Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HTLQuhf5UwptZkBqysQx8lLxivA.roa
File: HTLQuhf5UwptZkBqysQx8lLxivA.roa (raw, json)
Hash identifier: PHszlM4naL6Q3WkFaEjo7a4k3sSMi+CSaPYJw8Gml6E=
Subject key identifier: 1D:32:D0:BA:17:F9:53:0A:6D:66:40:6A:CA:C4:31:F2:52:F1:8A:F0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018413114FC265E5D95D5D5BCE5EA553EF08
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HTLQuhf5UwptZkBqysQx8lLxivA.roa
Signing time: Wed 26 Oct 2022 06:53:32 +0000
ROA not before: Wed 26 Oct 2022 06:53:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198700
IP address blocks: 37.16.86.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:13:11:4f:c2:65:e5:d9:5d:5d:5b:ce:5e:a5:53:ef:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Oct 26 06:53:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d32d0ba17f9530a6d66406acac431f252f18af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:0f:f1:21:22:13:20:16:21:26:29:02:b4:
1d:f9:0e:38:d3:49:65:70:15:5f:e2:d0:00:4a:db:
d7:1d:77:ff:de:0d:6c:e1:c3:ea:72:e0:23:03:aa:
14:e2:90:e1:08:78:75:83:eb:72:82:a1:90:1f:1a:
8a:c3:d0:82:81:d4:94:bd:6c:e0:fa:a6:e4:ec:0a:
57:2c:5d:b6:ba:00:bd:5c:47:61:ff:1d:10:0f:08:
53:1e:76:e5:da:e2:27:bc:17:d4:be:8d:0a:94:6a:
86:96:1f:ea:a1:14:b0:8e:c2:65:3e:69:3d:42:1d:
8a:56:b1:1f:f5:fa:65:02:a3:ab:81:70:1e:54:cf:
5e:c0:65:b3:86:1c:76:04:60:2a:5e:04:3b:0f:05:
55:f7:91:2f:9a:d7:79:ac:eb:07:56:1e:8d:da:b0:
be:8a:7b:1a:70:97:59:03:29:8e:74:32:f9:68:ba:
c0:bd:34:1c:b3:94:2e:3b:4b:b9:99:ea:6a:b6:41:
87:72:c9:63:21:80:7f:4f:14:65:67:09:0c:b6:d8:
99:4a:f5:92:04:f7:5e:a4:79:99:7f:2d:10:e7:88:
27:e8:4a:8d:98:d1:a8:36:2d:70:b5:e7:37:8d:cd:
60:e0:ab:e0:79:e9:87:b7:14:db:84:57:7b:14:3d:
71:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:32:D0:BA:17:F9:53:0A:6D:66:40:6A:CA:C4:31:F2:52:F1:8A:F0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/HTLQuhf5UwptZkBqysQx8lLxivA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.86.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c3:6d:ba:67:b4:30:d3:15:f2:a5:b7:a8:a4:38:5e:e5:a1:
51:29:a8:66:5d:c7:d7:20:e1:c6:f7:ed:2e:27:73:60:6b:a5:
bb:f8:71:3b:88:2d:aa:db:9a:39:06:13:ad:6f:f1:9f:61:af:
1c:98:3f:02:30:92:50:dd:86:58:92:0a:f5:52:7f:d2:40:96:
7a:10:6e:3f:26:5e:bb:3b:cf:0d:31:a1:cf:ee:0c:05:0c:a5:
92:68:e2:4e:e4:06:fb:25:c8:a0:f4:ac:ee:cf:1c:c4:9c:00:
67:1c:a0:0d:b2:2d:26:f2:f1:34:55:ed:cd:3c:b1:0c:57:4e:
17:4d:61:18:a4:42:94:35:8f:f0:19:ae:3c:32:4d:8b:78:9c:
79:0a:d9:ec:4e:7f:44:a6:45:b0:2b:90:2e:18:da:1b:3d:c1:
10:d8:31:59:83:7f:ea:8c:c4:d9:21:88:8e:05:a4:09:5c:1b:
19:86:3d:14:db:66:6e:4f:10:db:69:0d:51:61:00:bc:b1:45:
de:b3:45:1f:01:82:39:d7:5d:b4:5c:55:de:32:23:5c:f8:17:
e6:54:57:35:af:85:be:a5:04:7f:f3:08:da:2d:a5:c5:16:43:
3e:5b:0d:ce:44:4d:41:57:79:91:f5:3a:5b:99:98:7d:8f:95:
9c:49:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:51 2025 by rpki-client