Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/hH8iu55xLIdncoGZ2jYfceIMOQM.roa
File: hH8iu55xLIdncoGZ2jYfceIMOQM.roa (raw, json)
Hash identifier: RnDYgwn/VkyFXGfpENg9QTgxahyXSsobznqbqJwjKl0=
Subject key identifier: 84:7F:22:BB:9E:71:2C:87:67:72:81:99:DA:36:1F:71:E2:0C:39:03
Certificate issuer: /CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Certificate serial: 0185724C843EEF651547B967AC969381DE5F
Authority key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/hH8iu55xLIdncoGZ2jYfceIMOQM.roa
Signing time: Mon 02 Jan 2023 11:44:55 +0000
ROA not before: Mon 02 Jan 2023 11:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29084
IP address blocks: 94.190.252.0/24 maxlen: 24
94.190.252.0/22 maxlen: 22
94.190.253.0/24 maxlen: 24
94.190.254.0/24 maxlen: 24
94.190.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:84:3e:ef:65:15:47:b9:67:ac:96:93:81:de:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Validity
Not Before: Jan 2 11:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=847f22bb9e712c8767728199da361f71e20c3903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:9d:6d:f7:b4:6b:53:1f:1e:bb:39:ed:aa:
5f:1f:84:a8:14:8c:55:c7:b1:2e:fc:82:65:d5:c3:
c1:b0:27:7d:d4:e0:e7:0a:4b:df:60:08:32:4c:60:
13:f9:21:d0:26:93:03:90:06:5d:ba:4c:c2:40:09:
ae:67:5e:a5:71:09:dc:43:e5:a7:f0:88:d6:12:19:
31:1c:33:b4:78:d2:aa:15:0f:a6:64:63:52:e1:5f:
0a:e1:ea:1f:3b:a7:83:36:95:90:cb:4a:4e:1b:6a:
f5:5c:6c:f9:e0:90:76:f8:ce:35:c6:c5:33:69:88:
97:53:db:41:fe:85:31:bf:47:7f:f5:ec:e3:d8:ec:
11:a1:4d:1b:6c:f5:a9:0f:8c:49:d8:8e:9c:cb:40:
f6:77:82:eb:93:e9:73:cc:a8:9c:aa:5a:4a:66:4d:
32:6c:96:94:a1:51:3f:71:aa:26:6a:7e:6e:ae:05:
41:7f:6f:14:0e:55:9f:12:4e:37:0c:e1:b4:54:12:
0c:80:7c:49:94:da:3c:38:83:9b:ae:86:f9:b3:4e:
bc:84:ab:4a:02:86:78:89:eb:87:54:d2:71:53:9b:
8b:d0:2a:f3:ae:3a:cb:1d:cc:54:e8:39:8a:84:99:
ec:1a:20:ab:8e:45:6e:08:cc:48:97:31:97:93:cf:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7F:22:BB:9E:71:2C:87:67:72:81:99:DA:36:1F:71:E2:0C:39:03
X509v3 Authority Key Identifier:
keyid:CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/hH8iu55xLIdncoGZ2jYfceIMOQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.252.0/22
Signature Algorithm: sha256WithRSAEncryption
51:8f:e1:2a:83:8e:44:ec:24:d8:52:ca:5f:28:59:f3:db:46:
9b:18:4a:26:6b:5e:d8:3e:5a:18:e6:e8:69:99:74:d4:d2:d3:
11:17:42:58:45:2c:b1:55:fb:92:fb:32:47:a3:d2:d0:a7:37:
84:14:25:2b:6c:bf:bd:e4:e6:43:03:c3:11:1a:1f:6b:51:4b:
f8:55:fa:37:39:63:80:1f:8b:4c:f3:b3:8d:60:0a:39:be:95:
91:cb:80:43:f8:10:60:0d:42:0c:3c:cc:96:f7:75:9e:16:c6:
73:fc:ca:b1:89:97:22:a8:93:6a:a6:5e:37:73:14:65:3d:56:
3c:82:35:4e:bb:cf:14:f2:8c:ac:6d:c0:40:22:c7:41:ca:0f:
9a:4a:b7:7c:80:4d:9e:a8:df:bd:40:f8:80:7a:bd:05:b7:b9:
f7:26:94:74:41:ab:7c:be:e0:17:ea:82:f0:2f:63:9b:35:3f:
24:9d:5d:c0:04:7e:93:21:54:07:df:bc:ce:00:23:c4:b5:92:
2a:44:ff:e1:8b:34:76:51:ec:97:fb:d6:db:9a:a0:71:fc:c1:
09:8e:61:2a:66:7c:34:c5:b7:e7:ca:f2:5a:3d:b2:2a:f0:d0:
4f:ed:22:1e:cb:c4:e5:d7:87:36:99:9d:ba:e5:96:20:21:e5:
34:fd:2b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:41 2025 by rpki-client