Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/H6xnHgV1ZuncSbTMjUMvo7WPTeQ.roa
File: H6xnHgV1ZuncSbTMjUMvo7WPTeQ.roa (raw, json)
Hash identifier: FUM86DB0brtP2opQ6PL51ZlrqTrHw25sRJeg1CPCGlA=
Subject key identifier: 1F:AC:67:1E:05:75:66:E9:DC:49:B4:CC:8D:43:2F:A3:B5:8F:4D:E4
Certificate issuer: /CN=63e24977993c15bcc134b174937f41b2129f56d1
Certificate serial: 038ABA
Authority key identifier: 63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/H6xnHgV1ZuncSbTMjUMvo7WPTeQ.roa
Signing time: Sat 14 May 2022 05:23:30 +0000
ROA not before: Sat 14 May 2022 05:23:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.208.144.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232122 (0x38aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e24977993c15bcc134b174937f41b2129f56d1
Validity
Not Before: May 14 05:23:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fac671e057566e9dc49b4cc8d432fa3b58f4de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:17:e8:44:eb:fa:7c:cf:0b:7a:e7:6f:f2:df:
04:52:b8:3c:2c:45:58:74:50:ac:63:55:46:bb:14:
32:bb:7c:9f:2c:29:03:32:b4:ba:ab:4a:1c:1c:1c:
59:0a:3f:d2:fe:87:dd:02:d0:2e:a8:a3:a8:51:35:
47:3e:1e:9b:66:da:6c:36:a5:8b:43:be:50:6a:08:
c1:2e:ba:2c:c3:c5:a3:3d:f6:7b:a2:7a:d1:32:94:
94:4d:bf:92:07:28:91:3e:c1:61:70:11:71:96:7f:
d9:aa:bb:43:cf:7d:05:a6:3e:2c:2c:63:53:28:3a:
e6:15:e4:d0:9b:61:11:12:5d:9f:76:0f:e6:c7:61:
f5:a6:da:05:89:97:1f:48:ec:bc:cb:87:8f:f0:4c:
82:a8:29:18:a1:62:2c:94:81:39:d8:eb:f2:eb:cb:
29:e3:1a:12:bb:f2:5a:ee:37:6e:99:ed:e5:41:5c:
27:d2:e2:89:47:23:e3:75:ee:17:63:d0:f9:4b:d5:
b4:9d:1e:b6:89:00:38:20:c5:2e:d0:a7:13:83:65:
50:d3:4d:95:76:78:56:58:85:fd:fa:8f:a1:f3:a6:
27:46:67:28:91:80:62:3e:c5:48:71:1b:d8:57:56:
fc:6b:09:a9:d6:af:22:3a:2c:a9:c4:6c:b1:24:00:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AC:67:1E:05:75:66:E9:DC:49:B4:CC:8D:43:2F:A3:B5:8F:4D:E4
X509v3 Authority Key Identifier:
keyid:63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/H6xnHgV1ZuncSbTMjUMvo7WPTeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:e7:84:70:82:e8:92:47:db:21:fa:76:77:32:1d:39:d5:81:
99:7e:62:5c:5e:0c:95:0f:e1:88:3d:8c:d3:d2:e3:7d:9c:ef:
40:37:17:02:6e:9b:1f:ca:03:cc:ec:9e:1f:3f:5b:38:c6:22:
2b:78:a1:d7:0a:27:de:89:d6:15:64:ea:56:9b:3f:fc:24:7d:
b3:92:34:6e:7b:f7:74:58:37:05:59:6e:ba:f6:1c:4d:02:66:
07:b6:95:97:7f:61:c4:e3:6c:7f:09:89:e6:70:0a:50:a1:d8:
d7:12:5a:44:74:d4:8f:ad:c8:6d:94:84:46:27:80:eb:e3:8f:
55:76:f5:3b:49:fd:7d:d1:f8:15:56:ce:16:8e:ec:1f:b1:d4:
99:20:9d:f9:b5:26:11:b8:2b:68:88:58:7a:ee:b5:22:26:73:
b2:59:4b:e7:60:00:66:c8:e6:8c:2b:1a:e9:4e:d3:f9:74:99:
2c:60:12:6a:f9:c1:98:cd:0c:ba:ae:fd:ab:9a:21:47:fb:32:
a7:8b:a7:e5:72:1e:03:7d:45:39:98:32:55:be:da:23:1f:34:
9c:cf:64:3c:c7:b9:9c:d2:29:5e:56:49:61:bf:a2:fc:6a:f6:
0a:d3:69:ae:cb:03:50:7a:1a:23:c4:45:58:72:2f:00:ff:10:
90:2f:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:41 2025 by rpki-client