Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HhQm-UZMoqPROfy5ZsGk3dpt_z8.roa
File: HhQm-UZMoqPROfy5ZsGk3dpt_z8.roa (raw, json)
Hash identifier: UR/vZbwJZGq1ntcu3UhiQaMr0OBu9QY3axs2DXLh42M=
Subject key identifier: 1E:14:26:F9:46:4C:A2:A3:D1:39:FC:B9:66:C1:A4:DD:DA:6D:FF:3F
Certificate issuer: /CN=66e3ed06e88e5591d9096676951555c0dc535c19
Certificate serial: 018B37F43BD15909C87AD92E0EBEA549EE77
Authority key identifier: 66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HhQm-UZMoqPROfy5ZsGk3dpt_z8.roa
Signing time: Mon 16 Oct 2023 10:07:14 +0000
ROA not before: Mon 16 Oct 2023 10:07:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201020
IP address blocks: 185.28.179.0/24 maxlen: 24
185.28.176.0/24 maxlen: 24
2a04:4000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:f4:3b:d1:59:09:c8:7a:d9:2e:0e:be:a5:49:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e3ed06e88e5591d9096676951555c0dc535c19
Validity
Not Before: Oct 16 10:07:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1426f9464ca2a3d139fcb966c1a4ddda6dff3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:af:18:3f:7b:10:57:12:35:58:c9:1f:b8:
71:ae:b7:a8:ba:93:de:b7:ed:b3:81:d2:ff:23:48:
db:91:37:a8:06:e5:3b:1f:15:97:0d:6b:2c:3e:f4:
72:f6:22:cb:af:92:d4:d2:7b:fa:05:b4:33:7c:93:
48:2c:85:c3:07:37:80:62:da:8b:b2:01:b3:81:e8:
23:e0:f8:58:21:89:ae:a1:e2:51:10:18:4b:03:6d:
ab:73:27:14:67:16:65:2e:6d:b4:c7:cb:ba:e3:e8:
0e:6c:3a:35:7e:38:3b:69:c9:94:01:74:25:a7:b4:
43:e5:91:1c:a7:2d:17:33:4f:99:a9:9b:c5:8a:f4:
04:13:73:90:dd:78:2c:72:5c:03:ac:b1:91:42:60:
23:37:86:0a:ce:8e:0f:bb:74:ea:89:0a:1e:92:36:
63:38:5e:a7:66:fa:43:18:3f:cf:49:b9:14:d3:51:
2d:5e:ba:e0:21:77:10:c0:69:1e:e7:59:ec:29:d0:
c9:be:86:0b:8b:4b:db:a5:a0:97:2d:67:5b:26:79:
25:fa:8e:66:ce:dc:c9:e2:68:a9:73:bf:5a:c9:15:
f8:dc:26:d3:3e:f7:73:53:ed:8f:fb:c9:98:57:cf:
6d:2d:fa:22:26:20:37:1b:18:6d:c9:db:b2:f5:61:
a0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:26:F9:46:4C:A2:A3:D1:39:FC:B9:66:C1:A4:DD:DA:6D:FF:3F
X509v3 Authority Key Identifier:
keyid:66:E3:ED:06:E8:8E:55:91:D9:09:66:76:95:15:55:C0:DC:53:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/HhQm-UZMoqPROfy5ZsGk3dpt_z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8d7548-0753-40dc-8fbb-de21f5fee3db/1/ZuPtBuiOVZHZCWZ2lRVVwNxTXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.176.0/24
185.28.179.0/24
IPv6:
2a04:4000::/29
Signature Algorithm: sha256WithRSAEncryption
36:c5:78:38:7c:c6:74:91:39:24:03:47:86:38:c6:8d:24:04:
a5:4d:fd:ef:96:0b:e9:0a:fd:ec:ac:82:03:13:38:47:97:3a:
6a:8e:86:72:43:63:a1:4a:c9:bb:55:17:69:67:32:67:56:27:
d7:cc:b0:46:c2:34:27:c8:a8:ad:7c:9e:4f:91:71:a5:3a:32:
c1:77:33:09:1a:89:fb:3c:af:12:a2:1c:58:9d:1b:6c:0d:02:
5f:68:5d:f7:e1:f5:dd:ec:dc:14:2b:7b:1e:be:61:8b:53:6a:
d7:ae:61:fd:1d:39:01:62:81:22:e5:6f:92:fe:7e:c5:91:3d:
12:d6:7a:3d:5f:e7:4e:5f:d8:e5:8e:6b:96:59:3d:79:db:b7:
18:df:5f:3b:4e:77:13:39:c4:e5:3e:9a:02:66:17:b7:2f:00:
4a:9d:e5:a4:d7:74:66:29:b9:65:21:3e:3d:4c:b4:1c:64:06:
f8:65:70:fd:33:9d:43:9c:0b:e2:0c:9c:f5:8b:00:81:c3:31:
17:4a:66:95:62:74:5a:6a:66:ff:62:36:ed:ed:79:b4:71:ac:
c6:09:d2:8a:25:ee:a6:d4:49:6b:7a:3f:9f:2b:8d:cb:e9:e2:
81:57:72:6d:a1:df:dc:c3:83:ed:4e:94:3f:ff:c6:10:78:59:
b9:6f:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:42 2025 by rpki-client