Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hyRGe5bYbIBmvWLYknbeuL5fVFM.roa
File: hyRGe5bYbIBmvWLYknbeuL5fVFM.roa (raw, json)
Hash identifier: 9Pti4vN/nPZYXPGNtOTL3T3D22XVmYnKmEOIk7FWoZw=
Subject key identifier: 87:24:46:7B:96:D8:6C:80:66:BD:62:D8:92:76:DE:B8:BE:5F:54:53
Certificate issuer: /CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Certificate serial: 030DA03F
Authority key identifier: FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hyRGe5bYbIBmvWLYknbeuL5fVFM.roa
Signing time: Sat 01 Jan 2022 05:55:13 +0000
ROA not before: Sat 01 Jan 2022 05:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212034
IP address blocks: 2001:67c:2918::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51224639 (0x30da03f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc0636823a20e6026342fe8c88ea72a8f8f7a749
Validity
Not Before: Jan 1 05:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8724467b96d86c8066bd62d89276deb8be5f5453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:73:09:d2:2d:3a:46:8f:0d:e9:39:bc:69:
af:72:43:30:d1:af:2d:c6:23:fe:77:17:e8:c2:43:
9a:1c:f8:9e:a1:ea:f7:e2:29:c7:0c:c6:5d:97:63:
17:8a:b1:df:39:c2:78:a9:9e:b1:1b:e9:1c:33:5c:
19:40:e5:14:b3:68:f2:2b:07:9e:05:a3:29:60:2e:
31:e8:9b:0a:47:ba:5f:91:97:d6:8d:92:0b:af:b6:
4c:73:e0:d1:ce:86:67:1b:e4:2d:9b:1a:ed:c9:ce:
57:5d:c1:72:e6:8e:b3:9b:d9:d4:ec:fd:75:34:34:
4d:90:38:d0:12:8f:e9:d5:3c:b7:a6:2e:75:33:fd:
7b:cc:d5:e1:c3:5e:d0:17:7a:4d:c3:cc:7e:26:1a:
e5:51:0c:1a:9a:57:bd:1e:c9:19:bd:a6:58:39:d4:
38:ad:72:13:e9:02:10:0f:c7:12:6c:2e:0b:9f:ec:
5c:59:86:6a:e8:f5:53:9d:12:44:d4:d9:4a:91:84:
62:09:40:d6:62:69:40:c6:ca:39:2c:11:4a:d8:66:
51:18:49:a0:23:5d:31:ee:a6:43:b9:a1:16:c9:8a:
00:88:d5:27:b0:78:e4:89:c6:2d:d6:f9:35:d4:87:
64:34:57:a9:4b:b7:d2:4b:66:ce:a4:42:91:ec:13:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:46:7B:96:D8:6C:80:66:BD:62:D8:92:76:DE:B8:BE:5F:54:53
X509v3 Authority Key Identifier:
keyid:FC:06:36:82:3A:20:E6:02:63:42:FE:8C:88:EA:72:A8:F8:F7:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AY2gjog5gJjQv6MiOpyqPj3p0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/hyRGe5bYbIBmvWLYknbeuL5fVFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/944896-3c41-4710-86d2-005a929ac124/1/_AY2gjog5gJjQv6MiOpyqPj3p0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2918::/48
Signature Algorithm: sha256WithRSAEncryption
ae:27:a7:fc:3f:2e:37:b9:fd:08:97:2f:d6:cf:9c:bc:5e:a9:
49:e0:86:5a:4f:af:47:37:17:59:35:57:5a:d5:a3:6b:1d:72:
9e:60:d4:8d:04:b4:22:7d:78:df:26:25:e9:11:52:c2:4e:9e:
f7:a9:8e:27:5b:e8:9b:ac:c6:d3:7f:22:03:de:55:27:e4:b7:
e4:bb:f4:10:9f:7d:9d:60:7a:e0:46:d6:50:1e:3e:07:c7:19:
b5:86:51:d1:c5:d7:19:e1:85:97:42:42:c2:4b:b7:52:09:78:
38:51:8e:ac:4a:79:03:fe:74:cb:0f:1b:df:c2:cf:65:2c:fa:
19:60:05:8f:34:18:8b:54:c2:06:25:32:f5:a5:82:83:e1:eb:
4a:d4:de:2c:b0:13:91:cc:ad:59:70:e9:99:b6:0d:1d:dc:3e:
a7:d3:72:92:c4:17:98:2a:69:eb:8c:9b:f8:ae:28:27:7a:a2:
bc:80:39:35:76:ff:b9:db:23:5d:92:22:a7:27:78:ca:50:ed:
3f:8c:45:f6:32:b7:e6:64:63:dd:6b:fb:da:bc:1a:57:d6:fa:
b7:31:8d:90:58:d2:65:94:99:26:1f:fa:fa:bb:d2:2f:28:9a:
6e:ac:8d:e0:6e:ac:9c:da:48:b8:58:2c:b2:a2:ba:90:83:bc:
4f:f5:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:27 2025 by rpki-client