Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/H2FN46iMSXyWwF3yuzCykDwTQ3k.roa
File: H2FN46iMSXyWwF3yuzCykDwTQ3k.roa (raw, json)
Hash identifier: 3wNwq4uFnAVr3WqfCozDwkNPLOOPBMCBDCGqJonWrYA=
Subject key identifier: 1F:61:4D:E3:A8:8C:49:7C:96:C0:5D:F2:BB:30:B2:90:3C:13:43:79
Certificate issuer: /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial: 11123F18
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/H2FN46iMSXyWwF3yuzCykDwTQ3k.roa
Signing time: Sat 01 Jan 2022 16:02:49 +0000
ROA not before: Sat 01 Jan 2022 16:02:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201978
IP address blocks: 185.114.20.0/24 maxlen: 24
185.114.20.0/22 maxlen: 22
185.114.23.0/24 maxlen: 24
185.114.21.0/24 maxlen: 24
185.114.22.0/24 maxlen: 24
194.61.119.0/24 maxlen: 24
185.146.88.0/22 maxlen: 22
185.146.89.0/24 maxlen: 24
185.146.90.0/24 maxlen: 24
185.146.88.0/24 maxlen: 24
185.146.91.0/24 maxlen: 24
185.1.132.0/24 maxlen: 24
185.50.68.0/24 maxlen: 24
185.50.69.0/24 maxlen: 24
185.50.68.0/22 maxlen: 22
185.50.71.0/24 maxlen: 24
185.50.70.0/24 maxlen: 24
185.169.52.0/22 maxlen: 22
185.169.53.0/24 maxlen: 24
185.169.54.0/24 maxlen: 24
185.169.52.0/24 maxlen: 24
185.169.55.0/24 maxlen: 24
194.61.117.0/24 maxlen: 24
194.61.118.0/24 maxlen: 24
194.61.116.0/24 maxlen: 24
2a0a:3900::/29 maxlen: 29
2a01:a420::/29 maxlen: 29
2a0f:d500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286408472 (0x11123f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Validity
Not Before: Jan 1 16:02:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f614de3a88c497c96c05df2bb30b2903c134379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:df:29:bb:7e:f1:dd:37:92:eb:b3:c5:7e:
65:d7:f3:2b:57:bd:9b:d2:06:cf:d0:42:9f:7f:a4:
0a:b7:19:63:ef:b7:1a:8f:5c:ab:a8:20:9d:96:ba:
34:81:f4:ee:b5:78:ed:7d:bd:b0:55:99:9b:78:a5:
c0:88:df:b8:9b:3b:5c:7c:c1:fa:4f:69:c6:68:29:
97:75:af:0a:23:d0:04:8b:87:55:06:af:0c:f6:a8:
0e:6c:2e:b2:2d:07:1a:b1:0a:dd:56:8d:b4:ee:e8:
0e:96:3e:6c:bd:8e:71:76:c2:91:30:59:f0:f1:ae:
28:62:34:ef:eb:ac:7a:f8:b4:be:e4:6f:d2:0e:03:
02:e8:a3:53:1f:5b:e3:23:74:dc:8f:71:c6:f7:fe:
b8:07:39:4c:ad:eb:09:ab:58:fe:95:02:1c:b5:b5:
f5:91:db:b1:3e:ee:73:f6:a5:52:bf:da:b8:d3:6e:
b8:cd:55:b7:99:d0:b0:7f:0b:50:42:21:65:90:cd:
30:14:7f:d7:a5:57:fa:f7:a1:6e:1e:58:9c:2c:27:
90:3e:63:88:47:38:88:03:df:9c:e1:12:15:fc:64:
9f:f5:92:52:b8:e2:74:22:3b:d2:62:94:14:ee:a5:
af:fd:9f:d3:21:06:72:23:86:24:96:27:f2:61:75:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:4D:E3:A8:8C:49:7C:96:C0:5D:F2:BB:30:B2:90:3C:13:43:79
X509v3 Authority Key Identifier:
keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/H2FN46iMSXyWwF3yuzCykDwTQ3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.132.0/24
185.50.68.0/22
185.114.20.0/22
185.146.88.0/22
185.169.52.0/22
194.61.116.0/22
IPv6:
2a01:a420::/29
2a0a:3900::/29
2a0f:d500::/29
Signature Algorithm: sha256WithRSAEncryption
5b:4b:6a:44:9e:98:f7:90:69:8d:1b:44:fe:1e:4b:68:b9:e5:
b5:da:1a:85:27:04:0c:2f:36:a3:70:d3:7f:d1:1b:33:28:c9:
01:76:18:47:3b:21:26:62:cc:33:2b:77:52:82:83:1c:34:6a:
ba:9f:93:d0:75:14:a3:18:72:e4:83:e1:7a:fa:c3:db:fa:6d:
5d:77:a5:6c:75:16:1a:2c:c8:86:62:6b:75:da:56:19:12:6e:
aa:46:b2:c0:14:55:1f:28:0f:c6:fd:69:b5:24:ff:fd:76:6f:
c7:31:85:43:68:bb:9c:94:5c:66:e8:20:03:63:08:b9:1d:7b:
96:db:70:ce:96:75:87:04:18:2c:88:43:d0:5e:85:33:f7:fd:
9c:37:04:5d:5e:81:75:fd:5e:10:c6:55:64:99:fc:e1:3d:32:
0d:f3:e8:46:d9:98:d4:74:36:af:7e:86:14:1c:ff:49:d3:39:
43:8e:03:d1:5f:ac:2e:92:11:98:2f:83:a2:d2:eb:ec:1f:82:
96:07:fa:e5:4b:7c:ba:88:e8:58:71:97:5a:04:63:e9:5c:14:
9d:ae:41:03:97:a1:0c:f5:b8:71:8e:3d:a6:b9:a9:df:66:d5:
f4:f8:98:d7:1c:1f:3a:b0:85:79:17:f0:39:9f:67:cc:03:1e:
63:23:54:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:53 2025 by rpki-client