Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/HU_7Xs_cAz_ZhueCFDhG3yFhdQ8.roa
File: HU_7Xs_cAz_ZhueCFDhG3yFhdQ8.roa (raw, json)
Hash identifier: Xn8qQzx+Tyr4LwvocFSiqoUl6ffN8NwZu0TKINRcaSA=
Subject key identifier: 1D:4F:FB:5E:CF:DC:03:3F:D9:86:E7:82:14:38:46:DF:21:61:75:0F
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 02CA2E33
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/HU_7Xs_cAz_ZhueCFDhG3yFhdQ8.roa
Signing time: Sat 01 Jan 2022 13:02:32 +0000
ROA not before: Sat 01 Jan 2022 13:02:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 158.172.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46804531 (0x2ca2e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 13:02:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d4ffb5ecfdc033fd986e782143846df2161750f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:8f:b5:db:50:f7:cf:ad:78:e7:24:a1:59:
20:f5:ce:4d:53:ad:15:70:dd:84:c9:6f:8a:ad:fc:
f9:ba:33:9e:fe:8c:34:fd:6d:27:01:1b:82:39:04:
6c:ce:1b:1f:8a:0d:3d:5e:2b:03:92:36:0e:b1:9a:
4a:88:8d:f1:40:70:77:88:0c:ab:ec:5b:5d:07:94:
cf:6f:0c:75:c2:26:9d:11:bd:cc:92:c1:4a:14:e8:
a1:01:10:2e:ff:a6:be:cc:4b:27:0a:0e:9f:53:81:
77:3f:12:1f:91:31:db:1b:7a:8e:6f:81:dc:ec:b0:
f5:08:68:84:9f:4b:0d:f3:7d:a7:a0:a7:50:7d:aa:
f5:52:34:5b:f5:92:0b:2d:78:25:e1:10:76:e4:11:
46:aa:22:9f:3c:ce:a7:4b:01:c4:7d:cc:38:59:df:
f4:fe:53:9c:47:ce:4f:3e:32:d9:e9:f4:70:2c:12:
8c:e0:52:60:0b:3a:d6:e1:e2:b7:7f:e2:a7:b6:70:
7a:ae:aa:a4:e9:3e:bd:c8:b8:1e:0b:62:a8:c0:a6:
42:6d:bd:be:62:45:e7:42:7f:49:c6:70:41:0a:e2:
9d:9b:bf:cb:5f:32:ea:d2:63:86:a8:b8:d4:ea:55:
f3:d9:e8:39:34:5a:1d:dd:53:4f:6f:87:43:a1:95:
14:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4F:FB:5E:CF:DC:03:3F:D9:86:E7:82:14:38:46:DF:21:61:75:0F
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/HU_7Xs_cAz_ZhueCFDhG3yFhdQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.144.0/22
Signature Algorithm: sha256WithRSAEncryption
06:a1:50:80:b4:dc:ee:b6:cd:8e:9d:21:08:ba:75:11:b5:51:
a9:b0:31:c0:7e:7f:2f:2d:c8:32:04:84:c5:1f:3c:f1:66:17:
9c:1c:ac:b8:1a:65:99:70:08:b0:6b:ed:69:73:4c:7a:f3:34:
68:26:79:54:ea:0e:9f:47:97:cf:b1:e3:c6:b0:fa:58:47:46:
00:25:32:4b:14:94:35:44:13:d5:dd:df:ef:2e:cb:99:3b:42:
22:c3:e9:a6:2e:56:bb:db:60:fa:c0:1d:62:51:ea:f4:57:32:
2b:be:76:c3:62:62:e2:9e:8e:2b:4b:c7:ed:93:32:3c:ad:9a:
db:db:b9:b1:7d:b3:67:90:ee:04:c9:c8:59:8f:9c:dd:ed:9c:
5d:47:ab:54:b6:af:62:e5:6d:e7:33:e2:c0:3d:a3:72:85:4c:
9a:f9:a5:f8:e2:3d:d2:b2:ad:19:14:f4:a9:e7:66:9e:a5:59:
17:d6:4b:63:94:cd:dd:60:c9:71:21:11:68:0e:1d:ac:69:e3:
a8:8e:2d:5c:89:27:bd:af:c5:07:12:94:8f:9c:2d:0a:3b:ef:
22:06:af:46:08:17:0d:df:57:69:51:ef:4e:21:04:24:47:4a:
6b:35:17:84:e8:54:51:4c:b5:31:8e:a2:2a:0a:e1:9a:51:a5:
4b:8c:f1:7f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAsouMzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NzUzYzA2MjkwYTM3MTk5NGQ3NTc3MzE4Njg1ZjViYzRhNTM4ZDQ3MB4XDTIyMDEw
MTEzMDIzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQ0ZmZiNWVjZmRj
MDMzZmQ5ODZlNzgyMTQzODQ2ZGYyMTYxNzUwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANOmj7XbUPfPrXjnJKFZIPXOTVOtFXDdhMlviq38+boznv6M
NP1tJwEbgjkEbM4bH4oNPV4rA5I2DrGaSoiN8UBwd4gMq+xbXQeUz28MdcImnRG9
zJLBShTooQEQLv+mvsxLJwoOn1OBdz8SH5Ex2xt6jm+B3Oyw9QhohJ9LDfN9p6Cn
UH2q9VI0W/WSCy14JeEQduQRRqoinzzOp0sBxH3MOFnf9P5TnEfOTz4y2en0cCwS
jOBSYAs61uHit3/ip7Zweq6qpOk+vci4HgtiqMCmQm29vmJF50J/ScZwQQrinZu/
y18y6tJjhqi41OpV89noOTRaHd1TT2+HQ6GVFEsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdT/tez9wDP9mG54IUOEbfIWF1DzAfBgNVHSMEGDAWgBRXU8BikKNxmU11
dzGGhfW8SlONRzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1YxUEFZcENqY1psTmRYY3hob1gxdkVwVGpVYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTcvYjQxYWI2LWI5ZjMtNGI0YS05YjdiLTFlZDEwOTU0YmQ5Ni8x
L0hVXzdYc19jQXpfWmh1ZUNGRGhHM3lGaGRROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTcv
YjQxYWI2LWI5ZjMtNGI0YS05YjdiLTFlZDEwOTU0YmQ5Ni8xL1YxUEFZcENqY1ps
TmRYY3hob1gxdkVwVGpVYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAp6skDANBgkqhkiG9w0BAQsFAAOC
AQEABqFQgLTc7rbNjp0hCLp1EbVRqbAxwH5/Ly3IMgSExR888WYXnBysuBplmXAI
sGvtaXNMevM0aCZ5VOoOn0eXz7HjxrD6WEdGACUySxSUNUQT1d3f7y7LmTtCIsPp
pi5Wu9tg+sAdYlHq9FcyK752w2Ji4p6OK0vH7ZMyPK2a29u5sX2zZ5DuBMnIWY+c
3e2cXUerVLavYuVt5zPiwD2jcoVMmvml+OI90rKtGRT0qedmnqVZF9ZLY5TN3WDJ
cSERaA4drGnjqI4tXIknva/FBxKUj5wtCjvvIgavRggXDd9XaVHvTiEEJEdKazUX
hOhUUUy1MY6iKgrhmlGlS4zxfw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:27 2025 by rpki-client