Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/HcgMlFXqT-B5LVcl3yc_ZE9uhOg.roa
File: HcgMlFXqT-B5LVcl3yc_ZE9uhOg.roa (raw, json)
Hash identifier: hJ/6t+QphPQc0rFGDlgnNuxjRz6AIKNVmJrIy0CDS/M=
Subject key identifier: 1D:C8:0C:94:55:EA:4F:E0:79:2D:57:25:DF:27:3F:64:4F:6E:84:E8
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 0246D304
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/HcgMlFXqT-B5LVcl3yc_ZE9uhOg.roa
Signing time: Sat 01 Jan 2022 00:56:01 +0000
ROA not before: Sat 01 Jan 2022 00:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201129
IP address blocks: 2001:67c:2d84::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38195972 (0x246d304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Jan 1 00:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dc80c9455ea4fe0792d5725df273f644f6e84e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:bc:72:e4:d6:6a:6e:56:8d:09:51:0b:38:
73:e1:47:84:0e:df:8f:73:33:bf:7e:2b:af:90:87:
80:62:6b:42:99:7b:c0:ba:b0:78:4c:16:ea:fb:1d:
72:c6:73:d6:c3:40:92:c1:9a:35:1b:90:23:db:8b:
ba:01:a8:63:95:20:3c:89:8f:66:89:7e:69:0d:a9:
0d:c1:8f:d3:c4:8f:57:2f:db:9d:e0:f1:f3:be:d6:
89:07:0f:40:66:b2:33:de:12:d9:d8:3c:a3:a8:a0:
9c:e1:27:d2:36:1d:56:13:15:f6:01:e3:49:c2:57:
74:64:78:cf:d2:96:9b:88:3f:e6:b9:a1:da:e6:24:
b8:9a:73:b3:3f:45:6e:f9:a8:ea:5d:26:bc:9f:f1:
fd:2e:fe:76:5d:47:97:db:b0:75:c1:74:e5:53:af:
65:b4:00:43:34:6f:bf:26:44:ac:d8:78:24:fe:6d:
b2:d9:b7:cf:04:4e:4c:8f:0b:eb:0d:45:10:b1:a9:
e0:8b:50:48:9c:79:c0:ab:aa:0b:24:5c:b1:d4:ed:
3a:64:36:68:91:84:eb:bc:43:e9:75:ab:3d:b8:67:
47:1a:31:35:07:17:71:e0:76:47:9b:31:4c:82:a6:
23:d6:61:35:cd:fc:3a:90:90:e2:69:4d:a1:35:e7:
95:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:0C:94:55:EA:4F:E0:79:2D:57:25:DF:27:3F:64:4F:6E:84:E8
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/HcgMlFXqT-B5LVcl3yc_ZE9uhOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d84::/48
Signature Algorithm: sha256WithRSAEncryption
57:9a:d8:79:98:11:6f:8c:3c:5c:5c:89:62:d3:af:d5:75:e8:
73:9f:02:65:bf:a2:51:08:fa:80:f5:06:fe:be:32:19:8b:a9:
1b:fe:87:1b:bc:eb:a7:c3:44:96:e3:8a:a3:f7:b6:c5:02:7a:
de:fb:b1:7c:6b:ab:11:90:ec:0f:95:4e:ef:8f:a6:5c:10:16:
f2:02:c3:b8:a9:b5:35:28:e4:3d:bf:41:10:08:ed:44:33:b2:
8e:6e:41:d6:c2:68:06:b0:07:c1:90:12:e5:16:14:c2:db:f7:
43:61:f4:15:2d:01:c7:25:fa:32:fa:40:ab:85:57:f6:d0:8a:
f7:bf:1a:b7:c2:56:f6:bf:2f:30:52:6a:ae:d7:4d:cc:e8:df:
f4:95:ab:06:83:1f:43:80:23:97:1f:c1:02:5a:75:be:75:da:
3c:cc:ad:e7:7f:b0:d5:ed:1c:3c:a7:f6:51:a1:ce:8e:24:38:
60:b9:c9:75:09:df:a6:ac:f5:fa:bb:16:98:a1:73:a8:40:bd:
13:78:f9:70:02:9a:87:79:b8:3d:bc:7d:80:55:50:ef:3d:70:
99:50:01:bb:7c:e3:1c:fd:b4:e4:54:ba:c5:cf:bf:39:8c:13:
aa:de:5f:6c:50:61:96:97:50:ad:98:28:33:0c:1f:32:e6:1f:
89:9b:54:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:26 2025 by rpki-client