Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/hhv12y-Sp0JrWUK4CKXxTq3fg1w.roa
File: hhv12y-Sp0JrWUK4CKXxTq3fg1w.roa (raw, json)
Hash identifier: lFqBErVScMzFdI5t/2A/pSNC4MsmuMIjQv/oxNr3NrY=
Subject key identifier: 86:1B:F5:DB:2F:92:A7:42:6B:59:42:B8:08:A5:F1:4E:AD:DF:83:5C
Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622
Certificate serial: 018C7988524415837A39526FD4263763E979
Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/hhv12y-Sp0JrWUK4CKXxTq3fg1w.roa
Signing time: Sun 17 Dec 2023 20:47:06 +0000
ROA not before: Sun 17 Dec 2023 20:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15969
IP address blocks: 185.7.170.0/23 maxlen: 23
185.7.168.0/23 maxlen: 23
46.227.240.0/23 maxlen: 23
46.227.246.0/23 maxlen: 23
46.227.242.0/23 maxlen: 23
46.227.244.0/24 maxlen: 24
46.227.245.0/24 maxlen: 24
2a01:5e00::/29 maxlen: 29
2a01:7600::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:88:52:44:15:83:7a:39:52:6f:d4:26:37:63:e9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622
Validity
Not Before: Dec 17 20:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861bf5db2f92a7426b5942b808a5f14eaddf835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:cd:da:9a:4d:2f:08:fe:9d:00:8e:53:84:
10:e3:76:2b:4c:82:06:2d:3f:b0:d8:30:51:ce:f8:
5d:a0:87:5d:8b:a7:72:0e:ff:2f:30:99:c6:52:f5:
8b:cd:0e:11:ad:d4:0d:85:9a:02:22:ae:b7:6f:01:
ec:36:60:1a:33:28:a6:b2:94:8f:6f:a1:70:6f:ad:
ea:41:f8:e9:19:fa:e7:d3:d6:f4:31:1c:b3:c2:aa:
bc:da:1d:f0:e7:4a:38:db:ab:d6:6f:7e:5d:ae:dc:
35:30:ae:a2:4e:8f:5c:2e:7f:64:e9:a8:44:b7:27:
a5:51:56:14:82:49:5d:6b:25:58:83:6e:ea:d8:61:
18:92:c9:9d:b6:59:30:11:f2:11:47:25:31:fe:a8:
1d:79:a7:3c:0a:c2:97:65:04:85:fc:96:df:f2:6e:
af:bd:02:dc:c0:8e:0d:a1:04:d3:ef:26:93:15:2e:
cd:d7:d1:f9:74:05:88:6d:39:b0:18:4b:d2:55:72:
b3:b0:6b:93:7d:7c:02:41:36:15:69:9b:30:a6:a6:
a0:ff:b2:9a:13:91:59:8d:d6:14:ba:92:f1:69:de:
19:2a:36:db:a3:ba:4b:45:da:42:64:54:2a:54:0d:
4a:9f:0c:89:a6:53:81:d9:33:da:49:f1:b1:b8:36:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1B:F5:DB:2F:92:A7:42:6B:59:42:B8:08:A5:F1:4E:AD:DF:83:5C
X509v3 Authority Key Identifier:
keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/hhv12y-Sp0JrWUK4CKXxTq3fg1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.240.0/21
185.7.168.0/22
IPv6:
2a01:5e00::/29
2a01:7600::/29
Signature Algorithm: sha256WithRSAEncryption
62:2c:e1:63:6c:69:e7:af:61:c4:44:45:10:b2:a0:ee:6c:dc:
21:69:7c:d3:74:df:78:29:73:d9:be:00:52:57:7f:19:8e:b4:
54:d3:09:85:23:d7:47:ca:d6:96:4c:30:76:72:ef:25:68:33:
75:3c:3d:d0:49:2a:67:9e:81:6b:06:2c:2f:7f:52:0a:24:d5:
43:1e:3c:c9:2b:0d:fa:4f:8d:80:18:e5:c9:7b:e6:da:28:54:
11:47:94:6c:45:28:31:ec:63:ce:e9:fe:c6:f4:17:c0:9c:57:
f0:38:e8:2e:09:0b:82:b8:39:45:f6:42:96:4a:74:79:ee:73:
1d:09:0a:d4:bb:d6:75:19:48:50:1e:27:62:c9:21:ef:da:7d:
dc:ed:8a:2a:36:42:73:8a:07:1e:68:e5:59:e3:b7:31:90:d5:
a4:5f:2a:f4:cc:3d:dd:94:be:23:9a:05:49:b4:7e:78:c7:b0:
20:5c:f0:21:58:f6:04:72:61:f0:59:8a:7d:52:a5:74:23:d4:
73:19:04:4f:77:46:12:9d:1a:29:28:0d:a9:a0:a3:a7:31:b1:
50:fc:65:bb:d1:3e:b1:28:62:2e:6c:d3:27:06:71:73:05:55:
65:5c:34:be:73:c1:23:f1:5d:78:04:d5:34:a3:e7:0c:1c:16:
d7:2e:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:07 2025 by rpki-client