Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/Hl_vTWYYmqwRv46JidSuv3tJiGU.roa
File: Hl_vTWYYmqwRv46JidSuv3tJiGU.roa (raw, json)
Hash identifier: xVZfOXmOkZ02owaoGNm+7MNNBro8FEyZcGYQ1FeTqDc=
Subject key identifier: 1E:5F:EF:4D:66:18:9A:AC:11:BF:8E:89:89:D4:AE:BF:7B:49:88:65
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 0188E1F788C3678DE7A1537E2FDDB34A959F
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/Hl_vTWYYmqwRv46JidSuv3tJiGU.roa
Signing time: Thu 22 Jun 2023 07:17:55 +0000
ROA not before: Thu 22 Jun 2023 07:17:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198441
IP address blocks: 83.139.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:f7:88:c3:67:8d:e7:a1:53:7e:2f:dd:b3:4a:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jun 22 07:17:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e5fef4d66189aac11bf8e8989d4aebf7b498865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:23:8e:fb:6b:b8:52:af:0b:6d:98:7e:58:b0:
99:f6:4f:2b:c6:b8:30:90:72:9b:62:d3:2a:c5:84:
7f:32:2c:32:ab:1a:29:12:27:ad:da:f2:29:b6:4b:
34:ea:d1:d5:6e:06:75:90:8e:07:63:f7:e2:d3:12:
c1:de:dc:17:6d:95:6f:cf:4e:c6:9a:2f:c3:4d:c2:
08:65:cf:fc:1c:2d:df:25:d9:4c:de:da:0a:15:e4:
3a:8e:fb:d5:cf:7b:10:ea:27:f8:b4:5f:4e:a4:c6:
d6:bc:5f:98:e9:fa:c8:a0:c0:55:2c:93:07:cb:38:
fc:4b:97:6d:76:59:bc:7f:f7:2a:06:63:7c:3e:98:
39:77:6b:74:a5:60:92:c9:d1:73:ec:88:96:1f:48:
72:69:e5:05:80:12:09:d1:15:cc:c4:e1:22:87:ad:
19:e9:ab:a6:53:20:c0:27:6d:2c:a7:04:97:1f:cb:
da:10:14:4c:f9:fa:8f:e5:57:d9:2c:52:46:30:14:
03:a3:f8:2e:e5:c7:e6:9d:29:4a:06:10:4c:12:bb:
aa:1a:bd:70:17:bb:f6:ca:cc:78:dd:04:22:04:47:
2a:81:e5:3b:5f:28:0d:a7:17:75:8b:ea:02:1a:62:
55:6d:29:7d:1b:5b:d6:7f:bc:cf:b7:40:db:22:10:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:EF:4D:66:18:9A:AC:11:BF:8E:89:89:D4:AE:BF:7B:49:88:65
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/Hl_vTWYYmqwRv46JidSuv3tJiGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a1:d3:cb:ea:d7:25:78:c5:03:04:f8:16:4a:d6:33:c1:5b:
9d:48:f5:66:6e:85:19:a0:d5:eb:29:38:00:d4:41:94:53:e6:
83:27:ed:5f:81:a9:3e:fb:ab:6d:6a:8b:48:00:df:6e:17:c2:
05:58:f2:d2:a3:f5:d0:5e:5f:d1:62:35:e4:3c:c1:28:b6:2f:
09:7b:db:d5:91:b2:65:bb:f8:1f:8c:13:12:77:6f:0f:a6:03:
4a:74:ce:3f:76:17:1a:2f:cc:98:7d:29:48:fb:f1:f8:fd:20:
a9:b0:08:a1:08:9c:c6:c1:74:0e:a0:1a:c9:3f:98:6e:0f:81:
cd:5b:c1:a7:2e:f2:6f:9e:00:72:18:06:c6:1b:3c:f2:cc:27:
f6:a0:c2:c6:a5:95:da:4b:24:a5:a9:40:cf:76:39:12:f2:d2:
51:c9:d9:0a:31:c0:a8:37:28:a6:3e:3c:9d:11:d9:d7:eb:8b:
31:6e:be:47:c6:4c:a3:2d:ec:92:19:32:ba:8d:9a:8b:de:40:
c7:52:f2:27:97:11:8f:50:70:60:04:2c:f9:63:51:f5:69:b9:
33:e5:07:79:7c:b3:26:e8:5b:08:87:f3:af:b6:79:05:47:f5:
3e:b8:d3:00:76:91:b9:69:01:16:7f:93:9d:b7:ca:9f:58:8a:
98:5b:6c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:03 2025 by rpki-client