Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/5HwtlzfjvflzXAW0gaA6MmlcGRU.roa
File: 5HwtlzfjvflzXAW0gaA6MmlcGRU.roa (raw, json)
Hash identifier: UR2k0Cmr3ZN1+t5bYGk3Aw8bjERtxPJMQBCBW/kZ75k=
Subject key identifier: E4:7C:2D:97:37:E3:BD:F9:73:5C:05:B4:81:A0:3A:32:69:5C:19:15
Certificate issuer: /CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Certificate serial: 36875F95
Authority key identifier: AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/5HwtlzfjvflzXAW0gaA6MmlcGRU.roa
Signing time: Sat 01 Jan 2022 12:56:49 +0000
ROA not before: Sat 01 Jan 2022 12:56:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202766
IP address blocks: 185.44.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914841493 (0x36875f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaab6111e004c2a044f168b8d28273cf6744f3a8
Validity
Not Before: Jan 1 12:56:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e47c2d9737e3bdf9735c05b481a03a32695c1915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:fa:f7:49:98:0e:51:4e:21:4b:12:24:3f:
b9:44:1e:54:ba:d6:fc:47:d2:11:38:a5:5c:3e:ae:
e5:26:62:30:c9:02:49:74:99:c5:18:34:18:b6:50:
ad:c7:7b:30:1f:8a:94:e7:b1:2d:86:2d:00:b2:53:
24:fb:77:77:56:3a:6c:74:01:b0:fd:77:7e:72:8f:
72:3b:b3:34:32:bc:87:ab:c9:88:2d:4f:48:e3:27:
52:2c:6b:27:25:18:99:5e:82:25:ee:c9:99:70:14:
49:82:ba:0a:7e:cb:9a:0a:41:8d:43:da:90:f9:e6:
79:51:16:3c:69:ea:45:e8:25:d6:04:5b:ae:71:3f:
a4:f0:4e:46:59:9e:1d:b5:5b:cd:95:e2:9c:cf:d6:
1a:55:75:da:d9:fa:36:e5:c4:84:32:42:fb:51:23:
95:0d:81:9c:8f:2b:e3:e6:65:08:bf:ae:b5:8e:34:
16:2b:d7:fb:8e:71:2c:66:20:84:9b:a8:e5:53:5f:
5a:20:72:a7:93:70:47:96:91:74:cb:a7:4d:5c:10:
18:e2:00:ca:06:2d:cb:da:0c:5f:c1:3f:aa:1e:8c:
b0:c6:9a:4b:4d:20:7e:20:72:b3:60:f8:f2:c0:f7:
ee:2f:3b:52:21:b9:a5:b0:3e:74:8b:80:2c:22:4e:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:2D:97:37:E3:BD:F9:73:5C:05:B4:81:A0:3A:32:69:5C:19:15
X509v3 Authority Key Identifier:
keyid:AA:AB:61:11:E0:04:C2:A0:44:F1:68:B8:D2:82:73:CF:67:44:F3:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqthEeAEwqBE8Wi40oJzz2dE86g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/5HwtlzfjvflzXAW0gaA6MmlcGRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f4ad0f-0b30-41ff-a8d9-82ededa7fe7a/1/qqthEeAEwqBE8Wi40oJzz2dE86g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.63.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d8:75:eb:53:86:87:0e:df:3a:2e:4b:77:91:87:6b:85:0f:
18:68:37:9e:58:a6:5b:25:4f:31:73:10:6a:73:f0:1b:04:14:
f4:13:65:45:0a:9f:b6:b9:6c:ed:63:7c:09:b0:b8:23:83:ad:
41:e0:4f:9f:25:39:2d:c0:cf:a0:31:64:8b:9d:a6:f8:86:57:
df:95:df:37:3a:52:25:7a:49:91:37:58:74:8c:e5:5b:8e:20:
6f:2e:08:0b:d1:51:4d:47:a7:fa:e1:01:80:ff:30:6e:b8:bc:
04:76:58:2d:1b:16:dc:6b:b0:4c:e6:ee:6d:b2:3d:b5:6d:00:
62:78:cc:f3:3f:78:9f:f1:09:b9:8b:8a:76:83:8b:0f:e4:cb:
66:b4:4b:1a:99:6c:73:e5:7d:37:63:d0:39:40:bb:40:64:1b:
2b:e7:fc:1f:e8:42:92:7a:2b:fb:09:5c:92:20:31:2a:43:c6:
dd:f1:d7:0e:1b:5f:06:bf:c1:af:aa:64:90:f0:63:3f:9b:4a:
ce:b0:57:89:d7:5e:7b:e4:ca:c7:ed:f2:84:12:a1:1f:a5:0d:
6c:ac:95:39:0d:89:57:40:5f:2f:3f:0a:1a:fa:f9:62:94:0d:
28:c7:1e:af:fa:58:44:d8:9a:e2:5d:b2:70:4f:a1:fd:fc:10:
66:b4:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:58 2025 by rpki-client