Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HPxCzDlRB9vUzIMx1BtBo_h8hTI.roa
File: HPxCzDlRB9vUzIMx1BtBo_h8hTI.roa (raw, json)
Hash identifier: K2i/SM4FcvMdkbkOvf+WpkQiRPcBB570F69NlJuZxxE=
Subject key identifier: 1C:FC:42:CC:39:51:07:DB:D4:CC:83:31:D4:1B:41:A3:F8:7C:85:32
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01893ECF7712281AAF54CABA38DD01F0AA22
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HPxCzDlRB9vUzIMx1BtBo_h8hTI.roa
Signing time: Mon 10 Jul 2023 07:58:51 +0000
ROA not before: Mon 10 Jul 2023 07:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32489
IP address blocks: 2a13:cf00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:cf:77:12:28:1a:af:54:ca:ba:38:dd:01:f0:aa:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 10 07:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cfc42cc395107dbd4cc8331d41b41a3f87c8532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:98:f0:05:72:9b:f9:03:ec:d6:32:a2:61:
1d:c8:72:d8:b6:13:c1:55:71:a2:87:8c:ec:3f:6e:
c3:74:5a:30:1f:9e:c6:80:ce:31:3a:3b:2a:8c:97:
4e:22:33:c5:5a:d8:3c:1b:40:95:e6:49:e8:37:8d:
04:74:4f:50:29:df:a0:a1:fd:d7:7c:df:b1:f1:9f:
7a:8d:73:eb:81:ad:2e:ad:59:07:85:46:a1:97:10:
f4:6b:2a:2f:e8:db:66:c2:4c:7a:0d:23:91:5a:4b:
e8:88:e2:3c:9e:a1:4e:60:a7:49:ce:29:80:fa:b0:
00:13:d8:07:3e:17:bd:1b:0f:3f:52:41:3d:de:e4:
50:e6:76:b2:9d:17:0c:1b:0d:58:f5:5c:a9:f3:9d:
1b:9b:f2:21:50:83:ec:08:5f:a8:c6:17:c4:81:a4:
2d:51:07:0c:bb:3d:89:5b:22:a7:fb:7f:0e:1e:c4:
85:22:d0:bb:82:62:64:76:99:ea:eb:72:96:39:14:
d6:51:2b:c7:76:f9:d6:43:cc:73:89:49:19:d2:96:
04:ee:1b:a7:75:00:e9:81:59:ba:91:b7:e9:10:54:
7c:b4:c1:b7:c0:f7:a5:07:8b:2c:e7:20:e4:5e:9c:
35:74:41:61:85:b3:ff:06:2b:86:65:8f:61:7f:5d:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:42:CC:39:51:07:DB:D4:CC:83:31:D4:1B:41:A3:F8:7C:85:32
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/HPxCzDlRB9vUzIMx1BtBo_h8hTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
b6:27:9f:76:cd:0d:51:fc:f4:95:80:4c:23:d1:e5:91:86:fc:
06:5a:7f:90:5e:51:30:93:e4:b4:5c:6c:53:bf:34:5e:09:e5:
94:6b:b0:64:6c:42:c2:d9:a0:36:c8:22:dd:f2:30:6d:8a:fe:
68:be:0d:cf:26:9d:80:68:85:c2:81:9a:27:45:10:2d:b4:ff:
a5:d4:e8:a2:75:6b:53:12:84:9b:c5:9a:d8:7e:62:97:d7:d8:
37:ca:a9:98:6c:5d:7e:0e:6f:6f:0e:4a:87:3c:fd:9f:54:70:
3a:a2:4c:ff:90:8a:6b:cc:2b:89:cb:09:8f:87:bf:67:81:5e:
1c:90:84:da:58:fb:9a:86:a8:ae:82:25:eb:8e:e0:f4:90:b1:
ed:33:0f:89:12:a8:53:6a:7e:04:19:cf:74:28:36:1d:a5:56:
99:95:82:69:54:1a:8b:06:65:ed:e3:0b:af:8c:eb:5d:47:a8:
3d:76:12:00:57:8f:1f:e8:df:12:46:3d:48:28:a7:4a:17:6d:
cd:8f:6e:11:4c:2b:9c:c8:be:f2:23:46:d9:b7:6e:9a:8d:f4:
9b:59:10:b9:e8:17:ce:65:8b:08:ac:4c:b5:e1:a9:cd:4f:78:
75:00:ee:c7:e8:49:14:4f:f5:a9:e9:ca:2d:72:05:f6:00:7e:
a7:6e:08:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:15 2025 by rpki-client