Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hn0me_aDbNF-0rm2Ij3-uF9weGE.roa
File: hn0me_aDbNF-0rm2Ij3-uF9weGE.roa (raw, json)
Hash identifier: dZ9WkYF1ryoaHZtyYj5yRLSTkvfL+sVBx952x3aWSwc=
Subject key identifier: 86:7D:26:7B:F6:83:6C:D1:7E:D2:B9:B6:22:3D:FE:B8:5F:70:78:61
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A838BE9
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hn0me_aDbNF-0rm2Ij3-uF9weGE.roa
Signing time: Sat 01 Jan 2022 16:07:13 +0000
ROA not before: Sat 01 Jan 2022 16:07:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57705
IP address blocks: 85.187.43.0/24 maxlen: 24
85.187.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 176393193 (0xa838be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=867d267bf6836cd17ed2b9b6223dfeb85f707861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:d2:56:24:54:7a:e4:32:37:ea:e4:84:ee:
f2:b5:f0:a8:a5:b8:3c:b2:9a:82:1f:63:8e:52:40:
68:24:1b:d0:97:47:3e:eb:09:d7:0d:f8:e3:46:b6:
31:fa:6d:1e:f9:0d:c4:53:e1:90:46:45:48:36:f7:
78:99:d4:f1:af:eb:b2:51:06:00:01:2e:80:6d:e8:
78:9e:eb:ce:81:2a:21:63:c4:69:cc:71:5f:4c:a3:
fb:46:c9:04:ea:0f:c9:83:5b:6c:98:ad:2e:6f:85:
99:ee:fd:7c:48:1f:5f:46:fb:97:13:c7:27:a3:14:
c8:5a:20:ea:b5:04:79:a6:83:8b:a6:20:04:e3:c9:
a7:dc:9f:7c:7b:4a:dd:e4:7d:7b:dd:15:78:15:70:
e1:b5:c4:0c:a0:15:ec:7d:f5:45:a8:1b:66:b0:a7:
87:fa:50:6f:50:3d:4b:dd:f8:1d:fc:fc:49:57:09:
9d:5e:34:cd:fc:03:0c:94:09:49:a0:e3:dd:35:1e:
71:db:48:1f:5a:62:32:a0:28:39:38:4b:39:a3:48:
47:31:eb:35:60:0c:1d:c8:f0:4e:47:fc:28:14:96:
82:c0:97:e8:b8:02:a2:da:9e:7e:62:82:94:f0:af:
53:27:78:ed:cc:c8:b5:10:52:6a:dd:b9:68:95:7e:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:26:7B:F6:83:6C:D1:7E:D2:B9:B6:22:3D:FE:B8:5F:70:78:61
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/hn0me_aDbNF-0rm2Ij3-uF9weGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.17.0/24
85.187.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:02:28:0a:a7:3e:d1:6a:7a:1a:b4:e8:36:d5:6b:33:0b:04:
d4:d8:ec:19:cd:fb:7b:3c:36:1a:c5:e8:70:8c:43:20:00:e2:
ca:13:7c:9c:4b:8d:38:08:40:64:42:47:04:21:4d:b7:4d:7e:
bd:b1:4b:e0:d9:45:e3:1c:6f:01:a5:3c:0a:b5:81:aa:fa:15:
7f:a4:3f:ef:a1:fa:18:f4:a2:77:a1:12:c9:58:6d:82:c9:ab:
8d:46:b0:a2:bd:84:39:d1:df:b4:29:63:63:a2:68:93:f9:14:
f8:90:91:0a:5a:03:cb:17:ef:ab:2a:e1:9e:e9:83:34:2d:0d:
af:32:0c:37:9f:9c:af:66:05:15:94:ea:53:60:4e:b6:7a:e3:
67:04:6b:9b:ea:1d:6a:17:a2:66:ef:ff:5a:0a:db:91:8f:0c:
5a:61:ef:7f:7f:a5:1b:16:eb:c4:3e:c1:95:91:62:ec:fc:e4:
1f:41:66:2d:0d:ef:74:58:82:3b:92:5b:fe:17:af:28:e2:9d:
f0:41:99:77:0b:91:37:de:c5:71:40:1f:62:45:f5:7f:29:d0:
58:f7:cd:de:1f:db:eb:54:7b:a1:ef:a2:5c:3d:c9:f2:de:57:
90:fe:e0:10:26:db:78:35:a8:67:a3:46:b3:17:1e:ad:d7:d8:
e5:3e:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org