Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/Hwumbo-WfqroHQj0kd5yyynIMJE.roa
File: Hwumbo-WfqroHQj0kd5yyynIMJE.roa (raw, json)
Hash identifier: wRRY47dLOUTZcpzOlMhQFjTKx82zuZXYiCPsqRAuapI=
Subject key identifier: 1F:0B:A6:6E:8F:96:7E:AA:E8:1D:08:F4:91:DE:72:CB:29:C8:30:91
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01877FC6674215F333B9BF51147E1806440B
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/Hwumbo-WfqroHQj0kd5yyynIMJE.roa
Signing time: Fri 14 Apr 2023 12:38:41 +0000
ROA not before: Fri 14 Apr 2023 12:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42313
IP address blocks: 79.106.242.0/23 maxlen: 23
79.106.244.0/23 maxlen: 23
79.106.240.0/21 maxlen: 21
79.106.246.0/23 maxlen: 23
79.106.255.0/24 maxlen: 24
79.106.254.0/24 maxlen: 24
185.171.146.0/24 maxlen: 24
185.171.144.0/23 maxlen: 23
79.106.84.0/24 maxlen: 24
79.106.90.0/24 maxlen: 24
79.106.95.0/24 maxlen: 24
79.106.96.0/19 maxlen: 19
79.106.94.0/23 maxlen: 23
79.106.104.0/24 maxlen: 24
79.106.102.0/24 maxlen: 24
79.106.103.0/24 maxlen: 24
79.106.101.0/24 maxlen: 24
79.106.107.0/24 maxlen: 24
79.106.118.0/23 maxlen: 23
79.106.117.0/24 maxlen: 24
79.106.125.0/24 maxlen: 24
79.106.123.0/24 maxlen: 24
79.106.124.0/24 maxlen: 24
79.106.122.0/24 maxlen: 24
79.106.120.0/24 maxlen: 24
79.106.127.0/24 maxlen: 24
79.106.128.0/19 maxlen: 19
79.106.126.0/24 maxlen: 24
79.106.32.0/19 maxlen: 19
79.106.37.0/24 maxlen: 24
79.106.56.0/22 maxlen: 22
79.106.64.0/19 maxlen: 19
79.106.64.0/24 maxlen: 24
79.106.77.0/24 maxlen: 24
79.106.192.0/19 maxlen: 19
79.106.195.0/24 maxlen: 24
79.106.194.0/23 maxlen: 23
79.106.196.0/24 maxlen: 24
79.106.205.0/24 maxlen: 24
79.106.204.0/24 maxlen: 24
79.106.210.0/24 maxlen: 24
79.106.211.0/24 maxlen: 24
79.106.209.0/24 maxlen: 24
79.106.207.0/24 maxlen: 24
79.106.215.0/24 maxlen: 24
79.106.214.0/24 maxlen: 24
79.106.218.0/23 maxlen: 23
79.106.220.0/24 maxlen: 24
79.106.224.0/19 maxlen: 19
79.106.229.0/24 maxlen: 24
79.106.232.0/22 maxlen: 22
79.106.230.0/24 maxlen: 24
79.106.228.0/24 maxlen: 24
79.106.240.0/23 maxlen: 23
79.106.160.0/19 maxlen: 19
79.106.176.0/21 maxlen: 21
79.106.0.0/24 maxlen: 24
79.106.0.0/19 maxlen: 19
79.106.0.0/17 maxlen: 17
79.106.0.0/16 maxlen: 16
217.24.240.0/21 maxlen: 21
217.24.240.0/20 maxlen: 20
217.24.248.0/21 maxlen: 21
217.24.248.0/24 maxlen: 24
217.24.254.0/24 maxlen: 24
2a05:fdc0:2100::/40 maxlen: 40
2a05:fdc0::/32 maxlen: 32
2a05:fdc0:2200::/40 maxlen: 40
2a05:fdc0:2300::/40 maxlen: 40
2a05:fdc0:3100::/40 maxlen: 40
2a05:fdc0:3200::/40 maxlen: 40
2a05:fdc2:6000::/36 maxlen: 36
2a05:fdc2:1000::/36 maxlen: 36
