Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HVu-O_zjKoM2e6NLMNqjHMGtOz8.roa
File: HVu-O_zjKoM2e6NLMNqjHMGtOz8.roa (raw, json)
Hash identifier: muiB6Xoneudk6LgbTLzuo6lFoJ8UyzaO6vupiB7+aoY=
Subject key identifier: 1D:5B:BE:3B:FC:E3:2A:83:36:7B:A3:4B:30:DA:A3:1C:C1:AD:3B:3F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857398A7C118B0D02DCF76D2B2F3FC2F90
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HVu-O_zjKoM2e6NLMNqjHMGtOz8.roa
Signing time: Mon 02 Jan 2023 17:47:42 +0000
ROA not before: Mon 02 Jan 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204889
IP address blocks: 31.148.20.0/24 maxlen: 24
92.253.204.0/24 maxlen: 24
93.170.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:98:a7:c1:18:b0:d0:2d:cf:76:d2:b2:f3:fc:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d5bbe3bfce32a83367ba34b30daa31cc1ad3b3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:0c:30:58:8b:86:23:9b:52:0c:fe:ef:86:
a7:94:4f:46:6a:bd:50:8e:ae:44:cc:95:ae:3c:40:
bf:cb:45:48:2d:b9:42:92:ac:ab:53:5f:c9:9d:e7:
e7:6b:7f:ee:2c:e1:a0:e7:99:d5:9c:01:ab:c1:47:
14:24:44:0f:9d:c3:5a:db:8e:b4:79:a0:f0:94:bf:
66:b6:94:29:3f:46:f0:6f:c6:41:8d:03:3c:88:83:
46:75:92:7d:0d:db:8e:6b:5a:af:ae:37:3a:d2:a4:
b9:50:b1:98:c8:02:ff:40:2f:d5:09:79:b9:a4:b5:
bd:c7:ea:c6:30:d3:ae:23:ed:22:ef:61:60:a2:f3:
85:aa:78:4e:3e:26:40:ac:59:7e:1a:53:e7:09:aa:
6a:44:7b:50:6f:33:b1:39:d6:9f:d4:e7:10:5b:41:
a5:7d:4e:1e:eb:bf:72:3f:00:8a:61:61:d7:b0:02:
b0:00:f9:98:37:a4:30:c1:7e:18:61:4f:c8:45:ec:
23:f5:cd:e6:2c:df:0e:58:db:1e:39:55:e7:76:a0:
17:ce:48:2b:af:c2:2f:68:f1:1e:5d:bd:2e:2b:53:
b8:8e:77:df:87:63:17:f1:ba:a9:88:4e:a5:23:cf:
04:7e:aa:f6:f9:f8:a6:bb:4a:09:3a:15:99:f0:0e:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5B:BE:3B:FC:E3:2A:83:36:7B:A3:4B:30:DA:A3:1C:C1:AD:3B:3F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HVu-O_zjKoM2e6NLMNqjHMGtOz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.20.0/24
92.253.204.0/24
93.170.15.0/24
Signature Algorithm: sha256WithRSAEncryption
57:31:cf:76:8a:94:c9:6e:a5:ed:ee:59:9c:bd:4a:bc:4d:52:
bf:98:de:54:be:d0:1e:3b:6e:08:65:de:65:e8:cd:5a:d6:05:
8e:fe:2d:fa:aa:33:eb:70:bf:7d:2b:04:45:8f:ba:95:1c:bf:
6c:94:f6:2a:df:fc:a3:ab:ff:31:43:48:df:07:e8:ab:b5:5d:
8e:e3:56:20:2c:c5:57:a5:7d:6f:06:92:e4:af:bb:bf:65:a7:
76:f4:b0:ba:14:95:b7:12:2c:58:a0:95:ef:5e:d0:fa:aa:76:
52:07:32:15:a1:b6:8c:b2:84:88:6d:3d:05:d3:7b:5e:c5:0b:
03:97:d4:88:84:2f:d1:b8:66:7d:63:7e:fb:7e:23:eb:02:5a:
1c:00:06:e3:22:01:35:c2:36:3d:ab:61:99:b4:af:ea:9d:f1:
67:d1:bd:ac:22:69:0b:91:a7:cf:b4:11:f5:22:5e:29:61:65:
6e:0a:3d:48:59:bf:13:eb:2d:73:99:01:6e:02:c9:a3:82:40:
df:e9:c5:40:58:ef:18:fe:ce:20:f5:e4:6d:cd:83:75:98:35:
08:c6:9f:13:7a:d0:58:f8:5c:0c:ad:7a:42:88:f8:a8:ee:e7:
2f:50:d3:2d:00:c1:da:85:9e:38:82:80:d3:3d:32:6e:05:be:
cb:af:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:37:31 2025 by rpki-client