Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HizHgN78qk5vbyDy_YNNY2CuE-8.roa
File: HizHgN78qk5vbyDy_YNNY2CuE-8.roa (raw, json)
Hash identifier: sQbIdEVaUZwF7Wz2gjL9LFm3i5X2Q8tpD9BGovuhxkE=
Subject key identifier: 1E:2C:C7:80:DE:FC:AA:4E:6F:6F:20:F2:FD:83:4D:63:60:AE:13:EF
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B20D5CF90A6AE435199D8D938E01D
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HizHgN78qk5vbyDy_YNNY2CuE-8.roa
Signing time: Sun 01 Jan 2023 18:14:49 +0000
ROA not before: Sun 01 Jan 2023 18:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 2a09:ff00:101::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:20:d5:cf:90:a6:ae:43:51:99:d8:d9:38:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e2cc780defcaa4e6f6f20f2fd834d6360ae13ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f7:53:a9:8f:30:6d:ba:db:62:fb:32:86:8d:
a3:95:38:fe:6f:e7:13:02:16:61:df:f7:4d:a7:e7:
c1:1e:fa:b6:c3:97:34:c6:a8:f0:1b:52:e7:36:e6:
64:a4:f1:2d:2a:d4:fd:46:2d:de:91:11:d5:24:8e:
ad:7a:ac:e8:83:3e:1c:31:5c:61:c4:82:56:b4:9f:
c3:ed:5f:85:72:a8:35:23:b2:6e:a1:a3:11:d8:36:
68:dc:c3:52:69:be:4f:94:db:f9:c9:0f:cb:0b:8d:
d8:f4:0d:49:ca:44:d8:55:5c:6c:a3:92:9e:3b:35:
47:63:ac:f3:c5:6c:31:73:fa:32:38:5c:80:16:a8:
d4:40:0f:76:07:2f:63:e5:40:f2:65:90:bb:fa:b9:
a8:28:5a:a5:53:39:8f:13:6f:f1:9e:26:6f:48:94:
37:e6:3e:e4:52:92:49:69:df:92:12:71:72:e9:1f:
91:b4:04:37:40:84:e7:4a:08:c2:38:76:38:29:9c:
4e:c1:b7:0e:af:32:a2:52:89:87:23:a9:4b:2e:1d:
e2:45:00:98:a8:51:e3:59:6b:87:c9:05:a0:5e:a1:
a6:48:57:d8:9b:fb:e5:fc:86:ba:5d:44:d4:d5:9b:
a1:dc:2f:ce:fb:27:20:51:08:18:69:bc:8c:35:9b:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:C7:80:DE:FC:AA:4E:6F:6F:20:F2:FD:83:4D:63:60:AE:13:EF
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HizHgN78qk5vbyDy_YNNY2CuE-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:ff00:101::/48
Signature Algorithm: sha256WithRSAEncryption
06:d2:7a:0c:ef:18:bf:a0:85:c3:1a:c2:65:18:ab:71:03:36:
32:e1:22:c2:e9:7e:8d:ee:9d:d5:33:3b:fe:2b:b0:0c:7d:c5:
2a:55:40:b9:c5:23:04:f6:56:38:6c:5e:d1:74:3a:b9:5d:fc:
84:11:e5:a4:62:e2:f8:e7:74:8b:be:f9:77:3c:68:a7:05:b5:
e0:61:2d:43:84:b4:75:78:c9:0f:18:36:ed:14:2f:2d:a7:b4:
86:54:6c:02:14:95:e1:04:5c:aa:21:db:5e:b5:ed:0a:42:1e:
8f:3b:3e:99:23:ab:a8:84:28:f7:78:94:84:60:47:12:20:35:
e5:6a:14:0a:e0:d5:c2:6e:2f:1f:42:a5:32:da:48:94:7c:d5:
72:74:a9:56:4f:0e:82:f5:19:46:79:53:98:8b:21:0c:ae:26:
de:6b:f5:3c:1d:1c:64:5c:0f:e7:f2:28:7f:4e:6d:74:55:7f:
35:09:b3:73:96:21:22:c3:c8:2b:d6:82:58:3e:7e:3f:2d:70:
75:8c:6a:1c:e3:51:01:b1:5e:fa:7a:42:94:0f:31:82:6b:c8:
e8:4e:ce:91:a5:54:9f:77:da:20:74:ca:fa:58:fa:34:1c:30:
f0:ff:8e:8a:c9:2e:b3:b9:35:1c:b6:97:1f:9f:7c:df:65:ab:
40:3f:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:21 2025 by rpki-client