Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hZ1C5PpTH7yaEupuUxpC13atyEI.roa
File: hZ1C5PpTH7yaEupuUxpC13atyEI.roa (raw, json)
Hash identifier: i3CjdZXv3rMjes4HDdJLOuQXTU7a0KjLgBypHlUlc0k=
Subject key identifier: 85:9D:42:E4:FA:53:1F:BC:9A:12:EA:6E:53:1A:42:D7:76:AD:C8:42
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018317DA46129ED9E83B26251017BF84FAAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hZ1C5PpTH7yaEupuUxpC13atyEI.roa
Signing time: Wed 07 Sep 2022 12:08:44 +0000
ROA not before: Wed 07 Sep 2022 12:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22653
IP address blocks: 31.169.124.0/24 maxlen: 24
31.169.125.0/24 maxlen: 24
31.169.127.0/24 maxlen: 24
31.169.126.0/24 maxlen: 24
85.217.128.0/24 maxlen: 24
164.40.186.0/23 maxlen: 24
164.40.184.0/24 maxlen: 24
84.54.50.0/23 maxlen: 24
194.48.249.0/24 maxlen: 24
185.221.66.0/24 maxlen: 24
79.110.49.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.72.0/24 maxlen: 24
94.154.161.0/24 maxlen: 24
94.154.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:da:46:12:9e:d9:e8:3b:26:25:10:17:bf:84:fa:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 7 12:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=859d42e4fa531fbc9a12ea6e531a42d776adc842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:99:ba:83:19:12:18:10:05:da:cc:89:ea:
7e:08:23:c0:c8:0d:13:9b:52:e9:85:32:94:07:3f:
3d:b8:ef:53:84:3e:df:f6:9d:99:c4:6b:11:6e:8f:
b5:63:77:b1:5b:5b:b9:34:75:04:87:4f:1c:49:89:
4b:c8:c7:f1:ca:d5:c9:3c:ba:34:49:c1:b8:5c:5d:
a4:8f:57:47:99:9d:9f:50:5b:1f:af:52:be:91:99:
38:3d:7c:13:05:0b:e7:f2:30:d5:36:5b:85:ef:79:
ef:4c:ca:bb:b8:67:8a:0b:5b:1b:53:c5:9c:ab:3a:
97:83:82:1d:fe:26:bb:3b:dc:71:8e:a1:0b:30:1f:
ff:fa:c5:72:48:49:24:2b:37:b1:6f:0d:d7:1a:ef:
7e:1a:d8:0f:b7:43:1c:41:a0:bc:c6:6f:67:54:d7:
ba:d9:d0:c5:26:7d:93:d6:01:bb:48:5c:a7:1f:46:
a5:01:df:b5:de:57:39:ce:2b:b4:15:1d:6a:5a:27:
d4:dc:9d:f0:c1:ec:54:27:57:85:75:16:5d:9a:00:
e9:98:14:d7:48:59:20:f5:05:31:f3:30:bf:6d:2f:
78:e6:7d:36:74:51:db:15:c9:fa:fc:ae:68:31:d3:
4b:f0:50:94:b1:67:c0:a4:2f:3d:49:a0:80:fb:b2:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:42:E4:FA:53:1F:BC:9A:12:EA:6E:53:1A:42:D7:76:AD:C8:42
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hZ1C5PpTH7yaEupuUxpC13atyEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.124.0/22
79.110.49.0/24
84.54.50.0/23
85.217.128.0/24
94.154.161.0-94.154.163.255
164.40.184.0/24
164.40.186.0/23
185.221.66.0/24
185.225.72.0/24
194.48.249.0/24
194.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a1:5d:a2:62:b2:eb:51:be:6e:9a:8c:a1:55:11:c4:06:77:
8b:43:a3:3e:ea:db:90:db:ac:7e:70:55:a2:fd:50:0a:21:e3:
0c:c4:ed:3b:a5:c8:5a:4e:f9:a6:a2:fd:54:59:7c:e4:d8:c4:
d1:ab:65:c2:99:ae:fb:f2:9c:b2:72:f0:41:3d:1a:3d:68:ee:
76:23:4e:46:0d:c5:28:b5:fc:82:42:f0:65:4f:ef:0e:4b:af:
bc:cd:d7:a3:d7:52:4e:44:0b:f6:97:b4:23:2b:fa:80:eb:1d:
ab:e9:65:2b:84:a5:ed:b8:5d:b7:1f:4f:5d:4a:b4:fa:b4:77:
08:f0:8c:ec:73:85:26:33:03:2c:60:81:57:2a:02:14:a4:26:
85:53:00:d7:fe:c8:22:77:dc:bf:dd:3c:6e:6a:49:94:05:1c:
cc:32:3b:50:53:19:7c:bd:53:91:72:e7:3d:ec:dc:27:01:e7:
70:bd:c8:f2:be:65:d6:b4:29:00:f0:4f:04:44:b5:23:7e:64:
1c:bb:55:4b:cb:ca:ad:66:60:39:9f:e1:8a:ab:eb:07:60:30:
ff:6e:bb:82:db:47:7c:c4:dd:e7:97:fe:28:9c:82:d2:df:4e:
85:2f:20:3d:f0:6a:82:47:6a:a9:03:22:db:b9:8f:02:a7:eb:
25:1c:40:84
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAYMX2kYSntnoOyYlEBe/hPqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjIwOTA3MTIwODQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTlkNDJlNGZhNTMxZmJjOWExMmVhNmU1MzFhNDJkNzc2YWRjODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsOZuoMZEhgQBdrMiep+CCPAyA0T
m1LphTKUBz89uO9ThD7f9p2ZxGsRbo+1Y3exW1u5NHUEh08cSYlLyMfxytXJPLo0
ScG4XF2kj1dHmZ2fUFsfr1K+kZk4PXwTBQvn8jDVNluF73nvTMq7uGeKC1sbU8Wc
qzqXg4Id/ia7O9xxjqELMB//+sVySEkkKzexbw3XGu9+GtgPt0McQaC8xm9nVNe6
2dDFJn2T1gG7SFynH0alAd+13lc5ziu0FR1qWifU3J3wwexUJ1eFdRZdmgDpmBTX
SFkg9QUx8zC/bS945n02dFHbFcn6/K5oMdNL8FCUsWfApC89SaCA+7JtpwIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFIWdQuT6Ux+8mhLqblMaQtd2rchCMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaFoxQzVQcFRIN3lhRXVwdVV4cEMxM2F0eUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCH6l8AwQA
T24xAwQBVDYyAwQAVdmAMAwDBABemqEDBAJemqADBACkKLgDBAGkKLoDBAC53UID
BAC54UgDBADCMPkDBADCtDEwDQYJKoZIhvcNAQELBQADggEBAImhXaJisutRvm6a
jKFVEcQGd4tDoz7q25DbrH5wVaL9UAoh4wzE7TulyFpO+aai/VRZfOTYxNGrZcKZ
rvvynLJy8EE9Gj1o7nYjTkYNxSi1/IJC8GVP7w5Lr7zN16PXUk5EC/aXtCMr+oDr
HavpZSuEpe24XbcfT11KtPq0dwjwjOxzhSYzAyxggVcqAhSkJoVTANf+yCJ33L/d
PG5qSZQFHMwyO1BTGXy9U5Fy5z3s3CcB53C9yPK+Zda0KQDwTwREtSN+ZBy7VUvL
yq1mYDmf4Yqr6wdgMP9uu4LbR3zE3eeX/iicgtLfToUvID3waoJHaqkDItu5jwKn
6yUcQIQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org