Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/HMB--IfENc1sOX_PDP9fkiKBAJw.roa
File: HMB--IfENc1sOX_PDP9fkiKBAJw.roa (raw, json)
Hash identifier: jfn65Fs7uRWnZR12CEoXfrP2yKSWHwKZICa7S6XPCIA=
Subject key identifier: 1C:C0:7E:F8:87:C4:35:CD:6C:39:7F:CF:0C:FF:5F:92:22:81:00:9C
Certificate issuer: /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial: 01856F26E298F95D98508F006E22762CBC72
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/HMB--IfENc1sOX_PDP9fkiKBAJw.roa
Signing time: Sun 01 Jan 2023 21:04:57 +0000
ROA not before: Sun 01 Jan 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30887
IP address blocks: 2001:67c:4d4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e2:98:f9:5d:98:50:8f:00:6e:22:76:2c:bc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Validity
Not Before: Jan 1 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cc07ef887c435cd6c397fcf0cff5f922281009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:f6:8d:25:de:b9:a6:fc:de:49:c9:95:b7:
39:86:6d:63:d5:d6:23:26:b5:35:6e:94:ec:54:fe:
72:33:58:07:38:99:12:f7:38:b4:a3:91:94:83:06:
97:66:04:24:fc:cd:d5:3c:bb:43:7f:67:1f:cd:d6:
99:cd:f5:5c:77:1d:75:85:3b:c8:ce:31:cd:ef:c4:
99:43:7c:6c:a5:2e:fc:69:91:12:77:be:c8:be:22:
31:04:03:67:ec:9e:86:6b:13:f8:f0:f2:55:b3:af:
06:3d:7c:f2:81:df:e7:a2:67:0d:73:9b:58:75:15:
58:ed:e8:66:30:f5:7d:df:4c:55:b4:36:70:71:87:
f3:56:32:19:c6:d4:cf:2c:1f:2b:bb:ba:73:9f:12:
7d:0a:38:79:5b:d5:47:71:2f:92:86:84:1f:75:47:
c9:4a:67:51:b7:44:66:da:3e:2a:b1:17:b4:08:41:
8b:68:d5:07:cd:73:60:51:a1:f1:74:d0:7e:85:e2:
1c:3b:ac:a5:b8:e3:98:19:33:a0:7a:58:8b:6c:22:
b9:c9:02:e2:10:48:09:e3:ae:0d:31:6a:54:2c:66:
36:d9:32:bd:8a:bc:34:f6:7c:55:6a:12:e5:eb:ff:
63:21:d6:50:cd:10:3b:53:0e:ac:96:e4:0e:1e:49:
15:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C0:7E:F8:87:C4:35:CD:6C:39:7F:CF:0C:FF:5F:92:22:81:00:9C
X509v3 Authority Key Identifier:
keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/HMB--IfENc1sOX_PDP9fkiKBAJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:4d4::/48
Signature Algorithm: sha256WithRSAEncryption
bd:d7:c7:2a:6f:c9:5c:12:73:8e:8b:af:5c:d7:ab:90:91:e4:
b2:14:b7:1b:dd:97:09:7b:a6:9b:ab:da:11:85:93:fa:8b:cf:
00:30:48:87:46:55:8e:d8:dd:0a:21:b8:ad:32:e1:d2:bd:3a:
34:61:4f:f9:48:1e:86:5d:31:36:3d:c4:04:74:df:eb:42:c1:
9f:02:69:32:30:46:f2:27:83:0c:7b:62:6f:6f:9b:0b:9d:69:
31:7e:84:d5:f9:8e:32:81:7e:0d:89:f3:7d:9f:3e:75:17:b9:
e7:61:84:f3:06:73:4a:95:77:33:83:5d:e1:04:e1:5a:88:af:
df:8c:e5:17:f6:1f:d0:e5:29:fe:4c:a6:61:14:a8:6b:ed:8d:
7a:50:06:a2:db:19:56:81:34:0c:e5:26:ae:d5:55:c9:1b:1d:
77:22:3c:10:2f:83:87:df:19:9f:ac:4d:6f:b5:51:b6:b2:5d:
51:46:7d:6d:52:9b:17:ab:2c:1d:48:cc:da:51:42:39:70:ec:
95:d7:e4:e3:25:21:8f:99:86:b4:91:27:52:dd:74:73:77:b0:
1c:1a:9d:5a:38:9c:62:1a:34:83:b4:a4:c1:62:aa:4a:fa:91:
9c:ac:be:15:b0:16:c8:33:e7:df:fb:b0:d1:40:21:2d:26:70:
b3:0d:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:19 2025 by rpki-client