Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/H7slDEb35qXooXI9Se0LXpjbttM.roa
File: H7slDEb35qXooXI9Se0LXpjbttM.roa (raw, json)
Hash identifier: XDBqMdnRQziAfAH/yo3glFs1VZlDmas3f7ikMA5vUhM=
Subject key identifier: 1F:BB:25:0C:46:F7:E6:A5:E8:A1:72:3D:49:ED:0B:5E:98:DB:B6:D3
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 06FD61F2
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/H7slDEb35qXooXI9Se0LXpjbttM.roa
Signing time: Tue 17 May 2022 09:43:29 +0000
ROA not before: Tue 17 May 2022 09:43:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41765
IP address blocks: 185.233.48.0/24 maxlen: 24
185.233.50.0/23 maxlen: 23
185.233.48.0/22 maxlen: 22
193.33.46.0/23 maxlen: 23
188.65.168.0/21 maxlen: 21
31.172.164.0/22 maxlen: 22
185.4.63.0/24 maxlen: 24
193.37.150.0/24 maxlen: 24
2a02:2288::/29 maxlen: 29
2a02:2288::/32 maxlen: 32
2a0c:d500::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117268978 (0x6fd61f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: May 17 09:43:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1fbb250c46f7e6a5e8a1723d49ed0b5e98dbb6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:21:04:42:3c:2a:3d:9c:33:82:6b:53:15:
cd:80:f5:7d:c1:8a:b0:cb:b3:17:64:75:0e:0b:9a:
47:22:27:14:ab:c3:3f:2f:46:e1:97:fd:a6:e1:eb:
78:7c:f2:38:32:76:ae:09:13:8d:68:a8:97:91:39:
7e:06:cb:6e:dd:b4:79:49:1e:bc:15:79:f3:55:f4:
00:e0:59:0d:1b:f5:11:b5:ca:2d:9b:d0:7d:14:81:
0c:b4:83:97:5f:55:a8:ea:a3:ae:f5:d8:aa:d3:88:
5d:ed:0b:db:2d:ad:0f:88:ba:c9:0f:93:94:fd:d3:
48:10:87:b8:37:cb:33:c3:63:60:1d:e2:99:b8:d1:
3b:bb:42:44:5d:9c:43:e6:c8:3b:1b:9f:da:4e:92:
16:bf:6a:fd:6c:ff:2c:31:4f:a3:80:42:c6:7a:86:
c7:7a:96:fc:7f:4a:de:38:18:e7:61:87:e4:ba:30:
36:f7:bf:8c:f7:a3:5b:5e:77:c1:46:1a:f6:d0:c6:
b7:69:5e:79:36:d1:f0:0f:7b:b1:52:2c:d4:9a:04:
b8:b3:c4:ae:de:87:33:89:1c:27:da:60:82:94:ed:
75:32:47:4e:45:5d:e3:6b:90:fc:1d:7b:fd:23:cf:
3a:b9:89:f7:c0:ad:04:f1:26:b2:81:61:8b:12:d5:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BB:25:0C:46:F7:E6:A5:E8:A1:72:3D:49:ED:0B:5E:98:DB:B6:D3
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/H7slDEb35qXooXI9Se0LXpjbttM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.164.0/22
185.4.63.0/24
185.233.48.0/22
188.65.168.0/21
193.33.46.0/23
193.37.150.0/24
IPv6:
2a02:2288::/29
2a0c:d500::/29
Signature Algorithm: sha256WithRSAEncryption
5e:07:7d:c5:18:69:ca:23:7e:bf:ae:88:99:6f:48:2d:9d:33:
fc:c7:73:dd:19:88:a7:ae:bb:b8:68:15:38:e6:53:70:59:5d:
40:b9:a9:14:cc:2a:bf:2e:49:3f:80:74:12:4b:85:b7:e4:b8:
47:3d:3e:7a:84:22:69:f9:bb:67:50:fe:85:7f:d6:cf:0c:a7:
03:92:9f:be:e5:6f:f3:b7:5c:ee:59:42:03:a7:e9:4a:e1:0a:
a9:d5:4c:d9:1d:58:b3:37:1b:f6:fd:2b:a0:a6:f1:d2:34:b4:
30:a8:bd:2c:a3:07:6d:a8:0a:fb:2d:aa:b9:59:f5:ee:a1:1d:
ee:64:3f:7e:7b:21:81:90:99:09:81:2b:d1:db:68:69:9f:75:
6a:4e:08:1c:43:2e:14:39:7f:ae:73:5b:86:8c:2f:67:0c:0d:
e6:32:1c:26:1c:e7:36:b0:1d:9b:bb:cb:54:46:eb:cb:41:56:
73:e2:65:19:bf:3a:9f:73:f1:b5:96:ea:8e:91:c0:74:55:1a:
f4:fe:1b:14:bb:3d:a4:2f:e2:21:cc:d1:f8:a5:61:bf:0c:04:
ff:99:08:5e:ef:55:06:06:31:84:bf:14:05:20:f6:b0:42:a8:
73:b9:3e:bc:a8:8f:71:de:24:f3:ae:f1:df:47:15:e6:24:be:
9c:c1:c6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:50 2025 by rpki-client