Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/hfs-YzP6nv6sgPWgk_pT1me56Sk.roa
File: hfs-YzP6nv6sgPWgk_pT1me56Sk.roa (raw, json)
Hash identifier: SFY/pbJ7uaKvl1OJYT6Ej8ps0w5DL6yoQ5oGVDf68yQ=
Subject key identifier: 85:FB:3E:63:33:FA:9E:FE:AC:80:F5:A0:93:FA:53:D6:67:B9:E9:29
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018B7BAE839BF06FF574E1EC69119398D182
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/hfs-YzP6nv6sgPWgk_pT1me56Sk.roa
Signing time: Sun 29 Oct 2023 13:45:16 +0000
ROA not before: Sun 29 Oct 2023 13:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328867
IP address blocks: 85.92.112.0/24 maxlen: 24
45.158.254.0/24 maxlen: 24
185.245.0.0/24 maxlen: 24
185.243.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7b:ae:83:9b:f0:6f:f5:74:e1:ec:69:11:93:98:d1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 29 13:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85fb3e6333fa9efeac80f5a093fa53d667b9e929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:c7:d0:84:6d:a4:fd:3c:cf:24:24:64:e0:
be:33:03:49:a4:07:aa:c3:33:6f:fa:40:f4:f0:71:
41:44:3b:9e:d4:ed:03:26:6c:77:aa:c5:5e:f3:a6:
95:7f:e4:e3:e5:be:d9:cb:d9:82:a7:60:81:6c:99:
f0:9c:da:92:44:62:74:70:a5:61:ba:75:5c:5d:f0:
93:a9:67:1a:8a:b6:17:c7:e9:1a:6b:e2:94:78:07:
62:89:61:da:c5:51:41:21:80:d7:5c:9b:c3:ef:2d:
83:d8:b4:19:0b:6b:1e:6c:c6:35:ae:5e:15:3c:2d:
ff:85:95:8e:d3:b2:42:41:cc:0b:25:cc:b2:60:b4:
0f:e4:16:50:7d:d1:21:dc:d1:ff:15:34:4d:ca:37:
2c:0a:ff:8f:06:56:ec:27:df:5e:c5:71:d9:42:0d:
32:e1:24:9e:9c:e2:6a:fb:6a:51:15:51:a7:d4:66:
a6:7b:2f:7b:36:3e:fc:19:28:cd:44:af:fe:89:89:
e8:28:4e:d6:bc:f9:f3:d8:d9:50:05:0f:2d:cc:3b:
45:73:68:32:5c:10:8b:a8:d4:f1:7b:e6:ef:ba:bc:
38:0d:64:0c:1a:0f:10:0e:dc:82:96:03:cc:05:ef:
9e:91:58:6a:87:65:63:47:15:b7:a3:6b:a7:11:06:
eb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FB:3E:63:33:FA:9E:FE:AC:80:F5:A0:93:FA:53:D6:67:B9:E9:29
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/hfs-YzP6nv6sgPWgk_pT1me56Sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.254.0/24
85.92.112.0/24
185.243.7.0/24
185.245.0.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ec:20:74:15:de:29:9f:69:0e:f2:f9:34:b3:90:0f:d8:3a:
87:60:c2:4e:68:32:4b:e1:1d:87:a8:84:09:88:4b:12:e4:94:
f1:95:ea:9a:ce:6e:90:ad:1a:17:aa:9b:71:24:32:44:5e:6d:
23:32:2b:30:5b:d2:16:37:8d:ba:f5:16:fd:f0:82:e9:21:84:
89:74:11:43:e4:c4:a8:ca:21:e1:b1:d3:5b:26:c7:4a:c1:2c:
f4:8d:3a:bd:eb:78:60:54:26:75:78:58:e3:e5:db:65:ef:bd:
39:a0:90:31:47:a8:c1:da:4b:de:c4:86:6f:68:10:de:3b:6c:
ed:5f:cb:cb:11:bd:62:2b:50:8b:3a:c5:68:29:0a:54:ab:3e:
bb:10:a1:f0:4d:be:cc:e0:0c:bb:1e:c9:c9:ba:ee:6b:33:a8:
39:49:34:47:69:2e:56:00:2a:d9:5b:55:8c:59:c0:ca:58:6a:
0e:91:f6:49:c5:eb:3c:29:4e:ec:5f:60:53:de:e2:aa:8b:ec:
2d:7c:ad:84:71:e6:2d:36:4c:ce:52:a1:65:c1:0a:64:d3:32:
a2:de:16:b0:c3:49:10:37:03:fc:93:8a:67:01:d9:0b:6e:5c:
ba:2a:8f:bd:35:5c:20:90:2e:5c:ad:f9:61:03:f2:58:2c:71:
55:60:da:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:48:08 2025 by rpki-client