Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/hgbukYYBTQZyXcIw4iDEoZ7zXFo.roa
File: hgbukYYBTQZyXcIw4iDEoZ7zXFo.roa (raw, json)
Hash identifier: a5W914BtE1UeydpKyFa1WbM3FGAtwRUcLrf8aMZqRkc=
Subject key identifier: 86:06:EE:91:86:01:4D:06:72:5D:C2:30:E2:20:C4:A1:9E:F3:5C:5A
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 034E35
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/hgbukYYBTQZyXcIw4iDEoZ7zXFo.roa
Signing time: Mon 13 Jun 2022 12:01:14 +0000
ROA not before: Mon 13 Jun 2022 12:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49183
IP address blocks: 46.173.173.0/24 maxlen: 24
94.231.179.0/24 maxlen: 24
94.231.187.0/24 maxlen: 24
46.173.160.0/22 maxlen: 22
94.231.190.0/24 maxlen: 24
46.173.164.0/22 maxlen: 22
94.231.191.0/24 maxlen: 24
46.173.168.0/22 maxlen: 22
46.173.172.0/24 maxlen: 24
2001:678:d94::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216629 (0x34e35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Jun 13 12:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8606ee9186014d06725dc230e220c4a19ef35c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:61:9b:0a:c4:e7:16:7f:1c:39:ee:86:f2:
4d:8d:98:07:b1:7c:b3:6d:ef:3b:18:e3:43:1c:b0:
8c:20:c4:64:b9:05:9f:73:d1:a1:9d:63:bc:e6:7f:
d3:83:6c:7b:be:3f:9b:01:d9:ac:a4:b5:50:77:22:
45:a2:9a:6f:1b:87:29:e6:d7:8f:59:19:71:32:3a:
86:6e:64:73:59:eb:b3:4a:ed:e0:b3:71:4b:81:34:
1a:a4:31:bb:c7:46:35:8f:34:02:73:37:cf:af:5a:
da:fa:02:ce:7d:fb:c8:7d:68:61:60:3a:79:39:31:
fb:dd:89:b3:94:01:19:fc:98:d0:5d:bd:ca:fd:86:
f1:39:80:8f:55:a5:dc:da:b6:58:d7:1f:20:09:75:
42:ab:43:16:78:31:8a:c3:d6:b5:d4:83:48:d5:1a:
8a:2b:31:8d:c7:47:09:fd:2c:80:11:4d:e5:8e:0e:
49:b0:e7:60:6c:7c:38:b0:a6:40:b8:8b:53:af:e7:
2d:bf:f9:85:83:cc:0a:d5:c4:a2:51:bd:90:34:63:
59:7e:71:b0:84:99:12:15:14:a5:82:20:9c:33:73:
ce:66:3d:0d:bd:88:16:71:e8:c8:fc:73:a0:13:ac:
bd:79:06:19:e2:f6:0e:57:5b:3a:4f:2f:4f:06:63:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:06:EE:91:86:01:4D:06:72:5D:C2:30:E2:20:C4:A1:9E:F3:5C:5A
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/hgbukYYBTQZyXcIw4iDEoZ7zXFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.173.160.0-46.173.173.255
94.231.179.0/24
94.231.187.0/24
94.231.190.0/23
IPv6:
2001:678:d94::/48
Signature Algorithm: sha256WithRSAEncryption
97:ec:74:b4:b9:b4:6f:17:fe:08:dc:90:0a:d9:25:d8:f4:d5:
b6:49:94:e3:a0:f6:2e:3f:5e:22:f5:43:52:10:41:77:7b:9e:
bb:e4:69:0d:c5:22:1d:b9:ab:12:fd:a3:6b:39:f0:96:56:be:
11:2c:a7:e4:01:f1:06:7a:0c:ae:5c:40:5d:c2:f1:3a:e6:d1:
e6:1e:d0:bc:3a:d8:0b:86:76:f9:79:9a:2f:80:b1:9c:03:61:
86:33:6b:76:4d:86:ef:f8:80:f1:83:c7:09:4a:b4:4a:b3:41:
42:5c:48:d5:50:e8:87:5e:3a:e6:0c:fe:d6:b0:3d:0d:c9:eb:
0f:46:45:17:55:01:43:7b:3e:8a:a0:96:23:df:e7:1f:5f:85:
99:80:ca:79:60:d7:e0:10:49:38:3f:5f:5e:54:2f:79:94:3b:
09:e5:bb:e7:56:69:1d:9d:ef:4b:69:b9:af:55:85:0a:57:2c:
b3:32:3f:d3:c0:4c:10:b2:54:b0:80:60:85:e7:ec:0a:ed:40:
e0:7b:69:95:e7:07:19:4e:a1:f4:04:1f:b8:89:05:96:46:10:
d7:ca:73:30:16:c5:cb:32:89:d1:1d:ff:bc:fd:a3:e7:0a:54:
f2:56:34:7f:08:f5:56:6a:a6:27:09:26:c9:2e:5b:e2:33:ed:
6d:ce:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:30:14 2025 by rpki-client