Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/HWwvTNHrvZNvOC8hmiAoyjD4-7I.roa
File: HWwvTNHrvZNvOC8hmiAoyjD4-7I.roa (raw, json)
Hash identifier: Ye8KUWh0bXphel+9ruQXTF6Dh99KrDsgpuZy1pP55RU=
Subject key identifier: 1D:6C:2F:4C:D1:EB:BD:93:6F:38:2F:21:9A:20:28:CA:30:F8:FB:B2
Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237
Certificate serial: 01992A8C
Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/HWwvTNHrvZNvOC8hmiAoyjD4-7I.roa
Signing time: Sat 01 Jan 2022 12:06:19 +0000
ROA not before: Sat 01 Jan 2022 12:06:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211104
IP address blocks: 185.182.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26815116 (0x1992a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237
Validity
Not Before: Jan 1 12:06:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d6c2f4cd1ebbd936f382f219a2028ca30f8fbb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:37:ff:36:24:fb:3b:d0:ba:6e:91:f9:31:
71:42:a5:2a:41:e2:d3:7a:8c:53:07:76:19:3c:77:
a8:7e:02:24:91:0e:9c:df:34:43:17:23:11:d3:6a:
cd:6c:49:f8:36:74:7c:85:3d:03:17:de:51:50:bf:
2c:a5:7c:d2:31:24:33:62:cf:40:03:e3:eb:97:ec:
e8:96:1d:cd:71:f9:b7:86:5b:a8:fe:9c:c3:2b:d1:
fe:88:51:3d:8a:4e:02:be:1d:86:53:a2:a2:8c:46:
1a:da:ad:e4:f2:c1:98:04:12:60:da:99:42:59:d7:
77:8e:1f:a6:79:3c:fe:ff:c5:52:37:82:68:f1:b2:
9f:0d:76:5a:96:be:07:10:f7:69:9b:b3:f2:db:7b:
45:31:98:88:9e:54:25:3c:c8:b0:4f:98:45:a5:30:
a8:02:55:4a:6e:c3:67:b8:31:ec:6f:9e:50:58:2d:
f1:54:5e:4c:bc:a0:54:8b:ff:3f:9f:c3:98:ed:6e:
ce:2d:95:4f:66:f2:6b:93:0b:91:9a:0e:04:e7:f8:
70:89:7b:d9:12:f2:25:0d:32:cf:d6:1a:6e:18:24:
a8:c3:bb:bb:60:d8:0d:0b:68:7e:70:8b:06:ed:07:
dc:94:73:68:e6:16:c3:91:34:8e:5b:b9:75:0f:b6:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6C:2F:4C:D1:EB:BD:93:6F:38:2F:21:9A:20:28:CA:30:F8:FB:B2
X509v3 Authority Key Identifier:
keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/HWwvTNHrvZNvOC8hmiAoyjD4-7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.156.0/24
Signature Algorithm: sha256WithRSAEncryption
69:24:ae:74:cd:af:da:63:e2:59:24:d2:95:0b:5e:50:22:24:
86:2d:2c:97:63:27:c2:c6:d7:61:77:17:08:b1:63:b9:15:bf:
66:94:d4:47:dc:03:c0:f1:88:22:8f:bd:8f:a2:33:72:8e:67:
80:7d:c8:18:3a:ca:55:87:70:c4:23:b9:dd:3a:d5:8a:80:52:
ce:e8:8b:c9:dc:03:aa:df:8c:f5:8e:f8:cc:9c:5b:30:81:fe:
5e:70:d6:6b:c2:1b:8a:ce:90:73:af:f9:be:61:29:4f:f9:a8:
8f:9f:96:ae:a2:1a:d0:17:57:f9:6b:61:6d:4a:c5:df:6c:17:
bc:2f:71:d7:bb:fe:7e:b7:0f:cd:3c:f7:37:28:31:78:44:34:
7b:09:71:ff:d4:45:d1:7b:d3:2a:83:a3:4e:c8:58:e3:14:6b:
e7:c4:34:be:e6:8f:3b:28:06:1e:06:67:2d:35:5a:8f:95:9d:
cf:9c:48:68:17:52:6c:07:55:df:fd:95:84:c0:72:94:ce:30:
fe:48:08:06:0c:b3:4c:94:78:81:a4:94:93:cf:28:8e:de:09:
38:2e:e5:61:80:5f:25:b6:83:f7:c3:d8:b8:b7:09:78:65:77:
e1:9c:15:30:9b:76:20:9d:68:9c:7f:a0:31:ac:c0:fa:ec:2b:
09:bb:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:19 2025 by rpki-client