Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/hu6O5L3OduCrGw0ypOwBrHqdI0s.roa
File: hu6O5L3OduCrGw0ypOwBrHqdI0s.roa (raw, json)
Hash identifier: CFuetNZlM+XXvxtzDAB6k625nts128pahNAMFvMyF6Q=
Subject key identifier: 86:EE:8E:E4:BD:CE:76:E0:AB:1B:0D:32:A4:EC:01:AC:7A:9D:23:4B
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 01856ED4A1FFE13B28785136574125220444
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/hu6O5L3OduCrGw0ypOwBrHqdI0s.roa
Signing time: Sun 01 Jan 2023 19:35:06 +0000
ROA not before: Sun 01 Jan 2023 19:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15830
IP address blocks: 91.205.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a1:ff:e1:3b:28:78:51:36:57:41:25:22:04:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Jan 1 19:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86ee8ee4bdce76e0ab1b0d32a4ec01ac7a9d234b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:d2:2d:45:72:c7:12:a1:2e:da:48:4e:74:
dc:da:4e:35:c4:ae:18:aa:8a:be:08:c4:28:fb:22:
48:b8:37:47:7a:00:60:37:9c:23:c2:b8:53:bc:8b:
db:a9:76:8b:3a:01:63:d9:db:04:4c:a3:a5:95:b9:
4c:3c:a2:ab:4c:dd:95:12:21:b6:9b:b4:85:3b:8a:
5b:2e:7d:48:65:ea:23:2a:00:fd:e1:11:ab:e5:df:
41:ad:6d:14:c3:b4:f6:d4:d6:59:da:84:5d:d4:e6:
b8:b7:06:0a:37:99:63:31:5d:d8:e9:bb:05:07:81:
8f:cb:09:26:f6:c1:58:31:31:20:44:d4:54:2f:b9:
f7:e5:e7:17:16:c0:18:9b:e0:e8:70:02:de:2c:d0:
d0:e6:3d:bd:f2:08:0e:6e:84:a0:b4:59:c4:59:19:
ad:9c:c1:42:9e:fd:b4:f7:f9:30:81:2e:1a:90:14:
7b:c8:88:0c:1d:67:a3:e9:99:c4:31:72:74:cb:de:
eb:0e:d3:b7:40:76:e0:82:4b:5b:f1:9c:16:a1:52:
10:04:52:62:8e:1c:0a:b2:ea:62:71:97:4f:25:28:
90:1f:1b:33:37:34:e5:a3:91:88:e5:37:ce:0a:f7:
00:6a:94:82:b3:24:35:c0:8f:17:75:c5:ca:23:a1:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EE:8E:E4:BD:CE:76:E0:AB:1B:0D:32:A4:EC:01:AC:7A:9D:23:4B
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/hu6O5L3OduCrGw0ypOwBrHqdI0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.125.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b9:a8:02:9d:20:24:35:0f:17:07:27:dc:18:4b:a6:a8:f2:
e5:50:52:8e:ae:c5:32:2d:5e:82:63:06:d0:b0:f9:21:37:df:
a7:45:6c:58:84:34:82:14:bc:9f:cd:ff:3e:21:f7:63:cc:7c:
97:db:3a:4e:02:e4:56:50:f6:bd:f4:2f:25:0e:d6:82:67:e4:
73:ea:c4:27:16:c3:78:cf:63:7a:ff:f0:6b:7e:65:eb:0d:7b:
86:cb:88:66:89:0e:11:f8:7b:af:99:92:58:f5:6d:66:6d:8a:
e3:b2:b9:c7:19:d6:75:3a:4c:a6:8a:3c:c8:ac:f6:0b:0f:c1:
46:e2:c5:ff:6c:ee:ed:e1:f5:6e:da:5f:35:c1:dd:b7:90:5f:
ad:79:4c:78:50:15:da:03:dd:fc:5b:3e:7c:6d:c8:bb:68:aa:
3e:df:ff:2d:eb:73:f2:a4:41:f3:7b:ca:e5:70:ab:2f:e8:7b:
1f:71:d6:b9:cf:19:b3:95:07:ce:b2:84:46:e2:92:aa:cb:0b:
1d:e5:cf:72:92:6d:63:8d:07:18:f1:10:0a:a3:51:5c:3e:dd:
be:11:6e:88:67:1f:e4:fd:f8:d7:7f:9d:25:dd:c9:ce:91:22:
e4:ab:ea:24:48:8b:e2:b9:1c:1f:ad:01:84:cc:7f:fb:19:8d:
66:81:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:57:21 2025 by rpki-client