Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/HxgqbshOhIFbSr4iebO6pl09Grk.roa
File: HxgqbshOhIFbSr4iebO6pl09Grk.roa (raw, json)
Hash identifier: lYDr9jQu8+18dBqYExxS7oMqO/WEfMO287jCP5tKf2A=
Subject key identifier: 1F:18:2A:6E:C8:4E:84:81:5B:4A:BE:22:79:B3:BA:A6:5D:3D:1A:B9
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 0601BDDF
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/HxgqbshOhIFbSr4iebO6pl09Grk.roa
Signing time: Mon 31 Jan 2022 18:40:40 +0000
ROA not before: Mon 31 Jan 2022 18:40:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50926
IP address blocks: 89.44.32.0/24 maxlen: 24
158.255.238.0/24 maxlen: 24
185.86.210.0/24 maxlen: 24
185.76.77.0/24 maxlen: 24
185.66.175.0/24 maxlen: 24
37.252.96.0/24 maxlen: 24
185.104.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100777439 (0x601bddf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Jan 31 18:40:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f182a6ec84e84815b4abe2279b3baa65d3d1ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:94:05:f5:5a:4d:8e:9b:5d:07:08:97:dc:
7d:c2:b9:2e:e7:a1:aa:75:a8:ae:37:d7:aa:70:ad:
fb:23:31:34:2e:87:6d:11:8b:ac:2a:2a:b6:8c:f5:
b6:6b:1e:62:d2:07:47:ce:2c:4a:0f:f5:4f:88:7d:
7e:2b:f1:0d:d6:13:f3:f8:48:77:05:c0:62:2a:02:
3f:6b:6d:f6:a0:35:cb:4b:66:5e:64:07:8e:58:46:
2d:42:dc:a7:f7:ab:06:d7:2b:b1:5f:16:65:c0:9c:
6e:84:dc:d6:68:b2:07:fa:ea:d1:98:0e:26:0d:99:
91:09:19:b7:ab:33:21:7d:61:01:69:44:e7:98:d0:
69:53:47:93:d7:51:dd:c9:9a:c6:31:f1:e6:61:2e:
b2:30:f6:8c:0c:25:90:68:94:22:d2:23:3c:35:15:
4f:8a:97:30:0a:26:b9:24:7c:a4:36:be:02:ba:c3:
b4:21:89:62:1c:47:c4:a0:a7:bc:29:91:fd:f3:4c:
32:12:41:09:4d:f4:47:46:2a:35:4e:8a:6a:ab:e3:
fd:67:5a:2f:39:de:61:cf:eb:1f:3d:b3:ef:c4:64:
05:eb:3d:ad:f0:06:0b:68:76:94:00:8f:9c:c7:88:
2e:53:bf:a5:9b:95:1b:5f:60:73:ed:5e:f9:ba:cf:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:18:2A:6E:C8:4E:84:81:5B:4A:BE:22:79:B3:BA:A6:5D:3D:1A:B9
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/HxgqbshOhIFbSr4iebO6pl09Grk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.96.0/24
89.44.32.0/24
158.255.238.0/24
185.66.175.0/24
185.76.77.0/24
185.86.210.0/24
185.104.152.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4d:3d:e1:97:8e:f8:83:be:5a:e3:6b:7b:b6:2b:da:b9:48:
6c:1b:b9:28:0d:d9:5d:c1:c2:6d:b6:fa:8d:33:e5:74:53:ac:
3c:49:6c:6c:c3:25:b5:87:e0:3f:bb:c2:04:5e:0e:26:49:be:
10:8c:38:2e:de:5b:59:ad:5b:03:1b:ad:dd:88:6a:10:25:b4:
b6:4d:40:50:b4:47:cd:90:77:eb:ed:26:71:b7:9b:f6:a1:fc:
78:d5:dd:88:41:85:ef:1e:9b:53:10:bc:26:ca:3d:66:d5:ed:
1a:ad:cb:4c:0c:48:00:e4:0b:30:06:44:fc:70:05:aa:54:8e:
a7:74:df:66:c3:18:32:c6:9a:20:10:24:6c:56:6b:50:27:bb:
c2:44:db:50:12:0e:a3:7e:b9:cf:09:67:0f:fe:57:4e:e6:71:
66:f6:85:ce:80:17:44:c3:c4:d7:90:54:9a:03:b6:b6:9c:ba:
cf:51:73:c7:ca:1c:69:dc:14:c7:36:62:ad:e0:2e:e5:af:6b:
fb:93:dd:cd:53:fc:33:0b:c5:a0:40:a3:e8:1c:12:34:06:c5:
c3:91:4a:d5:88:c3:b0:2d:f3:bc:6f:53:11:51:95:53:df:7b:
29:85:fc:a6:cb:69:16:b9:b0:d0:40:46:2f:a2:a6:bd:22:c0:
9a:ff:86:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:53 2023 by rpki-client on console-fra.rpki-client.org