Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hzVyn8DK35xdVHCc0Dg7CdQuf3w.roa
File: hzVyn8DK35xdVHCc0Dg7CdQuf3w.roa (raw, json)
Hash identifier: 1vLp0it7a5sv24ETemZmy7126Raw6TctGoptaEGm5mI=
Subject key identifier: 87:35:72:9F:C0:CA:DF:9C:5D:54:70:9C:D0:38:3B:09:D4:2E:7F:7C
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018BAEAAE604219946623764FEFBB2463761
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hzVyn8DK35xdVHCc0Dg7CdQuf3w.roa
Signing time: Wed 08 Nov 2023 11:21:57 +0000
ROA not before: Wed 08 Nov 2023 11:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203872
IP address blocks: 205.220.216.0/23 maxlen: 24
85.204.28.0/23 maxlen: 24
86.106.28.0/23 maxlen: 24
195.78.90.0/23 maxlen: 24
176.111.54.0/23 maxlen: 24
199.48.230.0/23 maxlen: 24
168.149.248.0/23 maxlen: 24
193.91.8.0/23 maxlen: 24
162.216.138.0/23 maxlen: 24
89.39.184.0/23 maxlen: 24
24.235.22.0/23 maxlen: 24
141.193.214.0/23 maxlen: 24
91.217.106.0/23 maxlen: 24
89.37.60.0/23 maxlen: 24
89.20.50.0/23 maxlen: 24
89.40.236.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:aa:e6:04:21:99:46:62:37:64:fe:fb:b2:46:37:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 8 11:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8735729fc0cadf9c5d54709cd0383b09d42e7f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:9c:d8:4c:d4:92:65:33:d6:90:bd:b0:8c:
78:50:13:d2:92:ae:b4:1b:3e:d6:b2:35:0f:e4:30:
2d:03:52:16:0a:99:e2:c6:45:99:be:10:9f:84:89:
29:5f:5b:06:de:10:96:59:75:4c:5a:2b:59:25:cf:
9c:b0:72:a0:33:24:b0:78:3b:1b:ca:88:c6:ac:bd:
a6:39:67:0b:8d:95:eb:11:a2:88:fe:51:c1:e1:5f:
1c:2b:73:1b:7a:f5:3a:e3:ac:9a:87:e0:ef:1c:a4:
f2:54:d7:1c:c7:36:81:31:04:a1:53:c4:e8:49:2d:
12:d3:f0:72:65:11:1c:bb:36:41:89:f0:29:70:3e:
ab:9e:90:2a:d4:c5:3a:38:87:bc:6c:77:42:81:7c:
25:c7:ff:e8:1d:ac:f9:40:6c:23:b6:0a:06:66:56:
72:2f:0a:7e:a8:3d:d0:72:70:36:d3:67:77:c0:9c:
19:f7:b1:ce:97:65:25:e2:dc:9b:ca:da:54:c3:2c:
7a:dd:60:de:44:b6:f4:49:98:eb:7b:32:d2:bd:c5:
0a:fe:35:d6:d6:1d:55:26:6f:29:97:d5:c3:96:12:
fe:e4:8d:13:03:c6:97:08:43:9c:7a:58:bf:53:d8:
7e:bd:79:9f:5a:b0:f9:01:63:a2:45:78:e9:f4:0d:
38:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:72:9F:C0:CA:DF:9C:5D:54:70:9C:D0:38:3B:09:D4:2E:7F:7C
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/hzVyn8DK35xdVHCc0Dg7CdQuf3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.235.22.0/23
85.204.28.0/23
86.106.28.0/23
89.20.50.0/23
89.37.60.0/23
89.39.184.0/23
89.40.236.0/23
91.217.106.0/23
141.193.214.0/23
162.216.138.0/23
168.149.248.0/23
176.111.54.0/23
193.91.8.0/23
195.78.90.0/23
199.48.230.0/23
205.220.216.0/23
Signature Algorithm: sha256WithRSAEncryption
68:a6:f7:14:e9:6e:33:4e:ae:fe:94:0f:c7:df:0a:06:b3:ef:
b8:9a:6a:d9:47:4c:89:8d:ef:ff:87:d2:d1:19:31:86:61:58:
69:f6:45:a4:c5:7c:93:68:11:f3:48:eb:78:36:74:6e:b0:e4:
c7:41:79:85:3a:78:40:24:be:c6:3a:3e:9d:ba:60:21:09:b9:
41:2a:38:50:cb:71:b7:44:57:74:d2:cc:b0:ef:93:b8:8a:fc:
38:40:ea:2e:b4:52:97:89:2a:4e:ff:eb:01:dd:a7:3a:79:a0:
26:81:ac:bd:55:97:57:19:b0:3a:50:5b:59:ff:fe:88:c0:a2:
e3:85:20:ec:73:06:70:b6:4a:f7:34:59:18:0d:a5:16:08:ab:
45:8c:d2:14:1d:14:d9:e2:65:76:d3:a0:db:a4:d9:63:09:8e:
e5:f5:7a:07:c8:8c:13:9a:a6:34:0b:60:7e:41:b3:e4:16:01:
2c:be:41:bd:bd:4d:f2:8e:c0:ba:12:cf:b2:fa:a0:22:1f:97:
b8:bd:f4:53:a9:15:79:5a:6d:16:f4:dd:c9:2a:0d:3a:b6:df:
47:a1:72:b5:fc:d5:aa:6b:c4:c7:65:50:f9:de:b2:aa:41:90:
f7:af:6d:7d:f2:87:67:0a:20:c4:c2:b6:51:5a:bd:fd:e0:62:
94:25:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:10:47 2025 by rpki-client