Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/H7rXHPgqiSTIX0Hy-3T4H5GpRVk.roa
File: H7rXHPgqiSTIX0Hy-3T4H5GpRVk.roa (raw, json)
Hash identifier: 6/asg38cGSnU/Fl6iihYcfrBS+oZbxlCBALqGODfCHw=
Subject key identifier: 1F:BA:D7:1C:F8:2A:89:24:C8:5F:41:F2:FB:74:F8:1F:91:A9:45:59
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 052B1054
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/H7rXHPgqiSTIX0Hy-3T4H5GpRVk.roa
Signing time: Sat 01 Jan 2022 13:07:26 +0000
ROA not before: Sat 01 Jan 2022 13:07:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204176
IP address blocks: 185.112.63.0/24 maxlen: 24
185.112.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86708308 (0x52b1054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Jan 1 13:07:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fbad71cf82a8924c85f41f2fb74f81f91a94559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4f:8c:0c:22:67:83:2c:ad:2d:03:15:04:ac:
c5:99:c9:eb:5b:69:68:50:ec:85:98:a8:e0:9f:01:
52:da:78:d2:d4:00:e0:de:b6:5d:6f:05:8f:32:6a:
64:86:a8:d5:10:6f:33:d4:ce:1b:45:a2:27:4d:71:
45:6b:fa:30:16:81:a9:df:1d:9b:ba:50:af:9b:05:
a0:91:df:5a:68:85:05:2a:63:09:7c:8f:92:a3:a2:
a7:ef:1f:40:3c:c3:1e:45:3d:46:a7:dc:c0:70:71:
a3:01:ac:86:64:17:b6:07:32:fb:15:07:19:38:6b:
58:7f:3f:df:fb:39:b0:9b:29:5f:a8:d8:87:83:c9:
7b:2f:f3:ae:2d:e5:99:1f:e0:f7:ba:49:7b:1a:9c:
40:14:08:19:1a:62:30:b9:c7:ca:df:5c:c4:38:b1:
64:4d:f9:00:90:39:38:6b:1b:b0:31:35:b8:61:36:
55:9a:98:85:9e:4e:0b:b2:2b:81:f6:53:99:25:11:
e0:16:aa:cf:a4:25:7c:a9:de:18:eb:c0:5c:c8:1c:
62:df:fe:73:68:0d:55:70:bf:e3:94:58:5e:72:43:
57:74:f6:06:bb:8d:79:8b:02:27:34:35:21:80:fc:
31:71:65:89:5d:ec:49:04:13:9f:ca:f7:7b:07:54:
c2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:D7:1C:F8:2A:89:24:C8:5F:41:F2:FB:74:F8:1F:91:A9:45:59
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/H7rXHPgqiSTIX0Hy-3T4H5GpRVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.60.0/22
Signature Algorithm: sha256WithRSAEncryption
02:48:12:07:09:0c:95:63:1a:e3:f0:48:54:98:eb:bf:13:8b:
8f:74:8a:08:0a:e1:4d:78:ac:0e:0e:bc:9c:74:b1:a9:13:d9:
5e:70:cd:5a:57:cd:1a:77:ca:a3:e9:92:81:55:42:38:2b:c7:
65:82:11:22:42:44:4e:09:13:e5:d6:92:0f:88:d0:6a:ea:35:
5c:e6:34:c6:ec:28:69:62:e1:71:b4:68:1f:89:e3:fe:54:56:
58:87:33:45:e6:3d:27:34:a6:54:31:da:49:d1:29:d4:af:79:
f0:ee:a7:ad:87:0d:78:3e:86:b6:fb:29:85:16:a7:67:07:be:
f3:b7:d3:9f:24:65:50:50:c5:2f:8c:05:21:79:36:9b:04:6d:
4a:ce:76:fd:77:42:38:8e:28:8c:63:f8:99:18:86:5f:ee:f9:
9c:c3:48:41:29:48:4f:61:16:67:7c:50:ea:04:ee:3f:71:5d:
d6:dd:13:9b:a7:6e:56:96:a0:cd:83:55:e7:d8:ac:91:de:8f:
b3:6b:fd:cd:41:c9:66:35:0b:51:b9:b8:5e:9a:ca:45:65:bd:
34:f4:4e:86:5f:f2:f7:20:72:b0:06:fe:b4:fa:db:48:ea:7c:
b3:26:f4:df:d1:d9:0a:31:f7:31:79:c6:44:09:0e:93:2c:d0:
25:d7:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:41 2025 by rpki-client