Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/h6-Jz0Q_ibsYRaRLjnFfRKKKgEg.roa
File: h6-Jz0Q_ibsYRaRLjnFfRKKKgEg.roa (raw, json)
Hash identifier: IDk+aC3uTqKHq0WNWFxGVFLDBLB6VkFNxsyU+qTvlJE=
Subject key identifier: 87:AF:89:CF:44:3F:89:BB:18:45:A4:4B:8E:71:5F:44:A2:8A:80:48
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 39F25654
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/h6-Jz0Q_ibsYRaRLjnFfRKKKgEg.roa
Signing time: Sat 01 Jan 2022 14:00:31 +0000
ROA not before: Sat 01 Jan 2022 14:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35199
IP address blocks: 217.153.228.0/23 maxlen: 23
89.174.170.0/24 maxlen: 24
85.219.196.0/24 maxlen: 24
89.174.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 972183124 (0x39f25654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 14:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=87af89cf443f89bb1845a44b8e715f44a28a8048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:c3:84:2a:66:be:66:9f:e8:3f:a7:31:11:
ca:5a:84:f7:e3:1a:3b:da:45:7d:2e:b9:60:ea:94:
7b:f4:9c:83:00:4e:e2:0c:dc:69:bc:55:16:fc:60:
43:ce:22:b7:22:59:35:c9:e7:52:46:69:4b:50:7a:
68:30:ca:88:fb:11:04:e2:13:14:ec:00:23:cc:1c:
38:7b:f2:87:5d:e1:8a:5b:e4:a1:2d:82:4c:00:7b:
17:65:6d:43:d8:93:aa:0f:3b:81:a2:ca:15:8b:93:
dc:67:07:26:81:c1:96:46:c7:39:bb:b8:78:06:9a:
c1:e0:1a:16:61:6f:b0:59:c0:85:c3:68:62:eb:bc:
de:e6:7b:2e:8f:9e:8d:9a:4d:55:0b:3d:d0:81:6d:
2f:52:42:d6:01:15:48:0a:df:fd:d6:cc:d4:a2:3d:
f5:d0:8c:73:52:bd:be:83:42:b3:e5:e7:0f:8c:61:
ce:7f:21:d4:ed:ae:6c:71:33:82:b7:cf:11:ea:95:
44:c4:78:74:6f:9c:f3:21:1f:ef:9e:4f:fe:78:90:
ea:40:c6:f9:8a:b3:c7:1f:32:5a:68:d9:e7:34:6d:
1f:84:da:3d:1c:44:d4:2a:5d:a1:bf:b2:e0:0e:d9:
29:78:d3:a3:c4:59:17:ed:38:1f:3e:6a:9a:c7:cf:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:89:CF:44:3F:89:BB:18:45:A4:4B:8E:71:5F:44:A2:8A:80:48
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/h6-Jz0Q_ibsYRaRLjnFfRKKKgEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.196.0/24
89.174.22.0/24
89.174.170.0/24
217.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:32:6b:8c:18:3d:32:85:c1:7e:25:11:f5:26:3e:23:a8:40:
1e:e4:59:61:3a:13:1d:f6:f4:bd:d4:1b:9f:13:b5:06:2b:31:
3b:51:f5:af:ed:3d:33:2e:d7:59:0e:3f:a2:29:44:df:00:6e:
44:c1:ba:71:2d:62:f8:34:57:1e:d9:9c:ee:47:65:e2:9b:8c:
c1:87:48:91:fa:bf:ab:89:74:33:0e:48:fc:41:0f:80:d0:bc:
39:ca:7a:c2:99:84:ad:af:1f:28:3c:c3:f2:02:ca:46:e4:5c:
88:10:7d:a7:65:3c:dd:7a:29:96:fd:d5:e2:1f:3b:33:6a:31:
42:22:2c:53:28:f2:f1:e0:8d:24:ab:b1:82:8c:9c:80:ad:6f:
9a:f6:47:66:42:1c:39:ee:39:65:26:22:71:04:49:c3:c8:a2:
15:ea:3e:5f:d6:cb:84:c7:63:3c:a0:ea:56:b2:48:2f:d8:a2:
c5:41:25:7d:f3:44:10:83:db:6d:08:b7:c8:47:66:91:85:59:
3e:0a:b4:2f:09:b5:36:80:d0:99:57:18:45:ca:fc:52:48:5a:
e4:76:c2:fb:cd:38:78:1d:62:33:fa:f5:49:f7:b0:32:64:da:
15:f3:09:40:0e:81:29:91:3c:d7:1d:4b:12:e2:d2:8f:70:59:
2b:3f:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:38 2025 by rpki-client