Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/hPpAQj36DGHNqBWG1DCiKYsdQ2Y.roa
File: hPpAQj36DGHNqBWG1DCiKYsdQ2Y.roa (raw, json)
Hash identifier: d7oH3oI1z7KkC7NdR/UgYAp14dfha111O37wnq+owWA=
Subject key identifier: 84:FA:40:42:3D:FA:0C:61:CD:A8:15:86:D4:30:A2:29:8B:1D:43:66
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01891C1514644E78ACCA9D6A804F5468364B
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/hPpAQj36DGHNqBWG1DCiKYsdQ2Y.roa
Signing time: Mon 03 Jul 2023 14:08:10 +0000
ROA not before: Mon 03 Jul 2023 14:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 79.141.174.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
193.42.39.0/24 maxlen: 24
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:15:14:64:4e:78:ac:ca:9d:6a:80:4f:54:68:36:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Jul 3 14:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84fa40423dfa0c61cda81586d430a2298b1d4366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:c2:51:a7:ac:5f:bb:d0:01:4b:d2:cd:43:
be:2a:9c:c0:b1:01:d3:89:28:5a:73:63:ec:20:c9:
dd:b2:6a:c5:78:aa:f8:1c:c3:42:66:96:94:07:75:
d2:bc:c0:c8:cb:eb:e9:2b:da:9f:77:98:38:1e:45:
e8:8d:f1:21:55:49:3f:33:8f:f5:a2:7b:7b:37:36:
1a:b3:cf:84:07:24:6e:f4:19:79:be:5c:1c:13:13:
e0:49:0f:4d:66:c4:bc:c7:73:44:61:15:40:a8:0d:
fd:b8:8f:b2:65:a6:87:17:3f:a8:48:42:ed:e1:44:
a8:31:ec:d5:c8:c0:5d:0b:ce:95:a1:a5:3f:5c:4f:
61:35:13:3c:14:50:cd:c6:ef:b2:ed:8c:85:58:c8:
97:a8:f2:3c:87:30:43:82:6b:6b:f2:bb:a4:90:d7:
f9:9f:06:72:7d:60:d0:57:cd:c7:cb:98:55:ec:a2:
a4:4b:0c:71:12:ee:ce:d2:cc:5d:6d:14:54:5f:45:
94:a7:2c:de:dd:32:ca:ca:44:b4:85:0b:8b:bd:36:
bb:58:74:d0:9a:81:b1:fe:f7:a3:87:76:ce:f1:df:
1e:0c:ef:2b:ff:79:5a:29:b9:a9:92:93:c0:4a:dc:
1f:55:ed:1f:f4:42:bd:af:35:c4:11:f1:ab:4c:9e:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FA:40:42:3D:FA:0C:61:CD:A8:15:86:D4:30:A2:29:8B:1D:43:66
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/hPpAQj36DGHNqBWG1DCiKYsdQ2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.174.0/23
185.117.88.0/23
185.174.133.0/24
193.42.39.0/24
IPv6:
2a01:8640:6::/48
2a01:8640:9::/48
Signature Algorithm: sha256WithRSAEncryption
8f:92:e7:4c:eb:81:e7:8a:d6:93:a4:db:ef:6e:45:34:44:5f:
d0:13:1c:d6:8f:10:58:d9:8f:84:82:d9:37:b1:e6:4e:bf:03:
88:02:70:d7:64:4a:46:e7:9a:8c:db:25:16:13:fe:d1:fa:e2:
0d:1d:a9:ea:2c:ac:c5:2b:97:a3:32:b4:52:fb:6a:ef:c5:37:
bc:a0:c0:47:b2:47:0a:20:2c:b7:b0:b1:f5:14:cf:0b:95:c7:
a2:0f:62:df:88:cf:23:16:34:56:c1:86:0b:ce:8e:65:f8:fc:
1d:d4:92:35:44:4f:40:8b:c8:f0:d7:47:61:b0:b3:d6:9c:2e:
45:c1:b8:c2:fa:2f:71:98:c9:3a:73:92:46:72:2d:75:0c:8a:
67:e1:a3:5f:05:e8:91:64:22:98:2d:aa:fa:67:44:da:fe:b8:
cc:b1:8d:90:67:93:fb:c7:86:be:ba:c4:9e:0c:e9:cf:e2:01:
8a:94:d2:b6:80:59:db:45:8a:2d:30:a5:42:bc:ae:13:29:8f:
20:0c:8d:ab:6b:e0:da:eb:67:19:b3:64:24:2b:2a:99:2e:22:
47:89:32:0a:30:c1:c8:2c:37:0a:0c:8a:a8:94:c8:40:8f:3e:
38:ae:02:35:08:42:cb:48:ed:3c:cd:98:4e:4a:f1:2a:01:3f:
f3:14:c7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:54 2025 by rpki-client