Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/HAtpVcwnB12nHX78KcAbHTPWzXA.roa
File: HAtpVcwnB12nHX78KcAbHTPWzXA.roa (raw, json)
Hash identifier: WI5vTXzynem3VNiJjuQxiVBJFRLX1XhwOciTlX6KXUc=
Subject key identifier: 1C:0B:69:55:CC:27:07:5D:A7:1D:7E:FC:29:C0:1B:1D:33:D6:CD:70
Certificate issuer: /CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Certificate serial: 0279B649
Authority key identifier: E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/HAtpVcwnB12nHX78KcAbHTPWzXA.roa
Signing time: Sat 01 Jan 2022 10:55:43 +0000
ROA not before: Sat 01 Jan 2022 10:55:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56605
IP address blocks: 80.84.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41530953 (0x279b649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8206aa3252e3ea8d684eaec7a2993513b5d2307
Validity
Not Before: Jan 1 10:55:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c0b6955cc27075da71d7efc29c01b1d33d6cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:16:fa:13:4b:ef:34:6d:3f:42:b6:c6:20:
13:ea:b8:7c:63:46:c3:47:8a:e6:11:28:d5:64:ae:
08:d8:7a:6b:32:14:8b:a2:f7:e2:06:91:09:a7:5e:
99:db:35:3a:85:6b:91:84:4c:5b:b9:d3:10:61:68:
bf:3e:72:9d:0b:ce:5d:4c:29:c4:d3:d1:7f:b7:26:
40:0c:8a:0a:07:7e:3a:b0:e1:30:97:f7:a0:6b:0d:
4d:fb:39:75:5d:ab:90:02:8c:6f:86:e0:6c:65:9b:
38:0d:5d:2a:d3:f9:b9:2e:dd:e0:0f:f1:cb:6e:a7:
2b:9d:07:b4:a4:07:de:fa:bb:f3:54:7d:7d:40:4a:
f6:d8:96:57:1c:a6:6c:77:5a:51:c7:59:cf:22:b0:
eb:b3:08:f1:3d:2f:2e:9c:a9:13:60:c0:8e:8c:8c:
d3:2d:ed:4c:a7:f0:c1:cc:ab:a1:83:7d:14:f2:f0:
0c:bb:ef:9c:84:e7:3e:2d:9c:45:2f:28:24:43:f9:
88:54:ea:91:18:4e:40:6f:45:8d:bf:e0:f0:80:fe:
06:c8:fb:22:9a:9d:ba:9b:a5:04:3b:34:1c:0c:8e:
b0:3e:48:08:33:a4:60:fe:45:5a:dd:41:c0:db:a2:
e2:3b:78:22:a9:cf:39:a5:20:b1:22:dc:e7:ce:a6:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:69:55:CC:27:07:5D:A7:1D:7E:FC:29:C0:1B:1D:33:D6:CD:70
X509v3 Authority Key Identifier:
keyid:E8:20:6A:A3:25:2E:3E:A8:D6:84:EA:EC:7A:29:93:51:3B:5D:23:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CBqoyUuPqjWhOrseimTUTtdIwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/HAtpVcwnB12nHX78KcAbHTPWzXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/47accb-6f3c-4c6c-9fd0-585eb84558f9/1/6CBqoyUuPqjWhOrseimTUTtdIwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.191.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:51:0a:83:c8:c6:6b:03:31:52:90:5e:79:9a:a1:ad:d7:9b:
9b:d4:c2:6a:3e:b7:8e:12:6a:b0:90:a3:39:32:ee:82:ba:e9:
07:95:e8:b8:ca:97:9d:ef:6c:d2:b9:5d:b8:8a:96:31:e0:e1:
1d:00:bf:e0:e9:9d:93:40:46:7b:b2:55:60:44:fb:95:59:89:
f0:79:6f:7c:76:4c:74:9a:30:81:00:cb:c0:b3:ea:37:b8:77:
75:d1:8f:52:69:1c:9d:cc:27:40:5a:98:a8:df:f7:cf:54:77:
6d:55:32:8d:9e:41:6a:7a:d3:6c:03:ca:04:fe:fb:b1:cd:82:
45:52:d7:b2:1e:d1:e9:30:7f:61:69:5c:38:56:6e:50:59:da:
74:aa:f7:d1:2e:82:8c:bb:dd:6b:6a:1e:1e:a1:76:86:4e:fe:
85:d0:d6:37:ef:ec:3d:48:b7:0f:be:b7:c8:18:5c:1f:c8:f1:
46:36:e3:e1:b9:24:7f:f3:ac:1d:96:7d:64:ac:f7:34:c7:07:
f0:e2:97:5c:bd:63:0a:bf:eb:cf:2e:4d:0e:d0:5e:b0:b9:34:
05:fa:6f:bc:ed:a0:d2:c2:e8:be:19:ba:50:02:ad:ff:5f:ff:
e9:a5:cc:75:84:b9:c7:85:e9:26:f1:3e:69:1f:92:f0:fe:51:
67:1b:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:29 2025 by rpki-client