Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hIhhFmALYHi_GZLGML2V-_1kvc4.roa
File: hIhhFmALYHi_GZLGML2V-_1kvc4.roa (raw, json)
Hash identifier: 0+Fb1PkS6XimA6TJrt3iMFi0vfql2wM/6j19Lz5EATg=
Subject key identifier: 84:88:61:16:60:0B:60:78:BF:19:92:C6:30:BD:95:FB:FD:64:BD:CE
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 424D32FB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hIhhFmALYHi_GZLGML2V-_1kvc4.roa
Signing time: Sat 01 Jan 2022 14:02:53 +0000
ROA not before: Sat 01 Jan 2022 14:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1221
IP address blocks: 192.71.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1112355579 (0x424d32fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 14:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84886116600b6078bf1992c630bd95fbfd64bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:f3:d1:9f:37:a8:f5:ff:ab:df:58:12:ba:
c1:5a:11:d4:e3:96:34:31:f8:ca:74:12:90:ca:3f:
b8:1b:f0:56:16:bf:2c:46:71:0e:5b:40:e9:2b:db:
23:52:be:ca:33:50:01:e9:8e:24:b2:fe:07:1f:cc:
59:95:5d:f8:16:cf:4f:4b:03:be:ff:d8:f9:62:0f:
bd:26:da:39:64:fa:37:40:b0:0c:38:2c:c6:34:00:
98:e9:9a:d9:5b:0c:f7:09:98:06:1e:89:46:8f:40:
c7:b6:da:a0:42:54:f6:a6:5e:63:98:eb:9b:4f:94:
da:cb:51:be:68:dd:7c:fc:d5:04:cf:4e:49:7d:ef:
7c:72:7e:c3:43:5a:44:bb:1f:b1:e2:6f:b6:d6:a8:
32:a5:25:b0:72:ae:8c:50:54:f9:89:83:b0:fd:93:
ff:2d:e4:a9:02:23:55:ae:74:9b:2e:9b:9b:33:fd:
21:47:51:4e:d4:3f:5f:7d:8a:d4:a5:b4:dd:bf:5f:
df:8d:90:b2:70:22:30:88:86:53:85:6e:c4:c8:13:
ac:34:ce:f2:d0:f5:53:e3:1c:cc:81:31:69:84:0f:
f2:c6:0e:81:1e:6c:3e:02:b6:b7:5c:7b:7b:37:7b:
96:eb:8d:d9:f3:6e:4c:7f:51:78:07:db:26:e0:db:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:88:61:16:60:0B:60:78:BF:19:92:C6:30:BD:95:FB:FD:64:BD:CE
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hIhhFmALYHi_GZLGML2V-_1kvc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.161.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9e:95:90:a3:d7:e1:8f:82:39:66:65:7f:63:ae:11:9d:64:
42:6f:01:75:c0:d5:05:b0:78:bd:90:9a:33:c6:94:a2:b5:e2:
80:e8:e4:89:e5:8b:74:2f:08:71:d3:85:7c:d5:89:c7:07:7f:
dc:a3:32:00:ca:08:e6:5d:ea:12:0e:ac:d8:34:5b:9c:6c:9c:
2d:15:f0:14:64:dc:a9:80:dc:0f:9b:a6:ac:b6:7f:5f:d1:ef:
a8:58:b2:4d:47:65:5b:30:00:d3:65:77:f9:d4:8d:4b:37:e3:
6d:65:bb:bb:0f:03:4f:5b:4d:57:ae:f8:c9:1b:d7:64:e0:33:
73:a7:c1:c1:71:e9:7c:31:c2:52:ad:63:16:d1:04:91:77:93:
f4:98:58:3c:0c:15:d9:5e:0a:72:a5:bb:35:ce:18:3c:5b:ca:
ab:90:fb:bb:08:6e:c4:bf:7e:90:6c:ff:01:a3:40:ef:e9:b8:
67:2e:00:53:d8:fc:74:96:aa:d3:fc:78:2a:44:5c:ba:e9:f7:
da:ac:9f:21:f7:8c:e0:20:b8:11:47:4e:96:af:9b:00:c4:73:
93:0f:13:83:5f:94:07:4b:16:d5:bd:bb:7b:2b:fe:8a:2b:f5:
25:ba:65:0f:93:47:4b:4b:d5:0d:59:01:9c:94:84:c9:1b:c6:
f9:53:30:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:49 2025 by rpki-client