Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/HKrj4cqOPBQPYVRk_7CDgupMHKk.roa
File: HKrj4cqOPBQPYVRk_7CDgupMHKk.roa (raw, json)
Hash identifier: uOp1akAPCon1NiuCN6zkGP7b0tEGJc+O4p8fS3gqbH4=
Subject key identifier: 1C:AA:E3:E1:CA:8E:3C:14:0F:61:54:64:FF:B0:83:82:EA:4C:1C:A9
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0189D9E9150F57259627005D80E5726E8D58
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/HKrj4cqOPBQPYVRk_7CDgupMHKk.roa
Signing time: Wed 09 Aug 2023 10:47:58 +0000
ROA not before: Wed 09 Aug 2023 10:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.36.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d9:e9:15:0f:57:25:96:27:00:5d:80:e5:72:6e:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Aug 9 10:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1caae3e1ca8e3c140f615464ffb08382ea4c1ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:28:b7:cc:83:ef:7d:92:74:3b:5a:3e:0c:
d8:4f:4e:d9:50:9b:09:d3:4a:9b:b9:af:12:15:9e:
c5:4c:e2:1b:f4:ff:29:e3:b0:25:f3:52:c2:a2:75:
16:c5:2d:0e:f3:73:82:74:50:eb:ef:f2:c7:19:a2:
53:3f:b1:1b:db:f4:69:1d:58:6c:8e:12:e8:d2:05:
84:ee:0c:c1:10:88:3a:88:69:08:9a:24:ae:0d:20:
98:53:0e:ca:ee:50:70:e2:6d:0d:d6:78:47:9c:18:
7b:45:d4:c2:bb:8c:2c:52:91:9f:2c:0e:05:a3:e2:
2a:4b:9a:de:28:61:5d:38:fd:37:5a:3f:62:89:06:
84:73:9d:3d:8e:e9:44:09:83:93:10:f3:5f:51:fb:
93:71:55:3d:d5:5c:77:7c:ac:d3:c9:ed:16:27:1c:
b6:64:6f:9e:71:d6:44:ec:65:a4:93:22:9a:c4:1e:
7f:54:f5:f0:37:35:b1:69:c4:ef:2f:be:92:20:fa:
9c:54:f2:5a:b8:26:17:5f:3d:10:22:f6:c9:36:14:
b0:a4:d9:c2:80:dc:f3:71:a1:19:11:ca:4e:88:b8:
7a:96:df:0e:55:30:cd:36:0e:db:95:0b:8a:a2:a0:
6e:97:68:a6:12:43:41:36:eb:26:75:4a:6e:cf:a2:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:E3:E1:CA:8E:3C:14:0F:61:54:64:FF:B0:83:82:EA:4C:1C:A9
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/HKrj4cqOPBQPYVRk_7CDgupMHKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:85:2d:14:cb:a8:f2:a6:a1:f0:c2:d2:16:01:72:b0:8a:fb:
c6:4d:86:84:5a:54:47:9f:c5:38:a6:32:19:27:46:d8:0e:3d:
be:6e:13:e2:26:b3:79:91:ce:5c:40:bc:42:4d:e7:c8:77:3b:
09:0a:f8:eb:39:c7:e1:91:74:4e:3c:18:09:02:10:44:23:bd:
31:3f:47:5e:05:f6:9a:20:0a:47:4b:6e:ee:7f:e7:ce:0d:3a:
88:3e:b1:6e:66:bf:9a:b0:05:e5:14:79:02:2f:0d:0b:63:af:
89:61:d9:78:9d:67:64:50:24:9f:3b:72:d4:cc:1e:77:d5:fd:
03:65:a9:6a:20:6f:c1:1b:c9:4d:79:96:5e:49:67:23:0e:ab:
dc:a2:3b:2f:eb:dd:34:0d:7e:52:61:35:3a:0e:0d:9d:7d:3d:
ff:b7:8d:48:92:4d:ad:8d:ae:bd:af:18:b1:80:d3:42:ef:1a:
79:39:a0:19:5f:3b:63:c3:1a:91:03:5a:c5:6f:b9:55:aa:46:
a4:82:45:fa:30:cb:a8:e4:33:21:e2:96:e7:d8:bd:d2:29:b4:
13:c9:2b:34:76:c5:f7:70:f2:b5:8c:45:75:8a:ad:04:9f:db:
33:1e:a4:e2:0b:a8:fe:3d:ac:ac:71:6e:47:d7:8b:b2:c1:6e:
6e:29:6a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:26 2025 by rpki-client