Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/hka2H-t_EF7C16XdMs_4Qe4Rl2w.roa
File: hka2H-t_EF7C16XdMs_4Qe4Rl2w.roa (raw, json)
Hash identifier: xhI9B/ldyPG0zSFiI+FeYcZBJdQj7m9QABiAn0LaS1A=
Subject key identifier: 86:46:B6:1F:EB:7F:10:5E:C2:D7:A5:DD:32:CF:F8:41:EE:11:97:6C
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 018BAE6E7964EBE1C3CC5D4A88C311048F15
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/hka2H-t_EF7C16XdMs_4Qe4Rl2w.roa
Signing time: Wed 08 Nov 2023 10:15:57 +0000
ROA not before: Wed 08 Nov 2023 10:15:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29076
IP address blocks: 212.113.125.0/24 maxlen: 24
212.113.126.0/24 maxlen: 24
37.202.12.0/24 maxlen: 24
37.202.13.0/24 maxlen: 24
212.113.114.0/23 maxlen: 23
212.113.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:6e:79:64:eb:e1:c3:cc:5d:4a:88:c3:11:04:8f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Nov 8 10:15:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8646b61feb7f105ec2d7a5dd32cff841ee11976c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:f1:7a:c1:29:53:b1:1c:ff:37:db:1c:90:
6e:fc:ae:01:e2:4a:e5:fb:ab:f0:9c:8a:41:48:8a:
d6:f2:ca:56:ea:76:f1:9c:4a:02:f7:8f:be:17:af:
3a:52:f7:cf:68:9c:cf:65:10:98:c1:ea:00:56:58:
4b:73:66:3f:63:76:9d:4c:d1:45:1e:18:68:bc:26:
58:71:a5:ee:b1:67:1b:9d:dc:dc:4f:66:35:6b:7a:
eb:11:51:4b:1d:f4:fa:63:bf:78:7a:cb:fb:9f:7d:
1b:64:c4:06:52:6f:bf:1c:34:79:a0:81:71:69:d6:
de:15:d7:20:80:cd:2d:f5:71:3a:a5:5c:66:e0:2f:
c5:42:c8:8a:c7:91:bf:dc:2c:6c:f8:bf:1a:37:e0:
c0:44:2d:b2:d3:4f:8b:9e:e9:a4:a1:c9:de:22:0a:
70:c6:b4:ec:c6:94:be:17:9f:ab:e1:c9:9d:5a:16:
ef:0b:d2:61:d6:4c:33:68:96:81:64:45:5e:5b:24:
75:0a:27:88:ec:11:c6:2d:a1:da:46:ac:c3:cc:d0:
6c:5d:d4:fb:3a:66:aa:35:87:48:52:7f:91:88:37:
a2:60:6e:1d:a6:28:b6:96:cb:01:52:46:0a:f6:58:
90:a0:7c:4d:31:98:cb:e1:dd:e6:da:16:2b:1c:fe:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:B6:1F:EB:7F:10:5E:C2:D7:A5:DD:32:CF:F8:41:EE:11:97:6C
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/hka2H-t_EF7C16XdMs_4Qe4Rl2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.12.0/23
212.113.114.0/23
212.113.125.0-212.113.126.255
Signature Algorithm: sha256WithRSAEncryption
5a:4c:3e:b8:8f:d4:ef:76:bd:2f:1d:a0:4c:dd:1d:cb:61:22:
70:54:d5:11:d1:eb:47:1f:1a:90:eb:a3:fa:b5:07:99:be:03:
17:75:36:58:ef:73:3e:63:7a:0c:0f:d8:3f:0b:bd:fe:14:48:
a8:32:ce:82:cf:48:39:de:56:b6:8a:94:b2:9e:37:8b:a5:3b:
d8:1c:f8:ba:94:49:fd:03:a0:0a:61:7a:37:4f:23:87:98:af:
f0:b2:16:00:a7:44:13:12:b0:7d:4d:ee:c2:29:7d:02:5a:8a:
81:cc:b2:0b:0f:84:56:8e:cc:ee:7a:33:eb:ad:58:79:85:9b:
99:14:6d:47:5e:d7:dc:66:8c:6f:11:94:fa:b6:f2:dd:c0:1f:
57:16:ed:23:a7:94:cd:64:5a:45:3d:84:0a:73:37:88:9c:42:
18:31:6a:a6:57:3a:8c:7e:fc:ef:15:4b:7e:74:29:35:a0:67:
b8:44:b5:c7:26:55:c9:62:be:47:94:57:76:cc:ef:c2:3a:f4:
8e:11:cc:a2:3e:61:9d:ab:6a:1d:98:d6:c0:d7:a0:ec:c5:77:
60:47:ad:45:be:0b:6e:06:7b:0a:d6:34:09:2d:3d:fe:aa:1e:
26:7d:a3:61:9f:9a:41:2b:b5:9b:04:f4:aa:46:c6:e7:99:6b:
7d:80:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:26 2025 by rpki-client