Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/Hba2lR4C9ihhLEi2nRihE7kn12g.roa
File: Hba2lR4C9ihhLEi2nRihE7kn12g.roa (raw, json)
Hash identifier: OlVORhCsyIYfNM6rfunI4on2WinEZy5y8zOOslbvyq8=
Subject key identifier: 1D:B6:B6:95:1E:02:F6:28:61:2C:48:B6:9D:18:A1:13:B9:27:D7:68
Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Certificate serial: 01843C691521836AB96AE5C83BEE8C86F8BA
Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/Hba2lR4C9ihhLEi2nRihE7kn12g.roa
Signing time: Thu 03 Nov 2022 07:33:50 +0000
ROA not before: Thu 03 Nov 2022 07:33:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12444
IP address blocks: 185.118.177.0/24 maxlen: 24
185.118.176.0/24 maxlen: 24
185.118.178.0/24 maxlen: 24
185.118.179.0/24 maxlen: 24
84.17.69.0/24 maxlen: 24
84.17.70.0/24 maxlen: 24
84.17.67.0/24 maxlen: 24
84.17.68.0/24 maxlen: 24
84.17.71.0/24 maxlen: 24
84.17.78.0/24 maxlen: 24
84.17.72.0/24 maxlen: 24
84.17.76.0/24 maxlen: 24
84.17.75.0/24 maxlen: 24
84.17.79.0/24 maxlen: 24
84.17.84.0/24 maxlen: 24
84.17.87.0/24 maxlen: 24
84.17.86.0/24 maxlen: 24
84.17.90.0/24 maxlen: 24
84.17.89.0/24 maxlen: 24
84.17.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:69:15:21:83:6a:b9:6a:e5:c8:3b:ee:8c:86:f8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739
Validity
Not Before: Nov 3 07:33:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1db6b6951e02f628612c48b69d18a113b927d768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:56:b9:bd:e2:b1:e9:e7:0c:bb:9c:d5:b0:
5f:3e:86:4f:c6:75:a1:a7:73:95:28:1d:5f:c6:9a:
a5:c8:a4:39:9f:63:c3:71:18:f9:0f:b3:1e:d3:84:
8b:db:c3:ab:75:c6:3e:42:a0:cc:e3:49:ae:98:ba:
51:ef:0d:bd:e4:ca:79:da:50:31:99:6a:4e:46:e5:
88:22:a7:f1:70:be:27:2d:a1:43:81:dd:a7:03:cf:
ed:f6:80:be:e9:9d:57:d4:2e:5b:c8:da:5d:dc:05:
55:ea:03:86:2f:29:7c:4f:35:c9:b4:07:f6:63:22:
a1:61:99:c4:36:d2:04:e2:75:b7:75:86:c5:8b:55:
0b:58:4b:ec:db:75:17:c5:75:9c:43:d7:c9:6a:fa:
9f:71:8e:cd:88:08:2e:48:72:3a:ab:7c:2b:8c:95:
b4:9c:d2:51:73:9a:e6:ee:c9:e8:67:23:f7:0a:7c:
18:ca:37:cd:66:c2:05:12:e7:4d:fa:25:d9:b7:fa:
0e:3d:9d:cb:21:af:c9:af:e0:cb:f9:b4:3b:5d:d4:
bd:d8:9a:de:d3:41:ce:2d:bd:33:4f:40:8b:7e:17:
41:bb:67:50:d1:75:e2:42:c1:ab:67:89:7b:2a:9b:
d6:ac:23:e4:cd:14:80:da:67:62:25:2f:ea:7e:86:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:B6:95:1E:02:F6:28:61:2C:48:B6:9D:18:A1:13:B9:27:D7:68
X509v3 Authority Key Identifier:
keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/Hba2lR4C9ihhLEi2nRihE7kn12g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.17.67.0-84.17.72.255
84.17.75.0-84.17.76.255
84.17.78.0/23
84.17.84.0/24
84.17.86.0/23
84.17.89.0-84.17.90.255
84.17.93.0/24
185.118.176.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:12:16:72:a5:20:00:0b:2a:3d:03:76:9f:59:55:06:c6:dc:
ab:9d:51:64:a3:e9:0d:be:e9:39:a4:f4:8d:5b:e3:66:a6:85:
63:f5:b7:78:5d:2b:3c:da:f5:56:48:d1:81:a0:80:6e:6f:5d:
36:26:7b:36:1e:cb:c5:d9:17:a3:10:19:2b:75:16:52:f5:39:
01:2c:62:63:25:1e:12:8a:6d:8d:f4:a4:6c:84:6f:c6:2e:aa:
b1:ca:ab:7b:84:c3:14:40:d0:ed:45:27:da:af:ee:1a:2c:3f:
ba:b7:be:73:63:65:1e:02:cf:0a:0a:5a:4b:18:48:9b:fd:cb:
98:60:1f:1f:1b:43:cc:d6:43:48:22:f7:36:84:49:ed:46:b5:
2a:91:df:a3:81:4b:5c:95:df:4b:02:4b:e3:fc:33:12:ad:37:
a0:ca:26:32:25:1f:b6:ca:51:e3:2b:40:b1:c7:bd:c1:e7:e1:
cd:74:0a:96:6f:17:53:93:99:5f:b3:54:d9:7a:93:5b:79:34:
0a:3e:9a:3c:81:92:d1:34:c2:6c:c7:bf:7f:de:5c:32:e3:b1:
aa:36:5a:e6:d5:86:4d:1d:a4:d1:0e:bf:29:4b:7d:54:db:4e:
e7:e9:5b:95:96:ec:cd:a3:90:af:fe:66:5c:1c:8c:d8:b2:34:
c5:7f:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:23 2023 by rpki-client on console-fra.rpki-client.org