Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/hJfj2x9jjEWYFjOEyu53kxOjZL8.roa
File: hJfj2x9jjEWYFjOEyu53kxOjZL8.roa (raw, json)
Hash identifier: vQSVySV0IEPCx48VD7UH5/92lVcxG0+2Cb7eNysf8Cc=
Subject key identifier: 84:97:E3:DB:1F:63:8C:45:98:16:33:84:CA:EE:77:93:13:A3:64:BF
Certificate issuer: /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial: 063155E8
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/hJfj2x9jjEWYFjOEyu53kxOjZL8.roa
Signing time: Sat 01 Jan 2022 14:05:40 +0000
ROA not before: Sat 01 Jan 2022 14:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199652
IP address blocks: 188.214.151.0/24 maxlen: 24
94.177.148.0/23 maxlen: 23
188.241.69.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 103896552 (0x63155e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Validity
Not Before: Jan 1 14:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8497e3db1f638c4598163384caee779313a364bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:32:f4:dc:a7:bb:5e:8d:c7:61:1e:8a:a8:20:
63:12:8c:97:9a:b0:33:35:41:60:f3:08:aa:4c:e8:
db:e9:50:5b:bc:54:b4:c5:45:76:42:3c:19:de:4a:
93:b8:d8:9e:1f:a1:63:09:cb:30:15:32:7c:2d:dd:
7e:a1:1b:4d:39:c6:5e:f5:4a:df:ba:c3:a1:74:8b:
d0:b4:62:bd:df:13:60:78:b5:57:1d:32:27:e3:ea:
2e:21:cb:52:08:83:6f:8b:a0:93:40:f2:5f:e0:3a:
9d:52:f1:aa:32:aa:2e:df:3f:ff:fd:d8:f6:37:fe:
b6:6d:02:69:f3:f5:63:4e:6b:64:85:bc:29:af:8e:
af:51:0b:47:90:10:87:5c:43:10:37:36:2c:e5:02:
e4:8e:db:14:09:9e:8b:2f:46:c6:e4:3b:42:5b:4c:
b8:9c:0d:c1:6e:51:79:ec:37:96:dd:45:92:f1:c0:
09:fe:2e:b8:2c:7c:fb:e9:bd:9a:b1:42:57:fe:57:
cc:d6:1e:92:83:5b:26:0a:b4:98:bb:2a:e8:12:e8:
b4:2d:08:7e:15:60:dd:e6:e9:60:01:18:f3:3c:27:
d6:5b:74:ee:f9:35:8b:c7:4a:70:67:0f:54:cb:b7:
d5:be:40:89:88:91:17:92:a3:6a:52:31:b2:f4:00:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:E3:DB:1F:63:8C:45:98:16:33:84:CA:EE:77:93:13:A3:64:BF
X509v3 Authority Key Identifier:
keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/hJfj2x9jjEWYFjOEyu53kxOjZL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.148.0/23
188.214.151.0/24
188.241.69.0/24
Signature Algorithm: sha256WithRSAEncryption
95:2f:3d:c1:e0:98:8f:f8:8e:ab:e7:23:20:84:03:f6:cb:c4:
96:da:5f:c8:29:a1:58:bc:93:45:b0:d3:55:28:ea:c3:bb:17:
87:6a:5f:40:09:64:e4:9a:23:17:57:a4:6c:f9:ae:5a:3d:03:
af:8d:30:2e:4a:b0:52:30:ee:d4:fd:6c:6c:a9:d6:a1:89:e2:
b2:ae:a5:61:5e:36:bc:86:18:3f:32:5b:a0:d9:c9:41:20:f5:
e6:c6:c3:84:da:6a:98:a6:9e:f7:97:d8:af:2d:73:df:f1:a8:
10:75:a2:d7:f2:1a:d0:20:50:53:10:68:9e:43:83:b8:44:4d:
71:58:53:c9:74:e2:90:53:cb:8c:83:fc:cb:63:dc:7b:53:b7:
dd:80:d0:60:5a:83:39:44:5c:4e:aa:96:ab:a2:de:cd:77:a3:
46:81:5c:ef:94:bf:cd:86:75:45:20:97:0a:fb:b7:ad:4c:44:
94:c6:07:4e:29:29:f4:a5:4c:d7:f6:06:ea:b4:78:bd:6c:13:
51:f4:43:b1:b7:cd:8a:62:54:1a:9a:73:ed:0a:df:4c:4a:12:
3a:59:44:83:ef:91:3a:2d:06:da:3f:e1:ea:0c:55:5d:04:27:
a9:02:4d:f5:33:54:89:83:78:ec:14:fd:7e:d3:95:9e:f4:bb:
04:ee:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:36 2025 by rpki-client