Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/hRVhEf81E1JZ-6kT8m8nkkjAY4I.roa
File: hRVhEf81E1JZ-6kT8m8nkkjAY4I.roa (raw, json)
Hash identifier: VG7Da8R31YLE1lrFmruyezlaNKf4Ne94IZUA8woJSPo=
Subject key identifier: 85:15:61:11:FF:35:13:52:59:FB:A9:13:F2:6F:27:92:48:C0:63:82
Certificate issuer: /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial: 05DFD1D6
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/hRVhEf81E1JZ-6kT8m8nkkjAY4I.roa
Signing time: Sat 01 Jan 2022 02:54:30 +0000
ROA not before: Sat 01 Jan 2022 02:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31027
IP address blocks: 185.125.80.0/22 maxlen: 24
176.67.184.0/21 maxlen: 24
2a06:b740::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98554326 (0x5dfd1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Validity
Not Before: Jan 1 02:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85156111ff35135259fba913f26f279248c06382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:a1:3a:0e:2e:5d:3a:08:c7:cc:67:80:e9:
b5:c0:43:56:65:74:11:52:55:11:62:6b:55:f3:b8:
d2:ed:97:eb:63:c8:cf:94:53:bd:f7:24:74:c4:28:
56:77:24:95:78:b5:5d:f2:5a:8f:6b:43:a0:72:1e:
a0:31:47:10:b3:5e:c1:3e:c9:c4:2a:56:c9:fc:72:
05:48:fa:af:32:32:1f:a3:51:53:36:10:14:c6:bc:
01:15:4d:99:c0:29:92:d6:f6:98:ce:aa:c0:a1:01:
26:de:af:7d:d0:27:2e:59:c4:39:2c:28:0f:e1:70:
c0:d7:aa:18:e9:dc:d3:78:a9:40:93:6e:d3:a5:7c:
4b:f0:2d:6b:48:9f:7a:48:ff:81:e0:0f:88:ea:6b:
48:64:0d:9a:05:15:29:c5:74:56:db:c2:56:62:0b:
9e:31:76:14:ee:90:45:d3:b2:51:b0:91:78:16:4e:
95:6b:90:61:7b:57:bb:d5:42:02:89:a7:63:f6:25:
b9:0d:2a:1b:0f:c3:4d:82:48:d6:d9:07:fe:5c:6d:
c4:ce:4d:a9:bc:44:fe:59:0e:ea:45:a5:2d:94:5f:
a7:16:83:79:0e:d3:1f:91:7f:31:a4:07:38:8d:c8:
0a:78:f6:fe:50:1f:e2:00:1d:1e:58:00:b7:bc:8d:
06:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:61:11:FF:35:13:52:59:FB:A9:13:F2:6F:27:92:48:C0:63:82
X509v3 Authority Key Identifier:
keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/hRVhEf81E1JZ-6kT8m8nkkjAY4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.184.0/21
185.125.80.0/22
IPv6:
2a06:b740::/29
Signature Algorithm: sha256WithRSAEncryption
1f:32:ed:32:65:ae:1b:a1:9f:f0:79:81:75:24:7a:47:95:8b:
06:9a:54:da:57:fe:81:c7:dd:f7:e8:cb:56:ee:0b:9f:3e:7d:
db:c0:5d:7e:de:2d:c5:b4:62:83:4f:df:33:8c:0a:f2:0e:e1:
36:e8:4b:a4:fc:4b:d8:0b:e1:ae:f7:8d:e4:79:be:d9:63:62:
57:7f:59:5c:87:81:98:bb:8c:15:af:c7:88:b4:b5:64:74:07:
f5:af:6f:16:10:fc:17:ad:ef:5f:1e:b8:36:16:f7:3e:f5:6c:
0f:e0:79:45:cf:cd:04:e9:dc:80:f2:34:df:b1:e0:35:db:a9:
dc:78:61:b2:95:9a:46:6b:95:78:c5:3f:37:64:60:ba:2e:ad:
6e:a8:a3:11:8b:92:d9:a4:82:c9:ce:3d:9c:e2:b9:c2:d7:55:
13:87:7a:21:37:37:e7:a5:b7:8c:7b:a2:79:a6:30:b7:da:19:
e6:61:88:36:18:dc:0d:24:4a:61:37:47:00:5d:a4:bb:a2:74:
b1:a2:2a:80:dd:ff:21:66:9a:1d:e2:a3:70:80:07:0b:45:94:
05:7b:a5:fb:a6:4e:43:04:d2:d1:b9:f4:a5:6f:0a:10:7b:d4:
2d:a2:69:2b:3a:46:6d:b2:06:b1:be:25:63:7b:1c:8c:df:f6:
b0:03:e7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:36:57 2025 by rpki-client