Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/HyP9u4sWJLvmDsfCLZQVKU0-Hu4.roa
File: HyP9u4sWJLvmDsfCLZQVKU0-Hu4.roa (raw, json)
Hash identifier: YqFigdPipFBhGt3OUcPOe1xKLL3cmb4V56j+j7YXWDY=
Subject key identifier: 1F:23:FD:BB:8B:16:24:BB:E6:0E:C7:C2:2D:94:15:29:4D:3E:1E:EE
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 0F111314
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/HyP9u4sWJLvmDsfCLZQVKU0-Hu4.roa
Signing time: Wed 09 Feb 2022 08:50:26 +0000
ROA not before: Wed 09 Feb 2022 08:50:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206575
IP address blocks: 194.5.68.0/22 maxlen: 22
185.155.224.0/23 maxlen: 23
80.253.160.0/24 maxlen: 24
80.253.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252777236 (0xf111314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Feb 9 08:50:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f23fdbb8b1624bbe60ec7c22d9415294d3e1eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:14:d0:9a:17:9a:75:2e:87:7b:4c:51:38:
d6:a2:72:65:9a:e5:08:bd:c0:f4:77:5e:1f:4b:87:
48:66:6f:2f:57:be:18:e2:72:fa:82:cf:55:08:0c:
99:a2:48:24:1c:fb:41:b1:4a:60:3c:5d:a1:aa:af:
c9:50:a9:e8:ca:ba:57:f8:b9:00:60:e7:49:9b:79:
ee:d0:54:c3:4b:8d:55:62:a6:be:39:b6:f7:62:63:
d9:af:c7:6b:21:72:29:1a:c7:26:3f:0d:fc:d9:13:
06:b7:2a:5f:2d:f7:c1:5b:5f:5e:fe:f8:dc:b3:bd:
f7:45:c6:2e:c1:47:f8:d5:ae:b2:fc:a1:80:1b:54:
8d:b3:e0:c9:d7:e1:53:3a:ef:05:c4:88:41:92:cb:
c5:e1:68:c8:5f:66:f2:66:5f:9e:15:d1:8b:70:4e:
a5:53:88:6b:3b:27:43:d2:a5:66:a6:99:40:63:45:
f4:7b:3d:99:26:f4:d3:6f:a0:e8:52:8a:1d:a0:de:
01:0a:07:0e:22:03:da:e3:da:07:26:af:0f:51:3a:
83:2e:bb:6a:aa:d5:34:36:a4:7c:90:a3:78:4c:57:
84:c3:7f:df:87:29:86:cb:c8:2f:55:a4:c8:f0:32:
9b:c4:fe:df:a9:a0:1b:ef:f1:50:16:84:9e:ea:64:
7c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:23:FD:BB:8B:16:24:BB:E6:0E:C7:C2:2D:94:15:29:4D:3E:1E:EE
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/HyP9u4sWJLvmDsfCLZQVKU0-Hu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.160.0/22
185.155.224.0/23
194.5.68.0/22
Signature Algorithm: sha256WithRSAEncryption
07:ad:7c:97:84:88:95:43:67:2c:25:f1:d8:5f:25:80:0b:8c:
3d:46:d9:44:10:3f:c4:d4:e8:19:ce:fa:0e:43:50:13:d4:1a:
5a:1b:88:ff:97:f0:cf:a9:16:bc:32:e1:43:56:02:d7:98:6b:
18:b9:0d:71:ed:97:f0:12:15:03:fb:c7:b5:c4:24:36:0c:f9:
d3:62:29:b7:2d:2a:ef:1c:9a:23:c0:b4:bc:72:cc:aa:fe:8a:
5c:54:3f:68:d9:88:11:b2:04:8c:dd:e6:41:9f:91:96:98:d5:
08:5b:8a:40:60:ba:24:1d:e9:a2:b4:91:54:52:22:ae:d4:db:
a3:c1:ec:d2:1a:f5:03:1c:cb:d8:d5:c1:ef:50:08:79:59:1a:
4d:12:79:33:af:61:4d:31:d9:00:cb:8d:9e:9d:d3:35:14:1e:
57:5f:a6:2e:3c:f6:b7:ea:c4:09:98:3d:00:80:e8:27:f2:5a:
60:35:0e:82:4e:cd:68:a6:8b:bd:61:e9:13:3d:e2:95:8d:06:
bd:37:25:6c:9f:44:d3:36:42:86:42:36:62:9f:7d:af:bd:77:
fc:7e:b4:c3:e4:97:76:b1:5c:57:1e:c7:cd:0e:75:73:3c:1e:
32:3d:21:1f:1e:54:00:3c:17:60:4e:17:c5:86:67:aa:6b:c1:
62:76:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:08 2024 by rpki-client on console-ams.rpki-client.org