2a05:fdc2:9000::/36 maxlen: 36
2a05:fdc2:8000::/36 maxlen: 36
2a05:fdc2:7000::/36 maxlen: 36
2a05:fdc2:2000::/36 maxlen: 36
2a05:fdc2::/32 maxlen: 32
2a05:fdc2:3000::/36 maxlen: 36
2a05:fdc2:4000::/36 maxlen: 36
2a05:fdc0::/29 maxlen: 29
2a05:fdc1::/32 maxlen: 32
2a05:fdc0:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:c6:67:42:15:f3:33:b9:bf:51:14:7e:18:06:44:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Apr 14 12:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f0ba66e8f967eaae81d08f491de72cb29c83091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:65:6b:5f:bd:d1:d0:e5:a3:fd:c7:1f:59:
5b:bd:4c:0d:5b:5e:cc:14:08:99:65:bf:2f:f2:33:
eb:86:68:44:62:f4:5d:1d:b0:37:d8:d3:e2:00:4e:
9a:d2:b7:39:ad:f1:a8:fb:87:7f:6d:89:3c:e1:34:
c9:86:aa:5c:30:0b:2a:cd:89:53:09:7c:5e:98:c1:
63:7e:40:07:0f:91:b6:e0:65:cd:a3:58:87:35:3d:
4b:2d:9b:7e:78:c0:68:ac:22:5b:78:89:e9:72:91:
c0:d6:5a:e0:95:02:35:74:7a:c1:ad:5c:30:45:e7:
13:65:62:02:d0:3c:c7:a8:ef:bb:c0:33:75:52:e7:
c6:02:82:35:46:49:0d:a0:0b:0b:83:d9:58:e6:78:
06:a2:b8:ac:ab:77:9a:5b:ba:40:1a:bb:fb:ca:aa:
c3:d5:e2:80:b3:a3:3b:ee:8a:28:25:53:26:ea:19:
c8:bc:78:94:a2:bd:11:11:dd:c9:c3:72:2b:d8:0d:
cc:b8:35:a9:b3:c6:af:1d:ef:80:a2:1c:eb:ad:68:
78:c3:4f:a9:f3:3c:d7:57:27:b3:fa:98:64:6a:0f:
bd:32:ad:b1:38:ef:e2:5a:bf:c1:c5:34:47:65:6a:
2b:8b:71:71:0b:23:02:7d:87:41:40:9c:e0:29:1e:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0B:A6:6E:8F:96:7E:AA:E8:1D:08:F4:91:DE:72:CB:29:C8:30:91
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/Hwumbo-WfqroHQj0kd5yyynIMJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.106.0.0/16
185.171.144.0-185.171.146.255
217.24.240.0/20
IPv6:
2a05:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:c8:8d:a9:c0:08:e8:aa:35:11:1d:66:d0:c9:67:21:67:17:
9c:9d:aa:53:86:10:2b:45:92:5a:e3:b1:77:be:bf:2b:c4:17:
34:e5:04:5f:e4:1b:bf:75:f6:65:3b:5c:cb:e0:27:2b:c5:13:
48:bc:2a:df:13:e4:89:7e:04:47:85:fb:18:3d:9b:16:b6:d5:
e3:78:e6:5b:90:a8:26:f3:bd:f0:f3:fb:af:96:31:cc:f4:df:
0f:0d:2a:64:ae:23:88:fd:d5:3f:85:d7:88:ed:8e:9f:c8:f2:
a7:87:e0:40:f5:d7:72:56:f1:b8:a9:54:ef:79:76:0e:82:ff:
2b:39:b4:1a:a0:c0:ac:ad:25:e8:f5:a2:bb:22:26:f9:6f:33:
2d:d7:a7:7d:5e:d1:5f:e6:5e:ef:8b:58:67:01:8c:49:c5:60:
9a:4b:3b:53:b5:6a:55:c9:2f:8c:e4:9e:78:fc:99:3b:67:7f:
e7:31:9f:ba:fe:9d:70:7d:8d:4a:3b:8b:a3:0f:15:33:55:aa:
49:8f:55:8c:51:dc:43:f7:16:07:3d:51:22:3b:20:0d:7c:a8:
49:39:ac:71:18:be:39:af:6f:3c:ce:1e:25:b6:3e:de:47:89:
5c:7b:ec:14:f9:f2:c8:5e:79:de:28:8f:d6:4c:7c:6e:a5:0e:
14:59:ed:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:35 2025 by rpki-client