Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/G8HNb0rHwdVWFxaX8ufdkGtqYlQ.roa
File: G8HNb0rHwdVWFxaX8ufdkGtqYlQ.roa (raw, json)
Hash identifier: bxlaJCqK1zHT7PBqnPabygaAEVwt2BWi51/gghEUvQk=
Subject key identifier: 1B:C1:CD:6F:4A:C7:C1:D5:56:17:16:97:F2:E7:DD:90:6B:6A:62:54
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01860E098CC23498590822705C3B6AF8B461
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/G8HNb0rHwdVWFxaX8ufdkGtqYlQ.roa
Signing time: Wed 01 Feb 2023 17:32:32 +0000
ROA not before: Wed 01 Feb 2023 17:32:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 194.113.238.0/24 maxlen: 24
194.113.239.0/24 maxlen: 24
185.221.196.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0e:09:8c:c2:34:98:59:08:22:70:5c:3b:6a:f8:b4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Feb 1 17:32:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc1cd6f4ac7c1d556171697f2e7dd906b6a6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:62:4b:fb:bf:6e:f5:76:b4:69:29:63:87:
c5:1d:48:e8:5b:c9:7b:56:e5:65:f8:4d:f0:05:b1:
53:92:ba:9f:a3:77:12:8a:69:c8:aa:06:05:3a:54:
17:29:ff:03:12:07:ae:7c:7a:b5:d4:be:9f:d0:48:
00:98:4c:0f:6d:e5:71:82:ca:9a:23:fc:98:60:79:
89:b2:c2:fe:f2:91:b3:34:b8:15:d5:3c:20:0f:1b:
4a:2e:8e:b2:22:fe:8b:93:92:76:ce:28:e2:ec:80:
46:1f:81:e3:7d:7f:55:8f:56:f3:48:a6:90:ce:b1:
05:b5:88:fc:f1:da:a2:c6:42:bb:45:82:79:7f:37:
ae:94:42:aa:75:5c:17:17:7f:6a:21:f8:ad:25:d2:
6c:83:57:12:29:e7:38:5b:92:a0:70:01:5f:85:1a:
48:b5:f9:2f:44:da:1c:1f:33:cb:f5:d3:7e:f9:b0:
b3:18:ae:7a:0a:c7:76:c1:73:54:bc:5e:c0:41:35:
35:ec:5a:7a:92:2a:04:1e:7f:29:29:df:d3:ca:0f:
22:4b:2c:f9:35:28:6a:6c:cb:35:d4:8f:a4:81:40:
9c:e1:d7:bf:a5:22:df:d2:17:03:22:bb:11:89:ad:
e8:92:b1:0c:a0:89:3a:f5:53:b2:ae:9e:d7:87:cc:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:CD:6F:4A:C7:C1:D5:56:17:16:97:F2:E7:DD:90:6B:6A:62:54
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/G8HNb0rHwdVWFxaX8ufdkGtqYlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.196.0/23
185.238.88.0/22
194.113.238.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:02:e3:41:cd:de:89:a8:f9:53:b1:6b:f6:18:c1:0d:fe:8f:
f7:c4:0b:b9:77:e5:b7:43:6d:a6:3a:2e:20:fb:9e:ae:f3:12:
b4:02:9d:51:18:94:c4:91:37:b0:6a:e0:f0:58:ab:61:a8:f4:
c0:96:61:f5:c3:31:6d:05:42:7f:7b:cd:1a:97:cc:81:1b:f0:
68:63:56:c3:f3:bf:13:39:3a:a2:9c:1c:5b:b1:2f:72:ca:2b:
45:1d:98:96:8f:37:c4:e5:b1:8d:9f:b1:77:eb:6f:57:6a:78:
9a:12:b1:fa:71:0d:e6:8a:28:37:e9:96:d4:59:c7:dc:db:2d:
f4:e6:05:de:cf:d7:1e:3e:d0:b0:49:39:ae:fb:12:4c:74:1f:
26:58:08:e7:79:32:e1:40:81:9a:5f:bd:2d:70:5d:c2:40:a6:
93:1e:ae:cd:3a:dc:11:03:51:1e:55:9d:2f:2a:83:a6:2a:a7:
33:ab:ca:30:71:e6:9c:bc:0a:22:34:55:9c:08:b8:99:16:65:
70:6d:e2:a5:1a:cc:2a:2a:95:73:91:6b:8c:51:39:47:e9:45:
c8:61:ab:fa:62:86:28:53:94:cf:62:00:3a:f1:49:0a:de:6f:
fe:42:7f:fc:a2:5d:c2:e1:d1:14:b7:2d:8b:92:7c:34:87:46:
97:96:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:40 2025 by rpki-client