Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/heSZAKn6GSqux0-cHLnGvUpIPCA.roa
File: heSZAKn6GSqux0-cHLnGvUpIPCA.roa (raw, json)
Hash identifier: 2gZWQ8bmdbsydrwPYKEDrZ61E7EwL3vNDNPfxyfXYxE=
Subject key identifier: 85:E4:99:00:A9:FA:19:2A:AE:C7:4F:9C:1C:B9:C6:BD:4A:48:3C:20
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 444B25C8
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/heSZAKn6GSqux0-cHLnGvUpIPCA.roa
Signing time: Sat 01 Jan 2022 16:02:46 +0000
ROA not before: Sat 01 Jan 2022 16:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.170.92.0/22 maxlen: 22
159.255.216.0/21 maxlen: 21
94.103.16.0/20 maxlen: 20
185.68.183.0/24 maxlen: 24
185.68.180.0/23 maxlen: 24
5.175.80.0/21 maxlen: 21
2a03:6980::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1145775560 (0x444b25c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 16:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85e49900a9fa192aaec74f9c1cb9c6bd4a483c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:0f:d8:3a:5b:e3:d9:5c:81:cd:e8:95:c6:
7e:e1:a6:d4:0a:65:dc:53:27:25:3e:46:fb:fc:33:
f6:d1:51:4f:65:bb:46:c8:9e:36:1a:a3:32:43:5c:
2f:7b:06:e9:9c:48:e6:0e:3f:0a:86:b5:7f:b2:3f:
5c:68:93:b5:4b:0c:75:e8:d2:2d:b2:4a:ef:5b:a2:
02:7b:21:49:af:57:54:a7:0e:97:63:cf:d4:ca:a8:
fe:ea:a0:ed:68:14:96:2f:0c:c2:91:08:e0:e3:b1:
d0:33:76:ed:5c:74:aa:3c:e6:32:2a:cf:b1:10:db:
e5:f3:05:50:74:68:2b:42:27:92:e9:fb:11:cd:83:
70:6f:cd:8d:f4:8e:76:61:70:e7:63:1f:ca:d0:f1:
7d:28:cd:5b:ec:74:0e:30:30:f8:34:0c:50:c7:84:
7f:2c:cf:91:49:12:4c:83:73:52:33:b1:c1:c7:2c:
62:03:dc:85:f8:1d:4d:48:51:11:3a:f8:e6:ca:85:
23:f2:cc:99:d4:90:41:d2:2d:6e:78:9b:03:8c:ec:
d7:37:90:5b:5b:ea:cb:ab:d0:85:a0:61:9c:7b:72:
7b:b8:f4:e8:65:ff:84:8b:fb:3c:68:0f:eb:d0:fc:
e1:79:1e:85:63:49:4d:73:45:8f:8a:41:f4:92:fb:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E4:99:00:A9:FA:19:2A:AE:C7:4F:9C:1C:B9:C6:BD:4A:48:3C:20
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/heSZAKn6GSqux0-cHLnGvUpIPCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.80.0/21
94.103.16.0/20
159.255.216.0/21
185.68.180.0/23
185.68.183.0/24
185.170.92.0/22
IPv6:
2a03:6980::/32
Signature Algorithm: sha256WithRSAEncryption
b2:38:e8:6f:0a:2c:b5:ca:08:b1:a8:8f:81:f0:89:ed:70:f8:
e2:6e:a0:9b:fb:4a:95:4e:12:71:02:41:0e:ea:7a:45:be:08:
f3:07:1a:e3:73:ed:1e:02:c1:67:3f:34:8f:9a:ca:74:bd:22:
7e:07:02:97:4a:d7:2b:b5:07:0b:9c:32:7c:6e:d7:8c:fa:3a:
fa:76:a3:e1:da:73:6e:08:ba:e3:fc:71:14:e3:46:9b:e9:fb:
81:02:d9:9e:85:b6:d5:d5:02:44:67:25:dc:c3:65:1e:65:b5:
1b:12:fb:47:b0:3b:59:bf:4f:92:ab:1f:1b:96:17:7d:ac:87:
b6:35:c1:0f:96:e2:d1:02:43:d4:e5:69:3f:74:6b:70:37:4e:
7e:69:79:66:15:fc:b6:c2:61:2e:f3:ae:a9:5b:a6:b1:79:e4:
00:45:06:95:90:61:28:b9:48:fd:60:19:2d:3e:c4:a6:e1:af:
ea:38:8d:63:9d:78:3a:f1:63:65:52:aa:98:aa:5b:78:1c:35:
ff:71:ff:d8:c3:06:5b:b7:6d:c3:df:a7:c1:fc:b2:f0:c9:84:
c1:1e:0a:48:06:3c:0b:17:9e:83:77:61:75:cc:c3:a8:db:a1:
3e:76:ba:73:b1:05:41:21:e6:dd:91:ae:40:36:4c:ce:64:e3:
4c:e6:46:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:48 2025 by rpki-client