Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hHVTZ8uRVhL1fiD8yAw51NJsAdY.roa
File: hHVTZ8uRVhL1fiD8yAw51NJsAdY.roa (raw, json)
Hash identifier: CM21NwqNhqLJDVzUYp6kgaI3cAxiaj8KMlV9SIs64b8=
Subject key identifier: 84:75:53:67:CB:91:56:12:F5:7E:20:FC:C8:0C:39:D4:D2:6C:01:D6
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 018506171F198E507E96D8250A5BF8D45473
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hHVTZ8uRVhL1fiD8yAw51NJsAdY.roa
Signing time: Mon 12 Dec 2022 11:27:36 +0000
ROA not before: Mon 12 Dec 2022 11:27:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50928
IP address blocks: 46.29.192.0/21 maxlen: 21
46.29.199.0/24 maxlen: 24
46.29.194.0/24 maxlen: 24
46.29.196.0/24 maxlen: 24
188.170.244.0/23 maxlen: 23
188.170.244.0/24 maxlen: 24
188.170.245.0/24 maxlen: 24
188.170.250.0/24 maxlen: 24
188.170.251.0/24 maxlen: 24
188.170.252.0/24 maxlen: 24
188.170.248.0/24 maxlen: 24
188.170.249.0/24 maxlen: 24
178.23.144.0/21 maxlen: 21
178.23.149.0/24 maxlen: 24
178.23.148.0/24 maxlen: 24
178.23.151.0/24 maxlen: 24
178.23.150.0/24 maxlen: 24
178.176.250.0/24 maxlen: 24
178.176.251.0/24 maxlen: 24
178.176.252.0/24 maxlen: 24
178.176.248.0/24 maxlen: 24
178.176.253.0/24 maxlen: 24
178.176.249.0/24 maxlen: 24
37.29.81.0/24 maxlen: 24
37.29.80.0/24 maxlen: 24
37.29.83.0/24 maxlen: 24
37.29.80.0/22 maxlen: 22
37.29.82.0/24 maxlen: 24
31.173.248.0/21 maxlen: 21
31.173.248.0/24 maxlen: 24
31.173.252.0/24 maxlen: 24
31.173.253.0/24 maxlen: 24
31.173.249.0/24 maxlen: 24
31.173.250.0/24 maxlen: 24
31.173.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:17:1f:19:8e:50:7e:96:d8:25:0a:5b:f8:d4:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Dec 12 11:27:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84755367cb915612f57e20fcc80c39d4d26c01d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b5:97:5d:88:5d:50:02:c4:88:70:90:6c:42:
c5:15:ff:a1:72:f8:9b:33:58:bc:39:8c:83:4d:37:
ae:fb:3f:5c:21:33:80:69:87:de:0b:a9:89:49:e3:
91:05:41:be:d9:08:d6:ad:c6:a1:0e:e6:1f:2e:18:
5d:45:28:49:93:43:fd:0b:3c:fc:f5:88:fe:04:89:
0e:65:0c:42:46:10:06:df:5c:8e:f1:dd:ff:8e:54:
28:d6:7b:3b:e0:fa:d5:0b:66:da:73:73:fb:68:62:
b2:a3:bd:4e:46:fb:5a:31:7c:dc:c4:09:37:40:4a:
0a:24:68:4f:7f:59:5e:28:6f:ad:96:1b:db:63:f6:
d3:33:ca:04:5a:7f:09:8a:e0:f6:d3:c0:12:8c:aa:
01:94:cc:2f:bf:e2:11:74:15:67:a8:67:b9:f1:4b:
a8:ec:00:ed:35:07:48:7c:98:b5:c5:be:67:1e:43:
e4:ca:56:ab:fe:be:bb:1c:65:ef:1f:79:d9:86:5f:
ff:8a:1e:65:6f:d9:a3:09:a5:23:c7:d5:75:84:2c:
c4:61:d1:d4:33:eb:06:6c:35:c8:01:b0:5e:b0:47:
80:c9:e8:30:9d:63:ad:bb:63:09:d7:75:7f:88:79:
6e:9d:ce:48:28:ec:67:c7:aa:89:b8:5d:33:6c:c2:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:75:53:67:CB:91:56:12:F5:7E:20:FC:C8:0C:39:D4:D2:6C:01:D6
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/hHVTZ8uRVhL1fiD8yAw51NJsAdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.173.248.0/21
37.29.80.0/22
46.29.192.0/21
178.23.144.0/21
178.176.248.0-178.176.253.255
188.170.244.0/23
188.170.248.0-188.170.252.255
Signature Algorithm: sha256WithRSAEncryption
3c:63:40:47:8c:be:e9:b6:9f:31:50:4a:3a:a8:62:08:85:62:
12:19:63:eb:6a:07:75:0e:c6:fc:d2:ba:cc:5b:51:11:1e:83:
62:45:16:35:63:22:73:14:8f:3d:7b:f8:19:dd:a8:58:86:4c:
3f:65:1e:4c:66:0b:e9:d3:91:e5:43:29:03:df:fb:76:0a:a0:
1a:aa:65:f4:39:9f:c4:33:20:17:19:ff:38:fe:b7:89:91:e5:
ae:62:5c:6c:04:0f:9e:ed:d1:89:17:41:a5:b2:37:5b:1e:14:
8d:1a:3e:9e:bf:5f:60:7c:12:5f:1b:07:02:73:4b:17:b5:7e:
a5:bb:37:31:21:29:35:62:d0:8a:30:d5:5e:01:d2:4d:9a:47:
62:8b:42:ef:e2:bf:c8:56:7d:d9:1f:85:8a:03:0f:89:32:39:
2b:3d:74:bd:ee:9e:3b:d2:9b:3f:1d:cb:9b:85:a8:08:65:61:
c8:7a:01:e4:d4:b9:70:37:70:07:88:d5:5b:24:34:80:1d:1c:
0c:1a:e4:47:ea:ab:bd:31:91:57:7b:28:c3:b7:ed:c0:d9:4f:
77:4b:49:b8:4a:fe:67:e6:68:f1:12:36:ab:2b:a1:e8:88:5c:
45:7f:1e:38:23:03:13:33:a8:2f:46:a4:99:00:ab:b5:d0:c4:
24:bf:ef:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:11 2025 by rpki-client