Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/hSKydCeIV2-AHaQYEMYOLq-FVso.roa
File: hSKydCeIV2-AHaQYEMYOLq-FVso.roa (raw, json)
Hash identifier: MdVFNPVQAbv7p1FWfwSxzykqMptbYrKmBkGvCNbQ7NE=
Subject key identifier: 85:22:B2:74:27:88:57:6F:80:1D:A4:18:10:C6:0E:2E:AF:85:56:CA
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 01856F1D9F973BD0047D884E1801EE7262D9
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/hSKydCeIV2-AHaQYEMYOLq-FVso.roa
Signing time: Sun 01 Jan 2023 20:54:50 +0000
ROA not before: Sun 01 Jan 2023 20:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137
IP address blocks: 131.114.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:9f:97:3b:d0:04:7d:88:4e:18:01:ee:72:62:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Jan 1 20:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8522b2742788576f801da41810c60e2eaf8556ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:7e:de:98:6a:c9:23:97:9a:2b:1b:62:69:
e7:c6:e3:79:38:c5:7d:e5:6d:a7:cf:81:06:b9:9d:
b2:4d:88:ad:5f:da:9d:a0:21:fe:21:39:64:fb:8c:
d5:6c:6a:78:d1:a0:08:a6:7f:96:11:c6:01:b7:82:
67:8e:74:c1:3c:a4:e3:04:c1:61:93:4c:92:56:b3:
04:bb:fd:4c:61:28:6e:1d:c2:dc:81:fc:0f:17:7e:
b4:30:5c:91:9a:5a:36:8d:16:8d:03:6d:16:0f:f0:
79:0f:78:60:05:75:8c:d1:84:e0:d4:04:cb:6f:b0:
09:55:34:ff:14:01:d7:df:b1:ca:81:30:3a:4e:60:
f4:b0:4b:d8:fa:a1:65:00:c8:c4:ca:80:de:c9:51:
4a:27:67:7f:90:72:6f:06:c5:50:90:70:d9:3c:ce:
d2:4e:8b:71:74:ec:36:42:65:08:67:e5:ed:94:f8:
1e:82:b5:52:19:ff:dc:76:54:31:65:ea:90:dc:a6:
80:3d:eb:41:00:3e:46:37:af:71:75:fd:fc:d0:36:
72:4e:0b:32:2e:a9:5f:53:0e:27:1d:2e:91:d7:5d:
91:85:8b:e4:96:da:4c:02:21:da:33:27:a4:37:30:
18:37:82:14:6f:58:c9:34:c3:9d:33:79:14:fb:bf:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:22:B2:74:27:88:57:6F:80:1D:A4:18:10:C6:0E:2E:AF:85:56:CA
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/hSKydCeIV2-AHaQYEMYOLq-FVso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:8d:54:ce:5b:70:cf:c3:08:3d:b7:2a:3b:0a:4e:dd:ed:d6:
4c:f3:6b:70:67:03:ec:e5:8c:98:01:17:de:be:1b:fc:6f:89:
05:b5:66:b8:d3:43:49:08:42:41:2e:98:64:e5:de:a6:45:36:
8e:9a:5c:e1:f5:c3:37:ad:7f:0a:6c:d3:19:e7:15:b6:c5:ba:
7a:3b:5c:fd:89:05:cf:fb:c0:2f:2f:fa:32:3e:35:74:25:04:
17:31:73:b9:73:53:7e:20:a1:26:dd:6f:92:31:32:77:c1:b3:
fd:ae:b3:c9:2e:74:dc:1f:72:bc:d0:52:68:c5:26:6c:be:c6:
78:97:c0:32:92:67:5c:e0:15:20:5e:06:ad:3b:1c:e3:f8:42:
8f:cc:ec:d2:83:9c:41:bc:ee:22:78:db:e5:54:9b:7c:e5:f1:
f9:34:f6:ca:53:0d:73:9d:c7:96:bd:c9:d4:61:fa:21:e9:35:
1a:5f:50:01:a8:9f:66:d5:bc:85:eb:79:7e:99:75:59:3b:83:
ed:cd:80:5c:b6:ac:46:17:d5:c1:a9:3a:50:0a:97:f4:23:06:
95:9c:49:8f:0e:cc:30:23:56:e0:08:6a:19:d3:90:0b:73:1f:
e8:0c:10:a7:67:86:8c:7f:08:5e:46:72:35:d2:b7:33:bb:4c:
fa:97:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:27:36 2025 by rpki-client