Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/h1B-SEGXnqWLikcFCs48Sb8cwg8.roa
File: h1B-SEGXnqWLikcFCs48Sb8cwg8.roa (raw, json)
Hash identifier: Yaj1T5TGWdFluPyAeTtb6vOd7g7IeXkLyoGK1VJWFjs=
Subject key identifier: 87:50:7E:48:41:97:9E:A5:8B:8A:47:05:0A:CE:3C:49:BF:1C:C2:0F
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CE25360213F2970CAA86F7D8D8AE9
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/h1B-SEGXnqWLikcFCs48Sb8cwg8.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43132
IP address blocks: 178.34.208.0/20 maxlen: 20
85.173.96.0/19 maxlen: 19
85.172.174.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e2:53:60:21:3f:29:70:ca:a8:6f:7d:8d:8a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87507e4841979ea58b8a47050ace3c49bf1cc20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:5e:f8:7f:a3:58:72:c9:28:b9:84:27:43:
65:2f:dc:5a:60:5d:87:db:99:e9:ad:09:70:04:e9:
48:7a:ce:ea:30:b7:db:c7:3e:03:68:01:f3:80:5b:
2a:64:f7:4a:ca:8f:fb:d2:bb:8f:a5:2f:e1:37:74:
3d:cb:11:a6:9e:5f:6c:3f:b0:a9:6c:5b:97:55:99:
f0:5c:27:80:9a:a8:bf:43:cd:36:ec:43:ba:00:1b:
1b:4b:e2:89:e2:66:53:b0:53:18:ab:7d:aa:e5:f1:
e9:9c:0b:ab:c6:29:47:5d:f2:70:f2:04:56:99:67:
8c:fd:9f:d3:de:83:43:8d:00:44:5f:82:c0:73:3a:
fa:8e:9f:ed:8e:99:24:3e:10:f4:60:ec:22:69:b0:
82:d6:44:c7:fc:a4:c9:70:ac:2f:8c:8b:5b:75:c6:
d6:0e:8a:88:33:5f:a1:c3:46:2e:88:17:f9:1d:c7:
3c:8e:be:26:f4:34:57:3f:08:3c:02:cf:50:66:e6:
f3:87:72:aa:60:86:a2:9f:4e:5e:a6:6d:3d:92:7b:
db:97:0e:85:a2:af:a9:29:91:ac:c1:86:7a:6f:09:
91:ad:3d:53:cb:b3:ba:2d:19:aa:21:a3:84:ff:e4:
f6:59:c0:a7:03:3d:e4:da:a4:84:cc:f9:3c:8a:62:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:7E:48:41:97:9E:A5:8B:8A:47:05:0A:CE:3C:49:BF:1C:C2:0F
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/h1B-SEGXnqWLikcFCs48Sb8cwg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.172.174.0/23
85.173.96.0/19
178.34.208.0/20
Signature Algorithm: sha256WithRSAEncryption
64:54:11:e3:3d:2a:08:5a:4a:2c:b7:c3:e3:d0:1f:35:a7:07:
6c:ca:9e:c4:87:9e:2d:29:68:a7:72:bd:e3:67:5f:05:51:a1:
8a:1a:e2:c5:08:65:39:1e:ea:a4:8e:e2:b2:a2:8c:e1:68:8f:
f0:97:6e:10:56:11:c2:15:aa:c5:8a:b3:d0:bd:ca:9f:aa:1e:
b6:f4:61:e9:4e:1f:e5:8f:24:ec:51:aa:c5:41:15:b3:75:4f:
75:55:af:2f:78:fc:ff:d6:60:ec:ed:2a:81:26:6b:0b:47:15:
be:02:b7:5e:d0:36:2b:be:2d:b4:b6:d3:17:9a:f9:89:5d:dc:
c0:76:b5:34:7d:19:bb:2d:86:72:9a:5e:9e:fe:12:45:02:bf:
fa:ba:ad:2c:e6:06:c6:f4:33:45:56:42:1e:4c:08:a2:ff:7b:
9d:a2:6b:6c:cc:41:a4:35:5e:65:08:b1:24:9f:67:50:54:65:
de:8f:1a:47:93:3a:bd:5d:8c:4d:74:37:d5:7d:e3:9c:df:98:
a4:fc:94:c1:05:39:ff:14:3b:42:e5:43:83:01:c1:1c:83:2d:
02:ac:64:66:7b:03:63:5b:10:80:d2:90:a1:7f:4b:7f:14:01:
78:73:ca:59:6e:e4:a9:d4:cf:0c:9b:48:59:af:fd:79:eb:69:
a8:a6:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:03:09 2025 by rpki-client