Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/HKlgIe5-Cei4czlTzY7ziPpRwuE.roa
File: HKlgIe5-Cei4czlTzY7ziPpRwuE.roa (raw, json)
Hash identifier: 707EyyZeV6EpE9ZxFmgsu5Pu6CmPCz3YOp7HRIDATiY=
Subject key identifier: 1C:A9:60:21:EE:7E:09:E8:B8:73:39:53:CD:8E:F3:88:FA:51:C2:E1
Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial: 018750DDA4B56D9C296616A43D451FABAD51
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/HKlgIe5-Cei4czlTzY7ziPpRwuE.roa
Signing time: Wed 05 Apr 2023 10:01:55 +0000
ROA not before: Wed 05 Apr 2023 10:01:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31726
IP address blocks: 94.139.64.0/19 maxlen: 19
185.211.72.0/22 maxlen: 22
31.204.72.0/21 maxlen: 21
109.109.64.0/19 maxlen: 20
2a00:1680::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:dd:a4:b5:6d:9c:29:66:16:a4:3d:45:1f:ab:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Validity
Not Before: Apr 5 10:01:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ca96021ee7e09e8b8733953cd8ef388fa51c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:33:33:83:bc:27:5b:44:24:38:30:6c:60:b1:
6a:6b:fc:bf:8d:9a:f8:37:a1:6c:a2:61:c8:8d:82:
15:8d:20:08:d3:a6:8c:87:77:f3:6f:29:7a:33:a8:
da:b4:ae:4e:61:bf:cc:f5:eb:f4:bf:47:da:5c:bb:
fe:e3:b5:77:1d:29:4d:7d:33:8c:fb:86:ce:44:a9:
7f:28:bb:b2:3f:db:76:08:0a:03:de:72:87:94:b4:
1e:e7:95:59:5c:35:e8:2e:e4:ad:d3:64:47:ea:4b:
09:27:09:f5:dd:88:a0:6c:b8:f6:fd:3c:ab:02:6d:
99:99:02:73:86:d0:95:49:d2:da:2b:ab:62:20:7c:
01:4e:bb:91:0f:1c:3c:d8:1a:cb:c4:f6:03:94:a3:
6b:4c:f1:b1:3c:37:ca:91:35:8b:1d:e6:a1:bd:d2:
02:fc:ee:e9:2b:2d:8e:5b:02:27:4a:e5:eb:88:e7:
b3:a9:9e:db:b4:68:d6:76:34:c4:01:96:4c:45:a6:
bd:08:1e:bf:24:b3:31:0c:b2:a1:da:49:13:e7:40:
57:3e:91:6c:ba:39:00:da:a0:96:26:b1:b9:1e:88:
9e:c5:4a:2b:e2:d3:07:69:98:c3:65:a9:63:89:eb:
06:1f:d8:0e:34:01:bc:f2:af:25:26:86:3c:88:71:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:60:21:EE:7E:09:E8:B8:73:39:53:CD:8E:F3:88:FA:51:C2:E1
X509v3 Authority Key Identifier:
keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/HKlgIe5-Cei4czlTzY7ziPpRwuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.72.0/21
94.139.64.0/19
109.109.64.0/19
185.211.72.0/22
IPv6:
2a00:1680::/32
Signature Algorithm: sha256WithRSAEncryption
64:a0:e2:e0:20:d0:d8:a9:4b:f0:cd:1c:76:a6:f2:20:7e:3a:
55:9a:1e:c2:05:7e:5e:6a:f4:b8:11:ea:94:15:7f:29:8b:24:
2f:e8:90:59:a3:29:fa:9e:80:c5:08:2e:55:f9:23:c6:ba:51:
3b:c9:a4:cf:bc:52:91:53:0a:eb:25:de:9b:ef:bb:23:32:af:
e4:be:f4:15:03:fb:a4:ac:21:84:d9:7e:ba:d9:03:86:5a:9d:
8b:6e:ee:9d:27:09:56:83:e1:c8:c9:23:d4:a6:37:62:1a:cb:
74:ef:23:bd:8b:42:c2:71:0f:4c:5d:8f:c5:f3:58:65:09:cd:
e8:6a:12:60:e2:46:e8:4f:fd:ea:e7:ac:32:91:0e:b7:5f:44:
76:c8:f3:fb:dd:06:1b:5a:a1:61:28:07:7b:f8:16:f6:88:ae:
e4:50:8d:ce:d8:d5:7f:8a:26:82:b6:fd:3e:20:3e:fd:bb:e2:
e7:08:77:dc:ab:3f:61:74:ef:9d:a6:49:d3:f6:c0:80:b0:27:
33:5f:64:09:47:42:d5:3c:30:a9:d1:8b:2e:b0:69:f2:2c:53:
12:16:8b:6b:77:e0:c2:c4:ef:c3:75:3f:3e:d8:cf:22:b9:b9:
01:d9:e0:6f:ed:74:44:ce:ae:6d:39:6a:13:04:0f:10:aa:6d:
6a:11:9a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:38:17 2025 by rpki-client