Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/hh4A7_VwDtMt0zs_YGsgiA9AopE.roa
File: hh4A7_VwDtMt0zs_YGsgiA9AopE.roa (raw, json)
Hash identifier: FKvxm879KlgVXloUPTHdNBGvNGohac2+C6hbRYa6QGw=
Subject key identifier: 86:1E:00:EF:F5:70:0E:D3:2D:D3:3B:3F:60:6B:20:88:0F:40:A2:91
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 018571A7B58A92E8964EA2AA193268BE7425
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/hh4A7_VwDtMt0zs_YGsgiA9AopE.roa
Signing time: Mon 02 Jan 2023 08:44:54 +0000
ROA not before: Mon 02 Jan 2023 08:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62050
IP address blocks: 185.51.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b5:8a:92:e8:96:4e:a2:aa:19:32:68:be:74:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jan 2 08:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861e00eff5700ed32dd33b3f606b20880f40a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:a2:28:cd:33:9e:93:61:7d:b6:66:49:b5:
c1:82:ca:a1:3e:eb:93:fc:99:a3:36:a8:77:de:9d:
44:a7:c9:ed:fc:57:0c:3d:4d:51:81:97:2e:8c:04:
ac:f5:96:64:d3:ab:7d:37:2d:ba:dc:00:0e:b1:c9:
1f:84:6a:a9:82:48:ee:b1:67:67:75:66:11:e7:ff:
07:f5:ef:58:0c:da:a8:50:ee:85:ab:f5:a8:48:f1:
97:a1:e4:4a:c6:bb:7b:86:9b:22:c6:d5:37:6e:c8:
d3:74:5a:a9:bd:54:0c:7e:a2:b2:c1:cd:f9:ea:da:
72:31:9e:1a:13:51:78:78:b2:a2:55:f5:10:d4:df:
32:4f:ae:9b:71:b6:c1:6a:43:20:95:ae:4f:f6:80:
b1:22:b4:4b:86:3e:47:43:81:a6:52:e9:00:47:2c:
62:93:b3:bb:98:d7:a3:ec:3d:4a:fc:9a:35:bc:ae:
b6:b2:a6:4f:6b:95:fc:54:1e:32:47:a3:70:26:b1:
38:2f:49:84:63:66:11:3e:4a:a3:03:e7:fc:d0:88:
7a:05:96:c2:c4:d3:23:51:ec:f9:ca:ec:e7:9a:e1:
35:d7:35:83:cc:c7:3b:de:b8:a3:c5:74:97:3c:61:
8a:51:e2:f4:28:0d:63:cd:96:3a:fd:95:24:6b:c8:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:00:EF:F5:70:0E:D3:2D:D3:3B:3F:60:6B:20:88:0F:40:A2:91
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/hh4A7_VwDtMt0zs_YGsgiA9AopE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.116.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5c:54:88:42:c0:9a:03:23:1d:34:89:35:d8:8a:9e:0e:48:
d3:b7:8b:9d:18:27:98:17:3e:a3:b6:f1:74:08:2c:a6:65:14:
bc:07:4f:d4:35:cd:b2:9e:90:9a:65:8e:fe:15:1f:87:3c:97:
0e:a4:d6:f0:64:c5:a9:ae:3d:05:33:14:1f:39:02:0f:b5:61:
89:c8:f3:51:b8:f6:21:71:d9:71:12:52:7a:68:02:00:cc:73:
96:30:a6:fb:2b:7d:9b:e7:ec:b5:3a:44:05:db:76:db:6a:e8:
94:85:92:90:1d:f2:16:4a:52:df:fa:ed:d6:34:e4:85:dd:5f:
82:f5:6a:e2:9f:22:82:82:1f:16:69:b2:db:c4:0a:84:9a:e7:
04:65:40:18:d4:03:8e:1f:41:bb:32:75:aa:05:72:0d:f3:74:
93:75:e4:b7:9e:a9:78:25:10:96:51:99:6b:f8:45:c8:5a:ea:
08:ba:14:1c:85:31:da:de:67:c3:7f:b2:fe:e1:e8:fc:6e:41:
1a:1b:d6:7e:a1:3f:dc:eb:1b:6b:da:6c:00:8f:38:61:0b:15:
23:dc:95:f3:54:59:18:30:ff:05:90:f7:df:f5:ba:59:24:08:
44:76:1e:b9:21:43:3d:ce:00:da:e7:1e:94:df:e3:4f:75:2f:
17:64:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:45 2025 by rpki-client