Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hfOtmPrFoJZnUhO5JN4N5Tnrinc.roa
File: hfOtmPrFoJZnUhO5JN4N5Tnrinc.roa (raw, json)
Hash identifier: DywZGcygXMR2oU4PTg0JfkLpMCvwtCj4iewZnp5hchA=
Subject key identifier: 85:F3:AD:98:FA:C5:A0:96:67:52:13:B9:24:DE:0D:E5:39:EB:8A:77
Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528
Certificate serial: 086C39E1
Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hfOtmPrFoJZnUhO5JN4N5Tnrinc.roa
Signing time: Sat 01 Jan 2022 15:55:48 +0000
ROA not before: Sat 01 Jan 2022 15:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58088
IP address blocks: 85.116.140.0/22 maxlen: 22
185.184.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141310433 (0x86c39e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528
Validity
Not Before: Jan 1 15:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85f3ad98fac5a096675213b924de0de539eb8a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9e:f7:a5:c8:db:4e:51:4c:46:7c:c6:5f:ab:
4d:a9:99:0d:4c:69:18:fa:c3:c1:2f:6a:77:f7:cb:
72:75:fb:da:21:95:e9:00:05:d6:fd:f9:b0:45:95:
4c:93:18:57:e5:61:a4:88:d9:57:ba:03:89:1d:f8:
c4:a8:d5:e0:56:99:d3:29:00:cc:18:98:39:4c:9b:
ca:3c:b1:19:4e:02:42:70:6a:c2:7d:5f:27:f6:be:
c7:c3:51:3c:6e:26:d0:e8:4d:b1:c1:bc:fd:8d:51:
c9:b2:93:c1:48:63:e6:ba:fe:98:09:97:09:12:db:
08:c2:77:a0:c6:9c:3b:86:a3:83:01:71:8d:da:5b:
71:aa:ad:8a:04:28:bf:48:53:a8:ae:83:09:df:89:
e3:a9:29:6c:59:80:8a:eb:32:ae:04:c0:85:20:a6:
2f:3d:aa:46:8d:0b:e0:8e:cb:4e:62:7b:78:62:ba:
76:17:8b:69:2a:82:cb:72:0f:e9:b0:36:18:f5:d7:
17:43:79:ab:5e:a9:ae:45:b2:99:bb:17:84:6e:88:
ec:b1:fc:94:11:97:7e:ac:07:f1:79:8c:de:30:24:
34:e2:ac:69:fb:07:79:37:1b:a1:1d:7c:f4:d1:a6:
b4:0a:fc:16:a9:c9:cf:9d:fe:fa:b8:a4:da:39:99:
56:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F3:AD:98:FA:C5:A0:96:67:52:13:B9:24:DE:0D:E5:39:EB:8A:77
X509v3 Authority Key Identifier:
keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hfOtmPrFoJZnUhO5JN4N5Tnrinc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.140.0/22
185.184.136.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:7d:a1:9e:be:0b:d5:7b:df:6d:9d:38:dd:8f:85:e4:00:14:
d2:83:5b:94:cb:46:a4:67:3a:0f:68:30:cd:9f:d4:2e:bb:3e:
9b:c0:ca:52:b5:f6:e1:eb:fd:85:87:8a:4e:8e:cc:35:7f:2c:
ac:48:4f:29:8d:98:db:44:36:49:a2:9a:bf:f3:78:94:2a:66:
49:55:6f:bf:88:48:44:ae:a1:c6:51:41:06:9f:32:51:68:f3:
71:6e:4f:18:00:dc:2d:ea:3b:4e:ba:46:00:6d:e6:d2:19:6f:
ec:a5:e9:38:b4:7f:f6:e5:d0:88:68:4d:fa:0b:74:b9:39:16:
64:f0:33:c1:2b:ed:4c:9d:bc:02:07:a8:49:d8:2b:de:67:a9:
dc:48:cd:ed:57:8f:5f:e9:12:8c:3f:70:45:10:2e:ae:76:f2:
3c:8c:d3:b1:df:87:02:07:75:1b:cb:9a:b3:2c:b5:c3:a9:d4:
fb:19:b3:e0:69:9a:46:f4:e3:23:03:a8:5c:a1:4b:1a:29:a7:
ba:a5:3e:e8:89:df:82:8f:68:d7:a0:a9:21:78:75:e2:1f:9a:
f8:b2:31:00:e3:f4:bf:d6:64:49:f7:45:39:6f:89:96:c2:90:
e9:3d:ab:96:39:7d:78:84:b7:0d:67:aa:01:aa:6a:37:56:0f:
45:b9:9f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:14 2025 by rpki-client