Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/HhrFLwIx30dGu6YDRBAsHX3euR0.roa
File: HhrFLwIx30dGu6YDRBAsHX3euR0.roa (raw, json)
Hash identifier: CysZfrcsOZeSIk4mdPFrS21RucraToT/vru3IAiciLg=
Subject key identifier: 1E:1A:C5:2F:02:31:DF:47:46:BB:A6:03:44:10:2C:1D:7D:DE:B9:1D
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018572CC9E87B04A84EA27851A625F9EF97E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/HhrFLwIx30dGu6YDRBAsHX3euR0.roa
Signing time: Mon 02 Jan 2023 14:04:50 +0000
ROA not before: Mon 02 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211376
IP address blocks: 45.147.44.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.1.114/32 maxlen: 32
194.116.228.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
45.136.5.0/24 maxlen: 24
194.116.228.174/32 maxlen: 32
45.131.1.0/24 maxlen: 24
2a0f:b700::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9e:87:b0:4a:84:ea:27:85:1a:62:5f:9e:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1ac52f0231df4746bba60344102c1d7ddeb91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:e6:dd:8a:a8:8a:94:a1:51:bf:1d:c5:52:
3c:8a:d9:95:a0:7d:30:ae:e0:4b:5f:bd:bc:59:a2:
fc:b5:d0:81:9b:79:89:c0:11:f3:1c:ea:7f:4f:ab:
0f:ec:d9:44:82:e5:46:53:c3:bb:7a:a8:31:66:e5:
17:a6:ba:c3:bc:65:41:81:81:57:63:b3:e4:ae:fd:
10:16:94:43:40:7e:42:5f:17:57:9c:6e:df:7f:59:
13:cd:ed:48:e3:92:10:0b:1f:54:b1:14:22:64:4c:
3c:c3:51:30:9d:4d:93:2b:93:7c:9d:9b:e6:fe:89:
74:36:ac:83:4c:19:a6:bf:fb:49:66:79:3a:ba:80:
6f:55:bb:45:6e:af:fb:80:c5:f6:c6:3f:1e:4a:44:
1c:1a:f2:91:6f:78:76:9e:2f:c4:6d:22:3b:73:4f:
64:f6:a8:52:01:bc:f3:75:25:27:7a:a1:7a:8c:fd:
b3:24:32:6f:35:90:d9:01:6e:b5:6c:0b:70:10:8b:
04:2a:10:d9:3b:f4:a5:ef:e7:d7:01:cc:a6:ef:ec:
fd:b4:3a:69:da:35:62:41:a9:b5:c5:b5:80:85:b3:
71:ec:79:f0:74:29:3b:71:54:0b:7a:55:12:dc:d0:
ab:31:1d:ca:28:bd:83:61:e5:5b:98:14:cd:df:64:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1A:C5:2F:02:31:DF:47:46:BB:A6:03:44:10:2C:1D:7D:DE:B9:1D
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/HhrFLwIx30dGu6YDRBAsHX3euR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.107.0/24
45.131.1.0/24
45.136.5.0/24
45.147.44.0/24
194.116.228.0/24
194.146.26.0/24
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
1d:44:47:f9:84:71:97:97:cc:25:41:a1:58:8a:cb:b1:73:ff:
73:60:7d:71:f8:1e:3d:d5:d5:6a:4f:ef:62:8b:bf:c6:09:59:
de:b1:33:f5:56:59:6f:e2:64:3f:ff:65:80:3f:ca:cb:01:3f:
66:8d:e4:a4:f5:92:a2:83:22:37:29:4a:28:43:7e:43:0b:23:
77:80:6e:e4:45:6f:b9:2c:14:e0:aa:c0:05:ca:0e:63:59:fa:
d0:4f:4a:48:86:62:02:32:33:35:c6:06:09:ed:38:6b:f3:0b:
36:18:97:17:48:c3:45:4b:95:e1:29:2c:34:0f:89:6c:80:8a:
7b:1a:30:5b:5d:01:38:b2:ad:cc:a9:4c:c3:50:b7:56:59:cd:
82:be:4b:a9:17:57:ee:e6:bc:49:54:70:f3:8d:15:ed:89:fb:
5d:cc:0f:f0:30:f5:4b:42:56:88:19:9e:40:45:5a:15:3a:09:
0e:63:ba:75:dd:2a:90:ed:81:95:87:de:11:c7:a6:48:7e:d7:
cb:8d:26:14:b5:a7:f6:b6:81:de:cd:15:20:e6:59:4e:88:3c:
88:a2:cf:ac:8e:58:e8:0c:d4:97:da:30:ea:47:3b:8f:8f:38:
96:2c:bf:d1:9f:34:21:ca:71:91:11:0b:84:8e:74:1b:88:2e:
3e:da:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:16 2025 by rpki-client