Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/HcyocuspGqVsqbeAH-_VP85ZCro.roa
File: HcyocuspGqVsqbeAH-_VP85ZCro.roa (raw, json)
Hash identifier: +Svv0rt13GFBIfJwfR9w20kzyvQKs3t5piArwGiacck=
Subject key identifier: 1D:CC:A8:72:EB:29:1A:A5:6C:A9:B7:80:1F:EF:D5:3F:CE:59:0A:BA
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 018B15158DA3CE767BDEBCE7F112A1FED151
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/HcyocuspGqVsqbeAH-_VP85ZCro.roa
Signing time: Mon 09 Oct 2023 15:36:55 +0000
ROA not before: Mon 09 Oct 2023 15:36:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198404
IP address blocks: 185.195.176.0/24 maxlen: 24
185.195.177.0/24 maxlen: 24
185.195.178.0/24 maxlen: 24
185.195.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:15:8d:a3:ce:76:7b:de:bc:e7:f1:12:a1:fe:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Oct 9 15:36:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dcca872eb291aa56ca9b7801fefd53fce590aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:cf:89:6e:f9:07:17:4f:fe:d9:78:28:2a:
42:72:63:a0:27:d4:31:da:da:ef:75:6c:e2:e3:14:
4c:a8:11:90:5e:d5:c2:db:89:90:32:e1:be:81:75:
dd:63:4b:2b:e3:17:f2:b8:ed:5c:98:82:ae:02:89:
3d:a2:4f:bd:86:8c:6e:ce:fd:39:ad:8b:f1:e5:de:
a7:c6:b3:a3:94:cd:b2:75:2f:53:d7:7c:1c:9a:ff:
d9:f0:11:20:bc:2b:e3:65:d2:b9:29:85:ad:64:27:
89:0d:df:09:59:e3:c8:7e:7b:8d:64:7c:e9:9b:4f:
18:f0:7c:a1:82:29:5e:17:14:bc:35:db:1e:28:51:
ce:dd:29:b6:fc:57:ad:21:e8:01:e7:b0:ad:8b:ae:
08:01:7d:c5:8b:2b:8e:6c:7c:3c:52:86:bf:d8:35:
39:7e:ff:5b:f5:ee:2c:5f:64:b7:46:4f:00:b3:09:
74:b0:bb:49:53:31:ff:6b:4e:d3:24:3d:4a:39:df:
86:e3:25:af:44:3a:d1:02:c1:c9:62:45:d7:4e:dc:
78:a3:56:f2:a6:0c:23:68:2e:f5:2c:0c:07:f9:15:
e9:17:a8:13:07:8a:0f:5f:d0:a4:a6:fe:13:4b:0a:
ae:32:e8:76:0c:4e:39:1c:3f:1a:0d:1b:2c:c3:8d:
7c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:A8:72:EB:29:1A:A5:6C:A9:B7:80:1F:EF:D5:3F:CE:59:0A:BA
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/HcyocuspGqVsqbeAH-_VP85ZCro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.176.0/22
Signature Algorithm: sha256WithRSAEncryption
68:19:be:8f:2b:a7:09:8a:83:17:41:8d:e7:d2:0a:3a:81:61:
f7:35:49:3e:00:96:2c:fd:25:b3:82:03:cf:51:1c:4d:8a:a5:
8b:ca:e5:25:b1:3c:03:7b:22:d0:69:13:34:f0:47:bc:ff:2b:
39:22:22:15:78:96:bb:b6:0a:2a:4e:4a:9a:9e:d8:96:db:e7:
e4:e4:9c:12:6e:ae:05:88:db:23:73:b0:69:fd:5d:d5:a9:a0:
f0:a5:23:3c:27:89:69:e0:a2:11:e4:2c:2d:98:f9:bf:bd:b7:
a0:a1:3b:8f:18:23:3e:94:2a:b1:0c:82:e9:b6:a4:ab:55:34:
68:bf:84:29:d2:5e:9b:bf:15:c0:3c:90:4b:f0:bd:b8:7b:24:
38:3e:cb:03:03:cf:83:33:dd:37:0f:58:00:fb:62:6e:64:fc:
9b:b9:37:de:4f:1d:dc:44:32:99:1d:a5:c9:89:b5:f3:cd:40:
30:b4:0b:14:1b:35:48:99:98:9e:5d:40:d2:99:1e:9f:70:8d:
9e:a5:b2:cd:66:fe:81:82:fb:fd:46:f7:b8:94:ff:26:19:ec:
42:f0:4e:e0:a2:1f:d9:ac:5d:69:cd:d2:2a:f6:6c:5c:bf:9e:
a9:9b:62:2e:3a:17:d1:f7:6d:ff:1d:bc:08:05:33:4f:80:6c:
10:a1:b9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:19 2025 by rpki-client