Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/HxHiLRYTihFapxPrYQHCYp7xRs4.roa
File: HxHiLRYTihFapxPrYQHCYp7xRs4.roa (raw, json)
Hash identifier: jyklJ4euNLDu56LXkAzrTRr21lbNIZY+luan2m+OhvA=
Subject key identifier: 1F:11:E2:2D:16:13:8A:11:5A:A7:13:EB:61:01:C2:62:9E:F1:46:CE
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01872DC388BD88DAA8C3D7363B3B39FD3312
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/HxHiLRYTihFapxPrYQHCYp7xRs4.roa
Signing time: Wed 29 Mar 2023 14:26:41 +0000
ROA not before: Wed 29 Mar 2023 14:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.160.193.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:c3:88:bd:88:da:a8:c3:d7:36:3b:3b:39:fd:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 29 14:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f11e22d16138a115aa713eb6101c2629ef146ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2d:57:3e:0b:54:eb:b5:47:51:30:02:46:c7:
ee:87:a1:24:50:21:cb:a4:c5:ba:54:d5:6c:22:ed:
ca:d2:d3:7c:5c:7c:a3:5d:24:bd:57:68:05:cb:78:
ad:b1:1b:1e:40:16:6a:53:2f:1e:d4:fd:94:0d:c4:
af:3d:ee:82:4d:a6:a4:67:75:2f:35:15:88:21:b2:
ad:a2:93:b0:07:17:9c:10:33:c1:c2:3d:c4:bb:a5:
8b:4d:41:bb:93:6a:83:05:0c:4d:0d:10:fd:db:91:
bf:62:a4:e1:6c:d5:82:ba:f8:5f:02:d0:9b:c6:b2:
0c:00:29:e5:e6:7d:1d:15:09:d6:af:e6:b0:eb:47:
58:13:6d:7b:fa:81:24:35:04:cb:fb:dc:09:bf:a8:
8b:7c:4a:4f:7e:54:17:88:a9:e0:41:6c:36:44:eb:
e0:86:db:86:f6:09:87:3f:74:56:c7:af:d0:a3:b8:
c6:9f:f0:0f:50:dc:47:82:9c:47:bf:10:f1:3c:6c:
53:45:2a:b1:ca:8c:bb:fa:c4:bb:ee:d1:63:5b:04:
3f:fe:34:36:b6:6b:36:b8:80:9f:89:9f:de:6d:18:
26:cc:cb:7f:cc:2c:8b:f4:44:80:4c:96:81:70:bc:
db:32:0c:6d:0c:2a:9f:02:2c:59:ba:66:07:09:76:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:E2:2D:16:13:8A:11:5A:A7:13:EB:61:01:C2:62:9E:F1:46:CE
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/HxHiLRYTihFapxPrYQHCYp7xRs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:8e:48:97:18:6f:ac:80:0c:7d:88:68:77:57:37:b3:40:2d:
85:e6:5e:5a:96:d1:d6:8c:e9:d0:4c:8d:8c:a3:50:79:b7:ec:
83:32:39:6b:ff:c0:bb:e6:bf:be:7d:2b:93:71:00:f4:84:da:
aa:55:8e:68:fb:b2:33:61:d8:f2:ee:19:ae:ee:e3:96:a0:15:
21:d4:f9:32:af:e4:d0:88:c7:bf:14:fa:50:12:3c:1f:36:f3:
7d:4e:55:31:12:25:d3:b4:a5:c7:d4:fe:77:89:7e:29:d7:17:
a7:46:ff:85:16:92:e6:48:b3:9d:bf:0b:62:55:44:58:4c:c7:
ee:ce:d6:98:4c:81:c8:f2:2b:0b:4a:b4:b6:d8:1d:3e:d7:b3:
b3:83:43:f4:11:18:57:49:6b:92:08:ae:e5:ef:08:52:bf:97:
db:63:00:9d:73:43:4f:e6:6b:47:8f:de:59:9c:ad:94:6d:c4:
98:1e:63:0f:60:84:b9:81:52:67:6c:06:e8:01:ef:bd:db:8e:
73:ff:09:d4:3b:e5:30:67:f4:6d:9a:bb:90:c3:77:b5:c5:3e:
91:4c:77:3b:1f:06:e5:4a:a0:46:25:e4:c0:69:11:18:31:5e:
dc:4e:40:d5:39:d9:71:56:ef:8d:4a:8c:56:69:93:14:97:85:
77:33:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:30 2025 by rpki-client