Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/htXoMBdbX9bRncOyFKp2ZMTReXc.roa
File: htXoMBdbX9bRncOyFKp2ZMTReXc.roa (raw, json)
Hash identifier: 910VnMhdCNs2WYqqiDyJaZFyhvk4TUxpKEYKRgnuAeU=
Subject key identifier: 86:D5:E8:30:17:5B:5F:D6:D1:9D:C3:B2:14:AA:76:64:C4:D1:79:77
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01856E38B39C84D458399365DB01C0108AC4
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/htXoMBdbX9bRncOyFKp2ZMTReXc.roa
Signing time: Sun 01 Jan 2023 16:44:47 +0000
ROA not before: Sun 01 Jan 2023 16:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213169
IP address blocks: 2a0d:eb04:8::/46 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:b3:9c:84:d4:58:39:93:65:db:01:c0:10:8a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jan 1 16:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86d5e830175b5fd6d19dc3b214aa7664c4d17977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:80:42:6f:4b:3f:00:21:98:1d:5e:15:3a:
40:1e:96:41:ac:6e:d0:7f:9e:01:60:d0:b5:17:da:
57:19:39:ed:43:88:32:6d:31:f8:ab:f0:40:c3:b7:
1a:75:03:9e:39:3d:71:fd:66:f0:c7:1b:ed:2a:f4:
d6:80:44:49:07:da:91:5d:cf:30:3b:d3:cf:53:32:
b6:bf:80:7f:10:8a:6a:e7:3a:dc:4a:7b:e8:48:94:
cf:2a:15:90:4c:5a:5a:1e:ef:64:45:14:5d:b9:06:
d4:2f:ed:cd:ca:52:76:a2:e0:a4:f8:b4:9c:58:22:
9a:76:cf:bd:be:54:1f:ce:01:fc:ee:2e:9a:d8:6f:
0a:22:e1:e1:58:87:e2:eb:0e:1d:69:eb:90:1b:bd:
d2:c8:5a:da:6b:87:e2:e3:ec:3a:6d:18:1f:2f:51:
a0:56:cd:06:73:19:90:63:67:2b:c2:5f:af:4d:89:
4e:09:82:60:df:2a:ab:e0:09:90:17:bd:b7:5c:90:
87:d8:54:e5:e7:68:a2:10:9b:39:5c:0b:1d:59:38:
f9:79:70:66:66:1a:18:3d:84:1d:f8:11:1a:a4:dc:
ff:3f:c7:8e:ba:6c:d2:71:21:cf:d6:55:c5:dd:4c:
f7:73:ee:e3:7e:c5:b7:e8:d8:e4:ca:ca:aa:20:b9:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:E8:30:17:5B:5F:D6:D1:9D:C3:B2:14:AA:76:64:C4:D1:79:77
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/htXoMBdbX9bRncOyFKp2ZMTReXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:eb04:8::/46
Signature Algorithm: sha256WithRSAEncryption
3e:a7:a2:af:b5:72:eb:9f:24:37:dc:a9:21:5b:be:98:ef:4d:
2c:fc:89:a3:71:78:c5:b7:df:6f:1d:50:a8:e1:7f:9c:27:0d:
2e:b9:d0:a2:3a:f6:0e:92:85:ff:72:b1:32:04:bd:6e:6a:12:
da:62:56:13:ff:ae:ec:77:c8:e0:b2:f0:4b:f1:ad:3b:56:1d:
74:05:66:8b:26:6a:61:51:41:b0:c0:52:03:e9:e2:27:d3:f9:
77:0d:d5:0c:2e:f6:e7:86:78:6f:32:6c:56:48:3e:be:9c:2c:
43:f8:cf:9f:57:c7:40:f0:24:1a:95:99:b0:9a:1d:67:e7:a4:
c5:3e:9c:a0:2a:08:b5:d4:2e:6f:81:f5:17:64:1a:fa:75:77:
31:eb:a6:49:7d:ca:14:c8:9c:8f:c0:2b:cd:71:4a:f6:b7:12:
9b:63:32:69:cc:1c:64:dd:96:ac:9d:00:12:ca:cd:43:eb:e1:
8d:df:9a:44:3f:57:2c:92:1a:82:5a:68:d6:a0:e3:e5:27:39:
d9:a4:38:5c:a2:0f:af:05:14:4f:54:94:7e:79:cd:c8:4e:ba:
94:d0:38:2a:d4:de:a4:fd:e2:e8:c1:df:38:f8:b9:ef:cf:b3:
f3:d9:bc:55:5c:89:30:4a:02:a7:8c:b4:15:a3:70:ca:f7:bc:
38:de:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:24 2025 by rpki-client