Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/HP0iU8oMtqubKZXt_WyW5qxqr7k.roa
File: HP0iU8oMtqubKZXt_WyW5qxqr7k.roa (raw, json)
Hash identifier: i92wBrK+mRyqVTZYzeXhgPcK2UDh8vteGPLrjRBQlcY=
Subject key identifier: 1C:FD:22:53:CA:0C:B6:AB:9B:29:95:ED:FD:6C:96:E6:AC:6A:AF:B9
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 0184AD6B6F2A21BB498B103468B67334E02A
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/HP0iU8oMtqubKZXt_WyW5qxqr7k.roa
Signing time: Fri 25 Nov 2022 06:13:29 +0000
ROA not before: Fri 25 Nov 2022 06:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25591
IP address blocks: 93.190.176.0/22 maxlen: 22
93.190.180.0/22 maxlen: 22
37.75.216.0/22 maxlen: 22
37.75.220.0/22 maxlen: 22
80.242.96.0/20 maxlen: 20
80.242.96.0/22 maxlen: 22
217.175.4.0/22 maxlen: 22
80.242.100.0/22 maxlen: 22
80.242.104.0/22 maxlen: 22
80.242.108.0/22 maxlen: 22
31.3.24.0/22 maxlen: 22
31.3.28.0/22 maxlen: 22
185.14.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:6b:6f:2a:21:bb:49:8b:10:34:68:b6:73:34:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Nov 25 06:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cfd2253ca0cb6ab9b2995edfd6c96e6ac6aafb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bf:32:4e:eb:f4:20:71:65:b9:71:04:56:75:
4a:68:12:69:86:93:16:da:33:03:c8:6a:13:24:64:
68:ef:f9:0c:43:9b:73:d0:66:9d:a3:ae:8a:b7:6e:
20:6d:c3:a3:1c:01:ce:ba:92:8c:89:b1:fa:6f:71:
b4:e8:38:0f:48:35:8a:c3:d1:8b:18:fb:fd:5e:33:
f4:85:8e:cf:af:d9:bf:90:2b:73:72:c8:ba:7c:ad:
e7:cb:d1:46:9c:07:60:91:97:67:96:db:79:70:eb:
1c:ea:50:29:c8:39:86:4b:bd:31:d2:b7:9a:c3:0b:
38:a4:f6:01:c4:7b:43:60:5f:44:a4:ea:e2:e7:12:
5a:21:eb:c6:6b:b0:8e:16:b8:3c:2c:1c:33:1e:fc:
af:15:a8:38:e3:56:5e:65:72:2b:63:9f:1d:74:6a:
38:09:4d:da:db:a2:ba:4f:29:b8:d1:64:23:41:91:
78:c2:e7:de:33:c0:b8:30:cc:1a:76:63:ac:7d:c3:
a3:e2:ff:a3:e6:a0:27:e8:36:2d:ba:6c:d4:a5:16:
1d:a1:e1:58:13:d1:79:dc:31:23:76:bf:0b:94:5e:
05:11:e2:b3:c6:6a:15:9d:85:6e:53:8f:1d:94:9e:
03:67:24:bf:b6:05:cd:8f:4e:4d:34:be:5d:36:a0:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FD:22:53:CA:0C:B6:AB:9B:29:95:ED:FD:6C:96:E6:AC:6A:AF:B9
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/HP0iU8oMtqubKZXt_WyW5qxqr7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.24.0/21
37.75.216.0/21
80.242.96.0/20
93.190.176.0/21
185.14.16.0/22
217.175.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:0f:0b:41:0a:fc:8a:8e:20:20:ad:dd:e7:d1:83:8d:82:c6:
56:41:17:ef:1c:ae:f8:15:96:ba:36:96:d8:11:f1:f3:40:c9:
dd:9c:da:f8:b5:a4:ab:b1:54:c1:9c:cc:60:6f:ad:2d:6d:c2:
44:59:92:e4:22:d2:8c:00:75:cf:3c:a6:cd:56:cb:e4:b7:04:
1c:70:75:5a:6c:e7:e3:8b:d8:fb:43:2d:00:76:5c:33:16:27:
79:a8:66:10:33:f3:b7:f6:d5:21:ae:a4:ec:0d:04:68:e2:43:
c3:27:0c:2d:25:5c:65:4b:eb:07:a2:a4:71:ea:cc:94:fe:8d:
8c:fa:57:eb:8c:2c:97:df:d4:40:20:ad:dc:4f:f2:25:5b:44:
49:5f:70:3c:3b:74:6f:ea:f4:35:76:78:fb:c4:c8:95:18:0d:
50:37:ec:bb:71:90:1d:50:6a:75:21:e2:54:68:b6:0c:b7:1e:
3d:86:29:05:c0:cd:5c:7a:45:37:0b:77:18:50:0a:fc:64:10:
13:d3:84:6e:68:1c:1e:a1:7a:92:8f:24:36:e2:d0:85:16:e3:
2c:2a:ae:a4:01:e2:50:4a:73:d4:90:73:ba:d3:82:18:64:60:
a2:1f:76:4e:8a:1c:cb:eb:19:3f:a0:e1:1f:f9:7e:ce:2e:09:
18:9d:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:15 2025 by rpki-client