Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HwwS4I-P6AqS3r6o7LSUo3_d3ow.roa
File: HwwS4I-P6AqS3r6o7LSUo3_d3ow.roa (raw, json)
Hash identifier: zvRScfgMB1nGTAo/Tgd9tyD2iDv1bK1CgM4a5k4QjN8=
Subject key identifier: 1F:0C:12:E0:8F:8F:E8:0A:92:DE:BE:A8:EC:B4:94:A3:7F:DD:DE:8C
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0A5C1058
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HwwS4I-P6AqS3r6o7LSUo3_d3ow.roa
Signing time: Tue 28 Jun 2022 08:30:02 +0000
ROA not before: Tue 28 Jun 2022 08:30:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209996
IP address blocks: 192.144.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 173805656 (0xa5c1058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jun 28 08:30:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f0c12e08f8fe80a92debea8ecb494a37fddde8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:25:d0:0b:03:73:a1:0f:0b:ef:75:57:91:
83:3d:4b:b3:87:bd:3f:e2:9f:84:46:c6:de:9a:e5:
3a:ed:a5:68:e9:9f:75:09:a8:79:a7:6d:1e:b3:99:
1a:92:6c:d6:03:86:6b:5e:63:dd:61:85:ba:0a:de:
4d:5f:18:f9:3a:f8:30:58:c0:18:79:1d:79:ad:f7:
21:4b:1a:c3:1b:f1:2b:a1:25:d8:3b:05:35:e7:96:
ec:e7:1e:0c:c4:60:a7:dc:be:c8:a0:80:bd:9f:a5:
c4:a5:5d:46:8c:7c:72:0f:be:44:a8:18:f3:9d:ae:
f1:49:e3:5d:40:25:01:73:cd:07:c3:17:c8:f5:ed:
5a:a4:af:1d:62:6e:00:f7:c2:02:91:16:af:bd:04:
d8:0a:87:9f:86:2e:84:59:ba:e6:46:85:66:22:11:
1b:07:c7:b9:bd:3d:5b:f9:f3:74:98:5b:23:89:ce:
e6:c2:d2:9e:cd:86:8d:d1:c9:ae:32:bd:44:dc:f3:
31:eb:3c:73:e2:9a:42:33:21:17:8d:39:46:97:f9:
13:fb:66:97:bc:b4:cb:39:6b:bb:e7:54:a5:db:f7:
ce:6b:51:0a:4f:6e:5f:5f:44:05:d7:78:bd:96:94:
8f:04:06:65:40:58:91:fa:d9:2f:34:f4:07:f7:91:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0C:12:E0:8F:8F:E8:0A:92:DE:BE:A8:EC:B4:94:A3:7F:DD:DE:8C
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HwwS4I-P6AqS3r6o7LSUo3_d3ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.144.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e5:16:b6:b8:fd:ac:b2:88:68:3e:f0:7e:0e:d5:96:58:b9:
a5:db:eb:9b:63:6b:2c:9c:fd:fa:2e:ad:c7:e5:09:17:21:6d:
35:c1:f9:78:ce:d4:da:29:68:bf:10:2e:27:a8:c1:17:3c:b8:
5c:9f:b4:59:5b:cc:8a:8c:54:1b:89:19:0c:be:e5:7d:3c:0b:
5a:d7:b7:1f:09:ed:39:a1:8f:4a:8a:aa:2e:80:0b:4d:e4:0b:
e7:b1:78:a7:1e:89:ef:5c:ac:a0:c4:a3:e4:b8:6b:18:b9:b3:
92:5a:3b:5d:8e:24:69:27:0d:40:54:b5:86:72:fe:11:2a:da:
54:85:6c:50:94:d1:18:e3:db:b9:b4:e4:a3:68:83:4f:04:e8:
e9:49:68:0e:ab:ae:63:b2:74:36:3b:b8:2e:1c:9e:d7:be:39:
15:2f:76:02:d7:38:e3:e4:93:ae:6c:7a:3c:fc:e6:b1:3f:a7:
e9:88:21:dd:f4:9a:28:de:a9:6c:a9:10:85:d1:14:87:95:74:
c0:60:90:fa:d7:07:52:ca:eb:33:2d:51:47:20:62:0e:ae:af:
0a:84:d7:b7:fd:5c:7a:93:28:f6:02:a4:4f:a6:e0:c4:08:b4:
59:e8:d6:f7:30:09:fd:52:60:ae:81:21:33:71:e4:f7:7f:62:
c4:82:12:6d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEClwQWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZjhhZWEyZjAyNWY0OTViZWFjZWU3Y2U1YTg4MjA1MTlkZGExMzcwMB4XDTIyMDYy
ODA4MzAwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWYwYzEyZTA4Zjhm
ZTgwYTkyZGViZWE4ZWNiNDk0YTM3ZmRkZGU4YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALLiJdALA3OhDwvvdVeRgz1Ls4e9P+KfhEbG3prlOu2laOmf
dQmoeadtHrOZGpJs1gOGa15j3WGFugreTV8Y+Tr4MFjAGHkdea33IUsawxvxK6El
2DsFNeeW7OceDMRgp9y+yKCAvZ+lxKVdRox8cg++RKgY852u8UnjXUAlAXPNB8MX
yPXtWqSvHWJuAPfCApEWr70E2AqHn4YuhFm65kaFZiIRGwfHub09W/nzdJhbI4nO
5sLSns2GjdHJrjK9RNzzMes8c+KaQjMhF405Rpf5E/tml7y0yzlru+dUpdv3zmtR
Ck9uX19EBdd4vZaUjwQGZUBYkfrZLzT0B/eRCIMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQfDBLgj4/oCpLevqjstJSjf93ejDAfBgNVHSMEGDAWgBRPiuovAl9JW+rO
585aiCBRndoTcDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Q0cnFMd0pmU1Z2cXp1Zk9Xb2dnVVozYUUzQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTUvZWI3MGEzLTE3ZTEtNGQ4Ni04YjllLTYwODA5NTJmMGUwNC8x
L0h3d1M0SS1QNkFxUzNyNm83TFNVbzNfZDNvdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUv
ZWI3MGEzLTE3ZTEtNGQ4Ni04YjllLTYwODA5NTJmMGUwNC8xL1Q0cnFMd0pmU1Z2
cXp1Zk9Xb2dnVVozYUUzQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMCQIzANBgkqhkiG9w0BAQsFAAOC
AQEADOUWtrj9rLKIaD7wfg7Vlli5pdvrm2NrLJz9+i6tx+UJFyFtNcH5eM7U2ilo
vxAuJ6jBFzy4XJ+0WVvMioxUG4kZDL7lfTwLWte3HwntOaGPSoqqLoALTeQL57F4
px6J71ysoMSj5LhrGLmzklo7XY4kaScNQFS1hnL+ESraVIVsUJTRGOPbubTko2iD
TwTo6UloDquuY7J0Nju4Lhye1745FS92Atc44+STrmx6PPzmsT+n6Ygh3fSaKN6p
bKkQhdEUh5V0wGCQ+tcHUsrrMy1RRyBiDq6vCoTXt/1cepMo9gKkT6bgxAi0WejW
9zAJ/VJgroEhM3Hk939ixIISbQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:34 2023 by rpki-client on console-fra.rpki-client.org