Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/_-HaDtY_-q0erBNFXlY0JN85EtI.roa
File: _-HaDtY_-q0erBNFXlY0JN85EtI.roa (raw, json)
Hash identifier: XCkJLr84eGlFv+GeSovHZIf63DHd+nBUOZu+XKH1kII=
Subject key identifier: FF:E1:DA:0E:D6:3F:FA:AD:1E:AC:13:45:5E:56:34:24:DF:39:12:D2
Certificate issuer: /CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Certificate serial: 01856C4A3E3CF4471FE4BF5C92F697A0114A
Authority key identifier: 1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/_-HaDtY_-q0erBNFXlY0JN85EtI.roa
Signing time: Sun 01 Jan 2023 07:44:42 +0000
ROA not before: Sun 01 Jan 2023 07:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 185.146.175.0/24 maxlen: 24
185.146.174.0/24 maxlen: 24
185.146.173.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:3e:3c:f4:47:1f:e4:bf:5c:92:f6:97:a0:11:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0489dc9c0a74c2ed53e1d9e1fbfdd8c8773b94
Validity
Not Before: Jan 1 07:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffe1da0ed63ffaad1eac13455e563424df3912d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ad:05:de:3e:ba:7f:66:f9:26:e5:45:82:1a:
2f:88:13:45:21:3e:2b:06:28:55:12:55:bc:2f:72:
9d:c0:85:48:c1:c4:cf:95:30:8a:3d:c5:29:d5:64:
0c:cc:19:70:37:6e:13:c7:b6:57:78:c2:c1:93:4b:
0c:d9:16:8c:b5:14:85:56:27:62:f1:3d:82:66:71:
6f:1d:34:2d:4b:51:81:00:34:12:4b:62:3f:55:50:
ff:48:a7:3c:0f:5b:77:96:d2:55:73:9a:c0:a1:b2:
73:2f:a8:60:60:84:49:71:5f:0d:18:8f:68:00:dc:
4d:a6:cc:79:bf:bd:78:97:ad:32:ef:53:18:c6:bc:
d4:51:cb:ee:ab:7c:13:fc:17:cc:52:77:dd:ab:81:
a5:c4:8b:2b:87:71:ff:a3:1c:9d:32:d8:5f:81:cf:
e6:55:9a:e3:c7:fc:55:b8:32:14:11:af:01:9b:82:
70:ae:ca:9e:a0:24:af:24:4b:40:02:45:c7:c1:22:
b5:c4:19:67:48:4b:f7:20:37:99:07:71:df:f3:31:
2e:0c:39:cc:3d:3a:97:45:fd:aa:05:00:5c:f0:52:
17:34:9f:23:54:37:14:18:6a:21:3c:8b:fc:48:7a:
03:bb:3a:e3:93:df:71:56:e3:65:74:ec:1b:c3:fd:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:DA:0E:D6:3F:FA:AD:1E:AC:13:45:5E:56:34:24:DF:39:12:D2
X509v3 Authority Key Identifier:
keyid:1A:04:89:DC:9C:0A:74:C2:ED:53:E1:D9:E1:FB:FD:D8:C8:77:3B:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/_-HaDtY_-q0erBNFXlY0JN85EtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/11c52c-41aa-4e95-ad67-a021a63ddfc3/1/GgSJ3JwKdMLtU-HZ4fv92Mh3O5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.173.0-185.146.175.255
Signature Algorithm: sha256WithRSAEncryption
4e:4e:c2:55:d5:1d:76:49:1b:b4:68:99:27:99:ce:bd:48:f8:
b8:f7:83:87:37:a5:9c:fc:27:3a:38:fb:56:c2:cc:1a:3d:42:
2a:d8:9d:a7:f4:3a:8f:c9:01:72:16:dc:97:12:ab:82:a4:76:
06:1d:4a:0c:b2:0d:6d:59:b4:ec:f6:4e:ee:c9:c3:b1:b7:bd:
83:6c:63:4f:3e:4a:9d:7b:52:c3:56:2e:1c:92:ce:7f:df:ee:
d0:27:bf:2f:31:aa:ea:b4:0c:34:3f:50:b2:eb:ac:ea:3e:f4:
86:53:8d:47:57:e1:49:f9:f3:a9:53:61:64:43:19:1b:2c:fd:
12:df:d1:6a:73:ee:e8:8f:2b:4f:31:15:c1:5f:44:1f:3d:fa:
9e:a2:4b:0e:ca:58:b8:7b:6f:aa:96:dd:11:f6:51:c1:34:70:
d6:93:a4:9a:6c:15:34:12:12:19:42:32:79:4c:31:36:fa:e3:
6c:8e:61:17:43:a1:d6:aa:d0:9e:92:0e:15:0a:88:2f:94:94:
b0:95:2c:2c:3d:fb:ca:af:e2:12:c6:9f:40:bd:65:0f:99:e3:
6a:4f:51:8b:89:cf:92:b1:c9:58:3e:51:98:47:be:08:7f:67:
3a:e9:b8:83:ea:8f:66:64:80:0e:f2:61:ad:00:f4:77:36:81:
85:d3:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:14:41 2025 by rpki-client