Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Hgh-oxpCQzZf7g5bMVt7YlFRxeo.roa
File: Hgh-oxpCQzZf7g5bMVt7YlFRxeo.roa (raw, json)
Hash identifier: GFm44jJcST+CBUbfUwzGefxvP9iCmLgXTucrGmUmRTA=
Subject key identifier: 1E:08:7E:A3:1A:42:43:36:5F:EE:0E:5B:31:5B:7B:62:51:51:C5:EA
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 0185728C8C5748F2A4519124A94420A2EA0C
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Hgh-oxpCQzZf7g5bMVt7YlFRxeo.roa
Signing time: Mon 02 Jan 2023 12:54:51 +0000
ROA not before: Mon 02 Jan 2023 12:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211062
IP address blocks: 77.75.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8c:57:48:f2:a4:51:91:24:a9:44:20:a2:ea:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Jan 2 12:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e087ea31a4243365fee0e5b315b7b625151c5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:04:bc:1d:c7:7e:68:c8:fb:7b:2e:2d:08:
10:9d:6d:db:e5:c6:5b:52:3f:a5:8a:23:f9:6a:4f:
25:18:03:7d:cd:bf:ba:ae:9e:1e:cd:a7:27:d8:68:
a0:f8:b0:77:8b:4f:45:c4:79:62:a8:b2:02:86:9e:
da:5c:c9:53:81:64:0c:c8:53:32:53:b2:72:b3:2b:
0d:ba:8f:4c:e5:f7:5f:4a:a6:8d:7e:ba:36:6e:82:
18:21:19:0d:62:29:fa:ea:d5:a2:a7:81:b8:25:d4:
f0:6a:16:04:e1:da:d6:79:79:62:83:dd:9f:33:bc:
fe:08:dd:a1:3d:8c:a2:77:66:0f:17:45:35:39:65:
8b:1f:66:d3:07:38:1a:87:b5:cd:75:a1:90:e3:e6:
05:ac:c3:17:9d:f6:e8:90:fb:cd:15:47:b8:21:32:
39:15:d8:f8:be:21:ad:9d:50:1e:76:5f:8e:be:fb:
21:e3:c0:66:84:f4:89:c5:6d:72:0d:90:8c:68:57:
16:e2:cc:30:6a:fd:8d:0b:c3:ec:cb:5b:39:9f:1f:
8a:ce:af:1b:af:2d:4c:74:59:5f:59:a1:e1:8b:f9:
11:3a:82:e1:f4:15:59:db:0e:cb:f9:6a:28:db:ad:
1e:6b:98:e5:d2:e5:60:90:c3:ea:e3:8b:71:e2:64:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:08:7E:A3:1A:42:43:36:5F:EE:0E:5B:31:5B:7B:62:51:51:C5:EA
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Hgh-oxpCQzZf7g5bMVt7YlFRxeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b4:bb:f5:3c:ae:c6:0a:6e:6f:0f:42:46:8c:94:1b:43:63:
87:4f:8c:ce:45:74:07:f4:9f:83:38:dc:84:03:23:98:b4:e7:
a1:cd:cd:84:32:7a:1f:b9:d0:8e:6e:6f:b7:f4:5a:33:d8:8e:
38:e0:95:3e:43:85:5a:3b:34:61:10:03:98:43:dd:5f:1d:27:
d5:4f:ae:4d:d6:9a:e5:22:ef:73:b2:67:40:ab:bc:fc:a9:e4:
88:86:f7:20:d1:be:91:b2:8f:4d:33:4d:06:6e:09:0d:94:cf:
f6:68:7b:a7:fa:cc:03:4a:be:11:23:51:20:d8:6a:a2:29:49:
71:ed:a3:5c:c8:80:64:49:19:ae:f0:bc:4f:61:69:60:81:8b:
4d:92:53:23:e6:a8:79:4f:99:c2:57:80:1e:3e:c4:2b:c3:d1:
25:85:bb:97:5d:b5:63:46:2d:39:0f:5e:a7:6c:1e:25:b7:43:
70:b3:9c:28:91:ed:df:7f:2a:35:35:10:e5:3f:6f:5d:45:02:
d9:dc:6b:1e:f5:b7:6f:d7:2e:17:4c:fc:f3:bd:1c:ef:c5:37:
8c:6d:e1:eb:cf:28:72:cd:f5:64:fd:96:9b:0d:cb:7a:a3:85:
c1:4f:18:3f:89:c9:cc:2f:e8:3e:2e:c7:f2:06:91:a5:76:ad:
cb:d2:8f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:18:04 2025 by rpki-client