Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/HUVwDSieMkQ1n3EETX0YBXmiqcA.roa
File: HUVwDSieMkQ1n3EETX0YBXmiqcA.roa (raw, json)
Hash identifier: 9OtlCyY0d/WAp3jOB+MmOIa19B9Cx+/bxmIm0hNiUjM=
Subject key identifier: 1D:45:70:0D:28:9E:32:44:35:9F:71:04:4D:7D:18:05:79:A2:A9:C0
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 0A4EC005
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/HUVwDSieMkQ1n3EETX0YBXmiqcA.roa
Signing time: Sat 01 Jan 2022 11:55:13 +0000
ROA not before: Sat 01 Jan 2022 11:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199551
IP address blocks: 194.29.180.0/22 maxlen: 22
185.101.188.0/23 maxlen: 23
213.5.0.0/22 maxlen: 22
185.11.108.0/22 maxlen: 22
185.11.110.0/24 maxlen: 24
2a00:c020:4000::/36 maxlen: 36
2a03:22c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172933125 (0xa4ec005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Jan 1 11:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d45700d289e3244359f71044d7d180579a2a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:3b:fd:7a:0e:f1:dc:d0:19:c0:1e:c9:a7:
f7:92:e7:8f:4f:25:0b:91:a9:49:bf:86:c3:9e:b8:
03:db:b0:49:44:c6:90:96:3b:86:11:ef:69:c8:0b:
1e:19:e6:0f:7f:1f:d1:85:39:af:7f:ca:d2:4c:6d:
64:3b:06:7f:a0:53:4e:45:88:b7:03:af:06:4d:e0:
d1:95:32:07:27:0b:2f:da:21:dd:21:23:b3:9b:13:
b0:ac:ba:3a:26:c0:0a:ff:a3:b7:c3:8d:47:e2:d4:
27:7b:f5:37:5b:24:49:5a:f1:f8:c3:1a:73:66:6c:
c9:93:ae:2e:c5:b6:61:f2:46:2d:09:1b:b2:0f:f6:
05:9f:e0:b0:5e:f0:c4:79:fa:df:c3:ca:a5:65:9b:
24:59:1e:9e:77:e6:14:8d:c8:ae:79:ce:90:e4:76:
5e:14:da:0a:4d:49:78:6f:c0:23:7b:74:4d:a3:03:
25:05:6d:c4:5d:d2:8b:fa:5b:b6:90:ce:9b:30:b1:
8d:e7:be:ba:03:44:57:0e:96:4c:b1:eb:59:d0:8d:
33:5b:71:37:7d:89:78:00:87:23:70:58:6d:f5:f7:
c7:4e:c2:14:89:be:42:ac:65:f7:9f:a0:ff:a7:68:
2c:c0:f1:0b:29:d5:c1:98:42:49:80:48:32:6a:10:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:70:0D:28:9E:32:44:35:9F:71:04:4D:7D:18:05:79:A2:A9:C0
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/HUVwDSieMkQ1n3EETX0YBXmiqcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.108.0/22
185.101.188.0/23
194.29.180.0/22
213.5.0.0/22
IPv6:
2a00:c020:4000::/36
2a03:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
4c:0e:78:b8:be:b9:64:31:40:ec:d3:23:c0:11:52:c1:45:65:
c0:f3:e4:98:23:d9:48:bf:eb:bc:99:14:64:f7:ec:0d:b4:2b:
45:23:1c:12:de:72:3e:9b:a0:f4:89:c9:1b:ef:79:9d:6d:4f:
41:05:3b:c7:8c:f8:9c:43:e4:55:76:17:8b:d8:18:e3:b8:82:
7d:5f:8f:78:8a:16:a0:23:e5:86:0e:14:ad:03:ab:1d:1a:8f:
86:4f:c8:9c:f1:3a:3a:43:6c:e5:dc:bd:c0:1b:63:c0:48:67:
da:f7:29:e9:dd:b8:46:38:18:5d:2c:b1:f5:b8:1f:6c:d5:62:
55:8e:2d:9c:4b:f2:07:01:a3:aa:9a:e7:00:d5:b0:c1:e1:b8:
00:1f:2c:65:b2:e7:e5:a4:5b:7e:dc:86:3b:56:6b:aa:66:f2:
1c:cc:e9:e8:aa:10:35:b6:2a:40:29:af:1e:25:12:b1:f8:af:
e0:09:ab:db:e1:74:08:2b:50:9a:cf:44:e6:d7:54:ce:fe:07:
b0:08:e0:7e:61:b7:e5:45:c2:26:40:4f:cd:8f:f6:4a:aa:50:
f3:f4:05:60:94:6d:ee:bc:29:a1:27:4d:46:e8:8f:5b:3f:cd:
e6:df:52:3f:27:30:e0:31:3c:74:f1:35:86:56:61:1d:c8:aa:
19:98:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:38 2025 by rpki-client