0f:27:
25:a3:5e:48:02:8a:60:08:29:3b:bb:ec:5d:4d:98:70:83:28:
54:3d:07:3b:c9:1e:d4:c5:d2:78:ad:20:81:67:6a:d8:a4:3d:
83:3c:f7:8c:4c:9c:23:98:44:e0:0c:0f:76:33:03:8b:2a:8d:
b7:75:68:b9:0c:24:82:40:4f:d2:e2:57:5b:e3:71:34:8e:47:
bc:70:37:60:bb:4b:de:26:17:ab:f4:07:5d:c6:4e:c6:56:e2:
9b:43:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:28 2025 by rpki-client