Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/Hli0BHna7WnmNWie4s4FhQ6pbO0.roa
File: Hli0BHna7WnmNWie4s4FhQ6pbO0.roa (raw, json)
Hash identifier: TMLWe6bZtmWrr1evvLIuI6op5NJBphAuJ25Y5rn7USw=
Subject key identifier: 1E:58:B4:04:79:DA:ED:69:E6:35:68:9E:E2:CE:05:85:0E:A9:6C:ED
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 0182D5504F1D4878ACD464525F9EB273219E
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/Hli0BHna7WnmNWie4s4FhQ6pbO0.roa
Signing time: Thu 25 Aug 2022 14:03:06 +0000
ROA not before: Thu 25 Aug 2022 14:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204085
IP address blocks: 185.132.8.0/23 maxlen: 23
185.132.10.0/23 maxlen: 23
185.127.44.0/23 maxlen: 23
185.127.46.0/23 maxlen: 23
185.110.0.0/23 maxlen: 23
185.110.3.0/24 maxlen: 24
185.110.2.0/24 maxlen: 24
185.123.252.0/22 maxlen: 22
185.123.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:d5:50:4f:1d:48:78:ac:d4:64:52:5f:9e:b2:73:21:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Aug 25 14:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e58b40479daed69e635689ee2ce05850ea96ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:ab:61:a0:66:71:6e:ad:a1:15:36:23:1e:
09:7d:12:8e:04:1e:ca:d1:4b:a0:8a:65:48:0e:c9:
43:4a:70:b2:fd:a9:f5:c6:21:f1:d0:e9:b7:66:04:
7f:67:eb:1e:c6:f1:a8:ee:c7:8b:9f:00:11:3c:cb:
c2:a8:32:a7:78:ac:f2:77:02:5f:6b:9d:73:26:ff:
48:4d:8f:40:59:b3:9d:4f:2c:71:a0:47:a3:58:1c:
ac:52:e6:1c:71:a9:69:05:80:84:9a:dc:2d:1f:03:
c4:c9:f2:ee:05:dd:4b:2a:9d:6c:cb:1f:d1:c1:cb:
e2:7b:8a:35:3d:79:df:54:75:c5:42:6a:29:ff:2f:
2e:88:18:e2:37:0f:64:8f:64:7e:28:c6:09:12:24:
16:96:ba:38:91:4b:bd:c5:71:b8:ac:7c:be:6d:13:
82:d6:69:b8:15:74:62:a6:58:8b:cd:ad:36:78:89:
c3:a7:c3:9a:0a:0e:db:9a:7c:2a:e6:6a:2a:9a:e8:
a4:25:3e:aa:9c:81:6d:3b:40:3b:f2:33:24:d0:05:
50:da:dc:62:12:40:17:08:ca:f4:fb:14:f6:b0:11:
6c:8b:a8:95:50:52:98:16:7f:87:8d:41:5b:c8:9e:
18:07:99:88:a0:9e:ed:f3:43:66:c2:13:c3:03:69:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:58:B4:04:79:DA:ED:69:E6:35:68:9E:E2:CE:05:85:0E:A9:6C:ED
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/Hli0BHna7WnmNWie4s4FhQ6pbO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.0.0/22
185.123.248.0/21
185.127.44.0/22
185.132.8.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:79:c7:1c:a7:5b:08:48:ea:08:18:b3:2a:37:9f:cf:2a:92:
80:f2:b6:85:d4:14:04:0d:8f:3e:b8:fe:17:ae:4b:8d:9b:e6:
f4:c1:df:86:63:26:9e:b9:48:66:25:9d:40:14:fc:3b:b1:4a:
1f:42:43:48:87:2a:42:af:4c:33:c7:94:ae:98:d2:35:5b:6f:
cd:8f:ff:5c:90:b8:6c:36:06:ed:50:25:85:76:46:ea:b2:30:
96:2d:45:e0:41:72:68:d9:01:17:7a:72:48:42:11:9d:20:42:
30:48:8a:60:e5:be:7d:5c:91:aa:c4:f6:2f:9d:47:94:c7:48:
00:5c:4c:88:53:06:d1:0d:b8:d3:77:c8:3b:b9:15:95:13:8d:
10:c4:87:1e:a4:db:e9:c9:a5:7c:df:55:e5:c0:54:dc:8c:59:
ac:20:ae:6e:71:aa:c5:86:c0:d7:75:f6:80:f2:b6:70:99:b3:
29:32:b5:c6:43:a4:73:61:13:ca:90:4d:ba:19:0c:dd:1f:ac:
ec:64:2c:1b:68:d1:ee:d8:d1:3d:7c:60:de:ca:7f:19:b0:de:
08:94:94:37:55:10:db:9c:d1:84:77:22:3d:9c:0a:d4:b8:71:
68:e6:60:84:6f:74:25:04:d8:9a:98:d8:53:93:06:07:3a:77:
5c:7f:55:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:52:40 2025 by rpki-client