Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HiHrZrb0398laLdp8UQhGKCCaDw.roa
File: HiHrZrb0398laLdp8UQhGKCCaDw.roa (raw, json)
Hash identifier: ZQZeP8kdF7wI1zqkLsb+haCvLqFZsGeWDjHLG5CvFBk=
Subject key identifier: 1E:21:EB:66:B6:F4:DF:DF:25:68:B7:69:F1:44:21:18:A0:82:68:3C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 42A622D5
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HiHrZrb0398laLdp8UQhGKCCaDw.roa
Signing time: Sat 01 Jan 2022 06:05:03 +0000
ROA not before: Sat 01 Jan 2022 06:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43132
IP address blocks: 178.34.208.0/20 maxlen: 20
85.173.96.0/19 maxlen: 19
85.172.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1118184149 (0x42a622d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 1 06:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e21eb66b6f4dfdf2568b769f1442118a082683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a4:30:d1:00:c6:02:ac:9d:ca:82:0e:49:a9:
d2:9c:aa:89:c2:91:b3:0b:c1:88:e6:40:8e:27:38:
d2:c0:6a:62:cd:bc:65:cf:82:be:cb:5b:5f:9b:db:
80:68:a0:bc:12:ef:75:9e:41:bd:a1:99:fd:57:45:
46:e9:4b:51:be:38:5b:7f:d3:db:36:fd:d9:54:49:
23:7e:da:c0:7a:bc:60:07:ec:7e:6c:d9:25:03:c7:
48:9d:e6:60:cb:ad:9a:fb:a2:7c:3e:e9:0a:d8:e0:
ba:13:0e:a7:42:19:c2:04:ec:0e:70:e5:a9:65:41:
20:1b:d0:6b:07:88:39:68:04:b5:cc:d4:5a:28:44:
98:6d:71:dc:bd:85:18:67:18:b4:7b:7f:e0:75:b6:
18:4a:ca:c7:7d:d0:ad:13:bf:2c:98:6a:50:c2:ec:
21:16:8e:e0:78:ac:9d:d4:ec:be:a0:11:17:04:17:
65:f7:18:56:0e:bd:01:27:46:4d:4a:48:c4:41:74:
2f:8f:e5:e6:4a:88:eb:45:cc:5e:e2:38:f0:11:13:
cf:13:53:dc:64:37:dc:6c:87:38:a4:67:4e:13:21:
9f:9e:da:f7:90:25:93:79:8b:f7:48:5b:50:7d:e4:
00:d3:6a:9e:6b:74:51:0b:56:da:a0:e4:63:fd:5d:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:21:EB:66:B6:F4:DF:DF:25:68:B7:69:F1:44:21:18:A0:82:68:3C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HiHrZrb0398laLdp8UQhGKCCaDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.172.174.0/23
85.173.96.0/19
178.34.208.0/20
Signature Algorithm: sha256WithRSAEncryption
28:11:a6:ca:b7:98:8f:c4:af:31:3e:75:32:10:df:5c:ba:cb:
9b:f8:33:20:59:3b:b0:10:4f:da:12:9b:24:6a:31:1b:69:9c:
ed:44:0c:a9:fb:bd:67:4e:08:9d:a2:9a:46:c6:1a:1c:b0:3f:
b3:c2:4a:de:6f:67:06:56:4c:72:87:19:23:8d:2a:55:f3:7f:
39:24:c9:48:7d:86:f4:6d:9d:5a:57:7a:df:17:54:ce:38:fa:
d1:2b:42:b0:6a:41:d2:cf:2d:58:39:44:5b:98:52:eb:32:dd:
ec:26:f7:ab:98:c6:cd:33:ae:f6:ec:fe:f1:43:c2:58:23:e7:
49:9a:4b:15:0d:b0:c6:f3:ef:c6:26:8a:dc:c8:05:18:88:37:
fe:db:47:61:77:ab:cf:cf:b0:f0:9a:59:18:7c:6f:48:b6:13:
64:d2:95:27:79:e4:92:21:9b:f9:38:2a:3c:0e:dc:81:97:b4:
37:53:c2:c0:69:ad:b9:61:89:71:8a:9e:b7:6c:ec:71:2f:45:
48:86:ea:2d:0c:c5:67:73:36:6d:75:a6:fd:14:f0:e4:4d:b3:
99:2a:ae:bf:fe:f6:c5:8f:10:0c:48:52:3f:00:d4:0f:fb:1f:
81:56:5d:e9:cb:84:61:aa:82:bf:02:93:b4:74:1e:24:bf:6f:
55:f2:79:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:10:11 2025 by rpki-client