Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/H4Qu2hX_FTS_GQFxXzkcakK9OgE.roa
File: H4Qu2hX_FTS_GQFxXzkcakK9OgE.roa (raw, json)
Hash identifier: ZkjV+K4fZUa84My6F2Cf4lhFqgf/sZDnuhSDP1eGUoc=
Subject key identifier: 1F:84:2E:DA:15:FF:15:34:BF:19:01:71:5F:39:1C:6A:42:BD:3A:01
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 0185729EE11C880BCAC5D1C5ED358CBAD8F3
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/H4Qu2hX_FTS_GQFxXzkcakK9OgE.roa
Signing time: Mon 02 Jan 2023 13:14:52 +0000
ROA not before: Mon 02 Jan 2023 13:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207048
IP address blocks: 193.107.51.0/24 maxlen: 24
185.123.52.0/24 maxlen: 24
2a12:60c0::/29 maxlen: 29
2a10:ec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e1:1c:88:0b:ca:c5:d1:c5:ed:35:8c:ba:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Jan 2 13:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f842eda15ff1534bf1901715f391c6a42bd3a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:22:93:02:99:0e:0e:e0:ad:c8:c0:d7:5b:41:
c0:55:34:ae:73:41:3d:3d:b5:29:25:d4:26:7a:e4:
a0:20:e0:37:66:b0:e1:01:1b:dc:36:58:03:af:c2:
d6:4a:59:3e:f3:f3:23:d5:e7:ab:34:ad:27:ae:7e:
29:e2:2c:bd:b0:86:5e:40:a5:a1:49:ba:28:9d:cb:
2f:a6:fa:c5:45:c2:8a:60:51:3e:c8:3b:ab:e9:88:
8b:3c:aa:1c:10:c6:0e:9d:7a:e9:f7:89:6c:22:0d:
4d:c3:39:a4:42:ba:b6:52:e1:02:c1:62:f2:58:ed:
88:2f:01:d6:8e:af:00:ac:b8:f1:09:a2:f5:26:22:
f6:58:e5:5b:e4:23:45:dd:dc:ab:c1:ec:9b:c8:b6:
cc:bb:37:58:d2:b4:e8:e2:4e:c2:84:57:dd:5b:9b:
b5:df:5d:76:72:fa:5b:8e:79:f6:6c:19:b8:a8:e3:
5f:81:d5:8e:a5:67:29:cf:a0:d9:6a:f5:36:1e:b7:
0f:3e:f5:2c:d8:98:56:2b:28:1b:a4:25:39:d4:70:
76:3c:e3:59:ea:2d:b9:86:5a:fd:d5:44:20:c8:b5:
b0:31:74:1e:53:59:39:61:3f:f3:42:63:7d:94:4c:
78:7e:06:3c:74:cc:fc:67:1b:ae:9c:0d:7e:5c:7c:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:84:2E:DA:15:FF:15:34:BF:19:01:71:5F:39:1C:6A:42:BD:3A:01
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/H4Qu2hX_FTS_GQFxXzkcakK9OgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.52.0/24
193.107.51.0/24
IPv6:
2a10:ec0::/29
2a12:60c0::/29
Signature Algorithm: sha256WithRSAEncryption
73:7a:54:20:6b:48:e5:11:1e:f6:49:7d:c2:40:5e:58:ac:e2:
9f:99:2d:bc:f5:d4:89:e8:d5:05:ff:ec:44:16:02:3f:62:42:
66:d6:67:c7:bc:ed:df:9e:42:04:83:b1:b4:03:a6:be:3e:a9:
15:a3:7c:07:56:7c:03:49:5f:4c:85:c0:70:c7:08:db:50:d9:
aa:f2:3f:e4:02:59:38:fe:e9:7d:bb:51:b9:09:36:b2:1f:04:
e2:30:11:f0:bc:13:17:ec:63:bd:ae:88:e2:c9:83:0c:57:3b:
e8:a1:c3:23:6f:ff:9a:33:08:ee:a7:eb:e5:1a:5f:52:f9:6c:
17:28:66:81:73:07:f6:5d:d0:f1:8c:c3:3e:c9:2e:d9:a0:d7:
09:06:ac:44:c3:ea:eb:8e:e4:42:fd:89:9a:b9:6d:7a:2a:75:
8c:91:02:e9:ab:6c:64:ac:fc:8c:fd:7b:ef:e3:b6:c9:64:70:
cd:ba:d4:bb:5d:d2:a7:5d:bc:8b:4f:5d:dd:b1:ae:37:bd:62:
dc:77:88:25:50:8f:cd:53:ab:68:a7:df:a4:d1:d9:5d:62:9f:
2c:e6:60:bd:24:31:94:55:1b:dd:ce:a2:cd:11:3e:a2:49:c6:
b6:25:83:89:82:3a:fb:a8:08:45:13:fa:80:e9:37:ab:e2:d7:
a3:56:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:45:00 2025 by rpki-client