Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/HC0YRU2P-21ja5-GoZ1AeZBPH1s.roa
File: HC0YRU2P-21ja5-GoZ1AeZBPH1s.roa (raw, json)
Hash identifier: 21L8MedM16b3SBMM0pvsFMJbmS3CzIucgqiuzTZk4BU=
Subject key identifier: 1C:2D:18:45:4D:8F:FB:6D:63:6B:9F:86:A1:9D:40:79:90:4F:1F:5B
Certificate issuer: /CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Certificate serial: 0185EDD92011E172A5C06BB1F1DEE649A58A
Authority key identifier: 32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/HC0YRU2P-21ja5-GoZ1AeZBPH1s.roa
Signing time: Thu 26 Jan 2023 11:31:47 +0000
ROA not before: Thu 26 Jan 2023 11:31:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51942
IP address blocks: 2001:67c:648::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:d9:20:11:e1:72:a5:c0:6b:b1:f1:de:e6:49:a5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320e7c0ceb4ba2a6f4b96fc4bae1abb853035aba
Validity
Not Before: Jan 26 11:31:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c2d18454d8ffb6d636b9f86a19d4079904f1f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:f7:c5:6b:f0:77:07:81:9c:90:c4:a2:73:
11:13:9e:ef:10:41:5a:c9:05:63:d9:b2:34:7f:d0:
7a:6e:f5:f1:ce:95:b6:62:2d:7e:ec:3b:fe:c7:2b:
1a:02:9a:9c:d1:44:a9:ce:34:50:8d:49:39:eb:81:
be:95:cb:27:f0:7c:d5:fd:bd:22:bf:1d:1f:40:e5:
ef:6a:98:ca:16:60:6a:29:0f:9c:1d:b9:9e:d9:91:
37:52:4a:0b:92:32:c4:fa:70:1a:33:a6:3d:8d:97:
d2:64:af:f8:be:bd:81:97:f6:24:02:32:59:0d:48:
40:21:2a:4d:0c:38:03:97:17:d3:3a:2e:27:1f:4b:
1b:16:dc:4a:d4:c7:ed:dc:22:0c:0e:c6:82:0c:5e:
7c:5a:e8:12:b7:27:f1:24:02:15:bc:d1:79:37:cf:
bc:4b:34:e4:6e:9a:aa:8a:b6:39:36:43:d9:59:af:
0c:1c:95:31:34:0f:1c:da:24:8b:b9:30:8f:c9:53:
ff:ec:34:72:7d:cf:cf:b7:ad:b8:b6:57:43:8a:5a:
93:12:cf:58:a9:c5:28:a3:84:96:a9:63:70:4a:2b:
49:69:07:71:2a:db:45:f7:90:52:69:da:b6:06:84:
b8:95:0b:25:86:ce:25:07:1a:4e:fd:b0:25:cb:f9:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:18:45:4D:8F:FB:6D:63:6B:9F:86:A1:9D:40:79:90:4F:1F:5B
X509v3 Authority Key Identifier:
keyid:32:0E:7C:0C:EB:4B:A2:A6:F4:B9:6F:C4:BA:E1:AB:B8:53:03:5A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mg58DOtLoqb0uW_EuuGruFMDWro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/HC0YRU2P-21ja5-GoZ1AeZBPH1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c66bc8-f206-43d0-94be-18aadd659566/1/Mg58DOtLoqb0uW_EuuGruFMDWro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:648::/48
Signature Algorithm: sha256WithRSAEncryption
7b:97:a0:0a:96:d3:a3:26:83:46:cc:60:39:ec:cd:5b:2f:e2:
d6:3d:5f:c8:17:1d:61:16:3c:8b:39:f9:48:e9:8e:f2:4c:f3:
5b:24:b0:7e:c5:74:04:9c:3e:62:e2:e7:1d:46:f5:10:13:9b:
f5:b4:e0:70:6f:2c:4f:25:df:cb:4b:d3:93:a7:04:25:e8:79:
02:30:7c:68:ac:de:af:0f:80:f7:22:c7:01:99:5c:e4:9c:e8:
94:60:0e:7c:0b:b2:ab:b7:d7:c4:41:69:9f:ce:55:58:f0:f9:
10:45:67:bf:0b:05:ee:10:29:0a:98:da:f3:62:69:43:1d:10:
0e:2f:a6:32:da:58:13:92:ed:e6:15:82:44:78:8a:44:98:0c:
63:4f:43:64:00:86:44:73:68:1f:e0:10:3f:27:fa:98:bb:ae:
b8:1f:37:30:29:06:9c:db:53:ab:ea:bb:23:45:98:3f:46:99:
22:7c:c8:0f:5a:bb:92:e4:c0:6d:bc:ba:ca:c3:f5:5e:fa:97:
af:ed:2f:d5:9c:d0:3a:79:9e:38:3c:c7:30:f1:8c:fb:68:3a:
57:d6:7f:14:32:02:c9:8d:7d:42:5b:1f:15:ce:d6:ab:3c:b7:
9c:cd:65:41:8e:66:65:ae:6a:3f:2d:10:b8:33:d6:3f:8f:cc:
c4:55:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:37 2025 by rpki-client