Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YHBH2S5muq_KCVFhBkiaPkP80z4.roa
File: YHBH2S5muq_KCVFhBkiaPkP80z4.roa (raw, json)
Hash identifier: 2HI+cKDmY8qqoybYwB0ozOCtPI2yqGwI7urtjHAbV7g=
Subject key identifier: 60:70:47:D9:2E:66:BA:AF:CA:09:51:61:06:48:9A:3E:43:FC:D3:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 1D0F43C8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YHBH2S5muq_KCVFhBkiaPkP80z4.roa
Signing time: Mon 07 Feb 2022 06:58:41 +0000
ROA not before: Mon 07 Feb 2022 06:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.221.66.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
85.217.145.0/24 maxlen: 24
92.249.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 487539656 (0x1d0f43c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 7 06:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=607047d92e66baafca09516106489a3e43fcd33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:df:33:71:aa:3d:a9:b0:cb:04:aa:7d:03:
5c:80:87:dc:51:11:b8:94:c7:e7:09:71:33:ca:8c:
63:c8:2a:cc:3d:da:fc:c8:a3:3a:c5:59:e7:49:7d:
1b:24:e7:80:e0:7d:dc:5b:e2:00:6a:fa:fb:ce:3c:
7a:e0:31:67:5f:12:b6:c5:9a:fc:6a:80:eb:6a:18:
e7:02:92:d8:c4:99:72:64:6f:f3:4e:66:70:fb:05:
01:47:50:ce:dd:76:23:bd:03:31:94:64:da:cf:76:
d8:11:01:7b:01:b8:8a:80:db:18:5e:8e:e8:49:f2:
bb:59:43:d7:c1:a2:94:2d:b5:b9:27:08:cb:c2:d0:
21:69:94:f6:1c:fc:b4:12:69:9f:56:7d:06:26:96:
54:ba:97:61:a9:83:97:b0:d5:11:0e:67:20:0b:ad:
bb:5a:46:4e:5c:40:92:55:53:18:15:91:90:75:75:
1d:4f:56:1b:44:fc:a3:b9:31:15:7e:73:7f:03:b0:
19:76:79:ea:b8:d6:57:8e:51:17:26:06:a7:fb:20:
69:54:d8:dc:82:5b:28:62:8e:0f:1f:73:76:28:57:
0c:fe:11:a4:d0:7c:8d:37:dc:9c:62:25:53:df:17:
48:21:d2:48:96:7f:c5:da:1a:7f:b3:b3:30:e8:75:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:70:47:D9:2E:66:BA:AF:CA:09:51:61:06:48:9A:3E:43:FC:D3:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YHBH2S5muq_KCVFhBkiaPkP80z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.145.0/24
92.249.48.0/24
94.156.14.0/24
185.221.66.0/24
Signature Algorithm: sha256WithRSAEncryption
98:11:79:06:31:98:0e:60:26:f9:7c:c6:42:b3:b3:35:a1:c5:
46:b9:14:dd:47:e4:c0:6f:a3:3d:ab:6c:79:73:c1:fd:4c:ad:
c0:02:20:06:17:4e:7b:2b:a5:ef:ff:ee:a6:4c:83:3f:09:a2:
51:89:26:f3:8e:f6:10:97:db:04:75:c9:e6:43:b7:d2:66:aa:
24:eb:59:2d:15:13:2c:fb:7b:bf:ee:a6:11:d8:44:23:89:63:
93:4a:60:a2:e7:db:30:2e:a0:f0:0d:50:a2:da:3d:dc:ba:cb:
30:9c:19:20:0a:01:3d:84:25:10:76:c6:58:d1:6f:89:10:6f:
c7:49:c9:6b:df:8d:82:f3:6c:d3:89:29:3b:3c:51:c9:09:7e:
d1:1d:72:29:ed:df:9a:66:c3:ac:3a:8c:2b:67:fc:c9:86:09:
14:09:f4:83:bc:9e:ef:ac:bc:f1:34:63:42:0d:a3:66:dc:eb:
dc:4e:58:24:67:24:38:cd:4a:52:c3:c4:c9:6b:cb:d6:f3:fb:
45:99:09:f2:37:4e:91:31:58:a7:d2:d9:2c:ab:d8:33:a3:31:
1d:b7:06:a5:48:3b:4e:c4:f2:16:1a:0b:b2:75:1b:7f:a7:2d:
65:aa:80:e3:3d:e8:10:d9:38:06:7c:96:7e:6b:29:8f:e6:8d:
0b:db:fd:93
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEHQ9DyDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MmM0YWMzZTNjNDNkNzBkMDUzNDljODE1YmFhZGQzOGFkNzc1ZTlkMB4XDTIyMDIw
NzA2NTg0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjA3MDQ3ZDkyZTY2
YmFhZmNhMDk1MTYxMDY0ODlhM2U0M2ZjZDMzZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANy53zNxqj2psMsEqn0DXICH3FERuJTH5wlxM8qMY8gqzD3a
/MijOsVZ50l9GyTngOB93FviAGr6+848euAxZ18StsWa/GqA62oY5wKS2MSZcmRv
805mcPsFAUdQzt12I70DMZRk2s922BEBewG4ioDbGF6O6Enyu1lD18GilC21uScI
y8LQIWmU9hz8tBJpn1Z9BiaWVLqXYamDl7DVEQ5nIAutu1pGTlxAklVTGBWRkHV1
HU9WG0T8o7kxFX5zfwOwGXZ56rjWV45RFyYGp/sgaVTY3IJbKGKODx9zdihXDP4R
pNB8jTfcnGIlU98XSCHSSJZ/xdoaf7OzMOh1dpsCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBRgcEfZLma6r8oJUWEGSJo+Q/zTPjAfBgNVHSMEGDAWgBQixKw+PEPXDQU0
nIFbqt04rXdenTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8x
L1lIQkgyUzVtdXFfS0NWRmhCa2lhUGtQODB6NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
OTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcxMi8xL0lzU3NQanhEMXcw
Rk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFXZkQMEAFz5MAMEAF6cDgMEALnd
QjANBgkqhkiG9w0BAQsFAAOCAQEAmBF5BjGYDmAm+XzGQrOzNaHFRrkU3UfkwG+j
PatseXPB/UytwAIgBhdOeyul7//upkyDPwmiUYkm8472EJfbBHXJ5kO30maqJOtZ
LRUTLPt7v+6mEdhEI4ljk0pgoufbMC6g8A1Qoto93LrLMJwZIAoBPYQlEHbGWNFv
iRBvx0nJa9+NgvNs04kpOzxRyQl+0R1yKe3fmmbDrDqMK2f8yYYJFAn0g7ye76y8
8TRjQg2jZtzr3E5YJGckOM1KUsPEyWvL1vP7RZkJ8jdOkTFYp9LZLKvYM6MxHbcG
pUg7TsTyFhoLsnUbf6ctZaqA4z3oENk4BnyWfmspj+aNC9v9kw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org