Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/HcjonuP_K5oeTWje4Z26Ql8D6Jg.roa
File: HcjonuP_K5oeTWje4Z26Ql8D6Jg.roa (raw, json)
Hash identifier: 56xd4JqEWrZWObkxDHwPGzg2TcnQCjl6nXzAXtbQyEE=
Subject key identifier: 1D:C8:E8:9E:E3:FF:2B:9A:1E:4D:68:DE:E1:9D:BA:42:5F:03:E8:98
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 0182455659D9ED59C1A22E819DDC4A826ABC
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/HcjonuP_K5oeTWje4Z26Ql8D6Jg.roa
Signing time: Thu 28 Jul 2022 15:04:23 +0000
ROA not before: Thu 28 Jul 2022 15:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30768
IP address blocks: 193.19.83.0/24 maxlen: 24
193.19.82.0/23 maxlen: 23
193.19.82.0/24 maxlen: 24
194.165.1.0/24 maxlen: 24
194.165.0.0/23 maxlen: 23
194.165.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:56:59:d9:ed:59:c1:a2:2e:81:9d:dc:4a:82:6a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Jul 28 15:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dc8e89ee3ff2b9a1e4d68dee19dba425f03e898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:bb:3e:b3:75:fc:ad:f4:c1:44:15:52:33:
62:f6:82:19:81:79:34:5e:80:e1:0c:be:a2:1b:e3:
af:81:e9:af:99:09:85:ac:10:21:31:f8:de:27:34:
a3:e4:34:41:03:43:b0:16:1d:1d:f5:d0:9d:f4:d1:
ac:22:0f:1d:9c:34:e8:67:25:dc:c3:cf:7f:8f:39:
65:03:39:f4:40:55:7d:d8:b9:88:57:01:f2:1c:d7:
df:21:dd:85:08:77:da:81:16:d4:4a:41:46:fa:69:
d0:90:b9:2e:ad:1c:95:eb:3b:a7:b9:6e:fd:38:cf:
22:61:b2:4c:33:33:cb:17:81:35:0b:41:d3:f5:93:
87:f3:52:1d:0d:24:04:ef:9f:9b:23:09:1c:5d:51:
f7:32:ee:75:2d:4b:95:43:57:30:a8:d9:1c:20:bb:
09:c3:66:f0:48:3d:0a:a6:0a:9b:64:74:97:19:f5:
c2:86:ea:3f:c4:c0:06:55:a7:64:27:51:99:86:ba:
e2:08:f8:04:55:7a:27:8e:d2:de:6b:fd:96:45:8b:
17:49:60:58:d2:6e:a4:ff:9f:cd:d5:c7:e7:dc:65:
e3:ba:8e:0c:00:24:53:b2:51:6d:8d:ff:6e:dd:af:
53:37:1b:d9:3f:07:dd:f3:c8:f2:18:db:b0:63:dd:
f7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C8:E8:9E:E3:FF:2B:9A:1E:4D:68:DE:E1:9D:BA:42:5F:03:E8:98
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/HcjonuP_K5oeTWje4Z26Ql8D6Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.82.0/23
194.165.0.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:cb:7a:11:e8:b9:e0:a0:ac:fd:ea:a5:fb:6b:59:19:53:40:
10:9b:17:44:c5:eb:57:c2:8e:c4:47:8e:bb:e2:94:57:c4:2b:
7d:fa:0f:df:3c:f3:c0:40:91:be:3a:5f:f7:ae:76:e8:f5:47:
fc:50:c3:81:88:a0:a3:60:0d:d8:a0:dd:e1:f8:19:fd:c8:56:
c7:01:ee:3d:a8:b1:65:54:f5:8c:d5:3d:0c:66:9d:33:8e:26:
70:7d:04:a4:85:65:67:c5:16:69:f8:a6:65:fd:31:c9:e9:3b:
44:42:db:04:ea:cd:fc:53:10:b6:18:a9:72:33:1b:81:ac:83:
37:90:9f:98:d4:3e:4b:16:ed:db:10:88:83:af:3c:69:cc:d5:
df:a3:81:4b:59:c7:22:f2:34:50:7e:96:08:80:ee:22:99:dc:
01:7b:64:dd:5f:d8:39:ef:11:65:e8:04:00:2b:c9:fe:37:b3:
ee:b9:bc:e3:8d:c9:13:e0:8e:0f:a6:2d:65:18:21:ef:2e:d1:
5d:35:2f:61:9f:ac:b1:44:9c:38:60:46:6c:94:46:a8:1e:df:
ec:e4:d5:63:7b:4e:c5:15:44:4a:96:60:00:2b:cd:96:fe:6c:
d7:a9:99:f7:7e:6e:60:31:af:64:a3:64:44:5f:b0:dc:ca:b2:
a7:e7:a7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:55 2025 by rpki-client