Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/HSQcUuYTzAAPB8NwBfQ6kABUTEA.roa
File: HSQcUuYTzAAPB8NwBfQ6kABUTEA.roa (raw, json)
Hash identifier: 6qmgC+Z5yHtCU2s1NdDNg2g/NDr4Yo6BFmDLhnflKaw=
Subject key identifier: 1D:24:1C:52:E6:13:CC:00:0F:07:C3:70:05:F4:3A:90:00:54:4C:40
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 018851DF8AB8AF2A8F376373F2BB8313E475
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/HSQcUuYTzAAPB8NwBfQ6kABUTEA.roa
Signing time: Thu 25 May 2023 07:46:24 +0000
ROA not before: Thu 25 May 2023 07:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202431
IP address blocks: 195.90.102.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:51:df:8a:b8:af:2a:8f:37:63:73:f2:bb:83:13:e4:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: May 25 07:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d241c52e613cc000f07c37005f43a9000544c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:8e:0d:82:21:68:e8:f4:1c:3b:8a:25:6a:
7c:11:a4:28:98:1d:a9:3c:e0:37:d7:cf:d1:13:78:
41:ff:09:72:c0:cc:34:2e:c5:12:5b:ca:1b:08:69:
fd:ff:80:98:24:29:2d:a2:ee:5b:72:7c:bc:cb:e4:
d4:cc:36:dc:21:53:ed:aa:c5:2e:ae:a9:9d:f2:bc:
e5:53:a8:a8:6f:9d:d4:7b:84:d3:dd:0e:ab:a0:37:
13:11:2b:cd:3e:78:6f:ba:e2:39:d8:b7:64:06:aa:
8b:c0:77:d2:b2:02:cb:c1:52:f4:3e:07:3f:a5:4f:
e8:e6:24:a4:72:e3:75:c4:61:2e:7d:07:8f:84:95:
e3:ad:35:28:a1:27:35:47:29:b9:c6:66:6c:d8:37:
a3:ba:09:96:38:1b:ef:0a:57:b9:df:01:e0:31:7e:
a9:21:49:bb:b6:cb:86:af:88:f2:6b:ad:f1:a7:84:
9d:13:23:f4:05:70:bb:f1:b8:46:2a:c2:35:07:99:
dd:a5:de:96:d4:02:05:7c:a2:3f:7d:6f:96:f0:41:
e0:e0:29:76:9e:e3:19:31:ce:ea:b7:1c:65:0d:c4:
c0:83:33:5d:4e:da:1b:86:48:24:68:e5:90:1d:77:
0b:0d:81:94:49:cd:a5:17:b9:68:a7:83:ef:a1:d1:
41:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:24:1C:52:E6:13:CC:00:0F:07:C3:70:05:F4:3A:90:00:54:4C:40
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/HSQcUuYTzAAPB8NwBfQ6kABUTEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.90.102.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:cb:92:70:c1:7c:b7:45:e8:fe:44:e1:80:b0:b2:c9:99:37:
e0:80:89:be:12:85:75:cc:85:a3:09:55:6c:8a:29:e2:44:0f:
12:23:ea:65:50:01:6c:36:50:a5:94:15:7a:86:bd:27:98:c4:
81:68:c0:aa:87:42:21:81:87:eb:c2:2f:68:b2:35:f8:72:59:
b0:5f:52:72:3b:6e:d2:e9:dc:58:66:d7:23:6e:dc:d4:6f:e7:
e6:87:01:ba:9c:a4:fc:19:5a:c0:2f:28:d1:ab:b3:c0:32:3c:
3d:ae:d0:63:75:6a:52:44:e9:9b:a0:c8:ca:ed:70:fa:73:e4:
02:82:dc:12:a2:e6:1d:21:ef:e0:8f:31:9f:14:ce:6a:1b:2e:
d1:32:5c:41:f3:7e:3f:e9:fb:4b:1e:1e:85:65:a8:ad:42:69:
13:e7:81:c8:c6:bd:e1:f2:d1:10:d5:b9:97:a1:4a:09:8e:52:
27:37:35:68:1b:9f:13:52:3a:a3:2a:fc:69:7d:95:e3:e7:b2:
0d:66:91:7a:cd:4c:04:3e:c1:99:a1:77:2c:8e:43:d3:c6:63:
e8:f8:d4:d5:cc:bf:c8:68:7c:1c:7b:a8:77:0f:3b:5e:d7:bc:
e2:63:70:f6:24:6d:bb:fe:96:8e:8c:26:c4:18:60:78:52:bc:
02:09:46:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:44 2025 by rpki-client