Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/H5H8cd0SXDMDDjOw4xFHoEzcgHo.roa
File: H5H8cd0SXDMDDjOw4xFHoEzcgHo.roa (raw, json)
Hash identifier: Q+4H80JxTofRTgA5XiK66SYtxi2HbMiovWvF0nTKqPs=
Subject key identifier: 1F:91:FC:71:DD:12:5C:33:03:0E:33:B0:E3:11:47:A0:4C:DC:80:7A
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 37237B
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/H5H8cd0SXDMDDjOw4xFHoEzcgHo.roa
Signing time: Wed 08 Jun 2022 14:08:02 +0000
ROA not before: Wed 08 Jun 2022 14:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213106
IP address blocks: 85.220.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3613563 (0x37237b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jun 8 14:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f91fc71dd125c33030e33b0e31147a04cdc807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:8f:0c:5c:5f:b0:33:7e:ff:81:a6:f6:3f:
56:1d:a2:f0:04:e2:af:98:40:3a:b8:ab:0b:89:e1:
22:31:89:99:91:95:47:28:72:1e:47:51:b7:70:62:
5a:69:2b:54:ea:52:11:cf:6d:04:be:46:ad:55:ae:
cb:2b:06:92:14:2f:5b:ea:81:8c:ee:5e:55:ea:61:
79:9d:c2:4d:38:2e:22:94:a1:f6:16:a9:11:3f:04:
c1:7d:b7:ed:7f:f2:f8:34:4e:70:f3:50:b6:06:8b:
d5:0d:98:55:8f:09:6f:85:1f:d3:af:32:16:9d:c0:
f8:7f:d6:bd:4e:52:8c:5c:13:23:35:3e:cb:fc:9d:
68:4e:93:4b:18:95:1f:1e:2f:4b:f6:c6:4e:1a:f1:
62:fc:4b:11:3a:e6:25:dd:70:39:2c:3b:6d:85:5c:
7e:95:1b:19:a2:43:38:e0:d8:53:33:e3:c9:ff:22:
6a:4b:f8:ea:fd:59:19:81:e3:db:74:93:40:6c:ec:
c8:e9:be:b1:23:2c:33:d3:89:b5:99:09:fd:31:24:
ed:91:8a:58:7c:4a:2e:d7:ad:58:56:fd:1c:1a:db:
ea:53:3b:84:6c:2c:92:a9:2a:e5:fc:d1:95:46:22:
a9:fd:31:f7:7d:7b:8b:a6:9b:52:2d:3f:98:fb:a4:
90:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:91:FC:71:DD:12:5C:33:03:0E:33:B0:E3:11:47:A0:4C:DC:80:7A
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/H5H8cd0SXDMDDjOw4xFHoEzcgHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.220.142.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:96:8b:c6:3a:b6:6a:db:6b:cb:63:c1:13:9f:d9:39:69:c9:
af:1c:c8:79:aa:7a:44:a9:76:45:b2:28:7b:c8:93:5a:93:ff:
94:28:53:08:7c:4e:94:f7:21:18:d9:69:87:c0:e1:73:48:7c:
66:29:08:d6:07:9f:aa:85:77:3a:66:3f:f8:67:69:8a:70:a1:
f4:b2:be:3d:b4:76:57:f1:62:70:9c:a3:01:76:5b:65:51:ce:
d7:47:4c:4d:28:60:99:07:d8:1f:8e:20:9d:ad:d4:29:b5:b6:
96:ef:5f:40:7c:18:d2:39:82:81:90:1c:df:92:19:f8:73:35:
2f:83:37:16:d0:f1:f1:64:fe:be:32:7e:05:29:c8:63:17:b5:
8d:b8:52:53:0b:b6:94:f2:f2:7c:ab:8e:f2:d3:1e:62:55:e0:
77:47:74:5a:59:30:52:36:c0:d7:fd:68:d9:cf:37:c6:00:bb:
91:91:a9:73:1f:d8:57:2a:fb:5c:e0:63:ec:3c:ff:4d:6e:b0:
36:cb:0f:10:15:f2:eb:d8:22:9d:9d:70:d2:4c:4c:5f:c2:6c:
e5:de:d3:41:20:b2:6f:91:75:7c:15:0b:4d:c3:ea:67:b8:3a:
80:a9:6f:76:a7:ce:9f:f4:7a:ac:82:98:12:0f:46:83:52:f4:
d3:c6:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:32 2025 by rpki-client