Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/WmGQkFyHbXLp_VFD0CiRKbtzRV4.roa
File: WmGQkFyHbXLp_VFD0CiRKbtzRV4.roa (raw, json)
Hash identifier: CyUSF4hVkkN8pZnuG5Y4T4I9nMuAMqDTifSD5y6Koj4=
Subject key identifier: 5A:61:90:90:5C:87:6D:72:E9:FD:51:43:D0:28:91:29:BB:73:45:5E
Certificate issuer: /CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Certificate serial: 0DD92E69
Authority key identifier: 1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/WmGQkFyHbXLp_VFD0CiRKbtzRV4.roa
Signing time: Sat 01 Jan 2022 09:01:52 +0000
ROA not before: Sat 01 Jan 2022 09:01:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209551
IP address blocks: 185.146.204.0/22 maxlen: 32
185.74.216.0/22 maxlen: 32
5.154.164.0/22 maxlen: 32
185.192.28.0/22 maxlen: 32
5.154.160.0/22 maxlen: 32
5.154.160.0/21 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232337001 (0xdd92e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c233eee624c192c6c7dada1432de0b9e78b09ba
Validity
Not Before: Jan 1 09:01:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5a6190905c876d72e9fd5143d0289129bb73455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:78:ca:f5:c3:cb:5c:83:77:5e:93:8b:74:
c8:6c:07:0c:5a:5a:df:8f:9d:6a:75:f9:83:26:5a:
4f:75:23:72:3f:d3:3b:86:d9:f4:93:82:9b:11:71:
37:e6:d2:de:80:ff:45:d3:2d:9b:a8:56:bc:72:d2:
1a:03:ff:91:63:23:87:ba:b9:80:33:a4:31:34:2d:
1c:1d:e7:06:1f:3a:e0:93:4a:de:a5:f5:5c:36:a7:
ac:a1:f4:66:7a:23:22:8a:26:08:ee:80:d4:3e:22:
10:d9:a5:c6:58:03:8f:b1:bd:ff:2e:6a:73:c2:3c:
b7:c9:7a:ad:eb:a8:f2:14:3b:c2:84:29:4d:4c:64:
4d:c1:80:70:1d:33:d6:95:af:55:91:90:16:ee:77:
f2:ca:b2:31:03:ea:b0:97:02:ef:29:a1:2c:7e:32:
39:1e:9c:c2:e0:78:64:36:0b:e7:21:03:22:e0:6c:
50:e2:6b:dc:51:30:1e:2a:19:a7:2e:94:e8:ad:45:
8b:ed:37:3a:66:ca:5b:64:2c:79:7e:14:38:ba:0c:
be:9c:33:5d:c0:c7:6d:3c:85:69:31:16:1e:98:fb:
9d:e6:3d:1f:d3:2a:23:8b:8d:50:c0:58:c1:9e:3d:
7f:fc:66:3d:cb:83:4c:eb:cf:ac:ed:af:89:d8:66:
53:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:61:90:90:5C:87:6D:72:E9:FD:51:43:D0:28:91:29:BB:73:45:5E
X509v3 Authority Key Identifier:
keyid:1C:23:3E:EE:62:4C:19:2C:6C:7D:AD:A1:43:2D:E0:B9:E7:8B:09:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCM-7mJMGSxsfa2hQy3gueeLCbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/WmGQkFyHbXLp_VFD0CiRKbtzRV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5bef7-25b3-4463-b3bf-57a951f49930/1/HCM-7mJMGSxsfa2hQy3gueeLCbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.160.0/21
185.74.216.0/22
185.146.204.0/22
185.192.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:67:f3:21:c5:c1:37:7a:f4:49:b5:14:e2:09:07:50:67:91:
b8:39:01:c9:8e:95:2a:85:04:e5:30:05:7c:7a:b3:f3:66:86:
2f:f8:8e:c2:73:3a:b5:ab:01:3a:ed:eb:10:fd:d1:fa:cf:2d:
56:8a:6b:70:60:42:fe:e3:88:dc:06:3a:9f:90:d6:06:a8:d1:
1d:34:c7:40:0c:36:38:7f:d5:fd:74:d9:47:73:14:14:61:e6:
35:c0:6a:89:ec:72:0e:cd:aa:b5:ca:19:87:5c:8d:11:03:1c:
87:2c:df:9f:19:08:93:27:37:5b:5b:4b:7b:a1:a4:9f:22:cf:
95:78:db:dc:83:9a:60:63:49:4c:21:de:fd:e4:b3:84:74:95:
5a:43:b7:02:ec:1b:d9:38:49:53:63:a5:83:29:c4:0f:1e:6b:
5a:3a:9b:35:d6:ed:a5:ff:10:20:f3:a8:56:94:90:f8:1a:d3:
fe:d5:46:9b:72:54:b3:2f:71:8e:2f:15:d2:d0:41:83:1d:94:
6c:25:0f:9f:5a:54:db:38:15:2a:51:31:d1:f6:a0:98:0f:cc:
ae:01:84:2c:eb:ff:2a:a2:8e:7c:66:4c:99:e3:c1:9f:ce:22:
ce:57:43:51:ab:91:f0:ac:a4:05:81:41:d5:5b:eb:e0:fc:9e:
ec:38:6a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:04:40 2025 by rpki-client