Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/HzgpKUWALRb81u-x-WuN1eJd84U.roa
File: HzgpKUWALRb81u-x-WuN1eJd84U.roa (raw, json)
Hash identifier: DWli7s9fg8dslla65saKvJ1hXLRyCh7xvqbZQ9aT55w=
Subject key identifier: 1F:38:29:29:45:80:2D:16:FC:D6:EF:B1:F9:6B:8D:D5:E2:5D:F3:85
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 018570307B107431BC7530DDE5A59FDE1B56
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/HzgpKUWALRb81u-x-WuN1eJd84U.roa
Signing time: Mon 02 Jan 2023 01:55:03 +0000
ROA not before: Mon 02 Jan 2023 01:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209216
IP address blocks: 185.223.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:7b:10:74:31:bc:75:30:dd:e5:a5:9f:de:1b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Jan 2 01:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f38292945802d16fcd6efb1f96b8dd5e25df385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:32:c2:99:cf:97:8e:02:86:b8:e6:4e:84:
98:43:4c:96:48:82:73:30:74:c1:e4:af:40:7b:4b:
ad:c7:e7:2f:28:75:f9:05:4d:f3:53:63:56:86:3e:
4b:ee:85:e5:80:1f:0f:58:07:63:e7:67:cd:ac:4e:
9a:c7:eb:83:5e:08:ea:38:34:49:8c:3e:67:6c:22:
7c:6f:e5:f7:4e:ad:77:6f:90:89:a7:22:6d:53:d7:
24:46:be:7c:60:dc:bb:eb:e2:27:f2:60:9f:70:84:
97:e3:b2:11:0b:fb:a5:aa:f0:a2:9a:3f:e1:0a:1e:
f8:06:5d:93:b6:48:4e:e1:39:db:d5:c7:f2:ad:50:
8a:b9:d6:9e:84:a1:12:b3:dd:27:2c:e0:fc:f8:63:
4a:97:45:1a:03:d1:cc:59:b3:39:6a:6b:e5:b4:62:
14:fa:75:0a:e2:b3:ab:8f:a6:6c:5f:65:42:9e:bb:
41:a6:e6:7d:90:db:1e:04:9f:14:5b:e2:3c:d0:4c:
43:2f:bb:81:88:34:7a:77:95:c7:30:75:0c:bc:73:
e1:41:c1:a7:90:0e:8c:2e:3c:83:ed:3e:ad:38:9d:
18:9a:86:82:6f:87:d0:b6:cf:89:12:33:fa:e1:2c:
dd:b1:37:f8:66:f7:88:90:59:0d:b7:77:7d:db:4f:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:29:29:45:80:2D:16:FC:D6:EF:B1:F9:6B:8D:D5:E2:5D:F3:85
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/HzgpKUWALRb81u-x-WuN1eJd84U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.108.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:95:27:ce:28:44:fb:30:c7:3c:6c:13:24:85:96:a9:5a:
be:d1:81:07:b3:3b:ab:de:76:18:be:4c:96:c5:63:84:3e:43:
a5:6d:95:f0:28:ed:cc:f0:63:17:20:4e:36:9b:fd:ab:87:2e:
9f:a0:d6:84:b9:ee:56:2e:b2:e4:13:b7:88:d9:ca:54:6c:f0:
0d:ea:59:92:6f:3f:6e:1e:e8:2c:f9:4c:03:dd:ea:cc:2b:ad:
5d:d5:7b:09:36:1e:21:37:30:64:a1:e8:09:e3:eb:64:c6:68:
da:2e:3a:a4:8d:ee:fa:f4:79:3c:70:d3:d9:2a:58:1e:ea:5f:
ff:ec:89:03:41:9d:56:89:96:dc:11:be:c4:91:7c:60:ab:02:
af:53:d6:27:d4:35:21:34:b0:88:ee:12:3d:1a:27:14:17:4f:
21:df:cd:65:0b:48:8f:1e:d8:3d:2d:2d:9b:40:ba:bf:8e:02:
71:06:53:f0:f8:db:a0:5e:cd:dd:db:ac:a4:0e:fb:ae:d3:e5:
2c:b8:f6:ba:14:14:9b:a1:b5:7c:8f:f0:40:12:1b:b6:8e:76:
15:c6:d6:91:d2:0f:12:01:a1:42:3f:b4:f4:37:f2:36:73:3f:
f9:19:67:ee:7f:5b:98:88:8d:ea:0c:bf:6b:00:00:9f:17:4e:
6c:db:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:22 2025 by rpki-client