Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/H_tDnwlo8wIxc35Aymzc2SOKQOE.roa
File: H_tDnwlo8wIxc35Aymzc2SOKQOE.roa (raw, json)
Hash identifier: D3bDrO2cq78uyDAysVfgopZKK7/uBlZnQzQg7j8Z6jo=
Subject key identifier: 1F:FB:43:9F:09:68:F3:02:31:73:7E:40:CA:6C:DC:D9:23:8A:40:E1
Certificate issuer: /CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Certificate serial: 073C6DEC
Authority key identifier: CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/H_tDnwlo8wIxc35Aymzc2SOKQOE.roa
Signing time: Sat 01 Jan 2022 16:04:08 +0000
ROA not before: Sat 01 Jan 2022 16:04:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205500
IP address blocks: 45.152.168.0/22 maxlen: 22
185.216.16.0/22 maxlen: 22
2a0f:5000::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121400812 (0x73c6dec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc110bef9c5b96a831c7abf95592744bbaf1ee67
Validity
Not Before: Jan 1 16:04:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ffb439f0968f30231737e40ca6cdcd9238a40e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:de:05:14:62:13:53:db:42:7e:39:b1:1d:
88:c6:8b:21:e8:e2:10:e2:ce:69:51:d1:b3:a2:2f:
73:15:77:77:93:f7:c3:4a:94:cc:ef:77:e2:8e:e6:
de:fa:8c:43:e9:94:37:d4:a2:f9:16:3d:38:bd:87:
eb:70:a2:21:53:49:d0:85:f4:03:04:da:1b:a5:ac:
90:fe:9a:97:ac:bf:96:ba:c1:31:32:8a:b2:a2:c7:
5f:8a:9c:2c:11:21:a7:79:bd:9b:b9:e4:00:23:52:
96:00:e1:e5:1a:6d:07:40:3e:4b:37:62:66:52:03:
e5:b4:87:44:1a:11:9c:31:44:9b:1f:db:dd:9d:f5:
90:a9:49:08:06:09:2f:99:b1:7c:af:c2:e6:33:5a:
ba:59:e5:c3:94:ba:40:6c:8c:d6:72:1c:dc:06:3f:
9f:a2:cf:73:36:dc:62:64:38:f6:8c:fb:57:9d:f6:
e3:f0:2d:b0:e1:50:ee:ea:8c:c8:5f:12:49:68:1a:
64:3e:fa:58:ce:0c:99:fd:79:ab:1c:45:69:3a:30:
c4:50:b5:7a:52:5f:67:6d:81:f4:45:cd:82:63:39:
ac:55:2a:61:f9:26:ca:cf:af:6b:51:36:49:54:d0:
ea:fd:8f:6a:ed:7b:41:5a:ce:fb:70:9f:51:7c:22:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FB:43:9F:09:68:F3:02:31:73:7E:40:CA:6C:DC:D9:23:8A:40:E1
X509v3 Authority Key Identifier:
keyid:CC:11:0B:EF:9C:5B:96:A8:31:C7:AB:F9:55:92:74:4B:BA:F1:EE:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBEL75xblqgxx6v5VZJ0S7rx7mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/H_tDnwlo8wIxc35Aymzc2SOKQOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/529be9-1fcf-46a3-b13d-c8acb7173b62/1/zBEL75xblqgxx6v5VZJ0S7rx7mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.168.0/22
185.216.16.0/22
IPv6:
2a0f:5000::/29
Signature Algorithm: sha256WithRSAEncryption
0a:44:83:e4:5c:1d:c1:ab:eb:14:7a:50:71:1a:f6:ae:3f:48:
61:1d:f3:4f:c9:4b:96:69:7d:55:21:7d:8f:c0:41:fa:3d:5a:
fe:6f:38:ed:01:f6:58:ab:b2:c7:3f:3b:f5:d0:ee:27:1e:df:
cf:ef:13:cc:6a:01:30:a7:fa:cb:0d:35:7f:92:b9:26:0d:a1:
8c:df:6e:50:96:ed:34:b4:87:20:a8:a9:b2:9c:ab:0b:9e:75:
f8:e4:5c:ef:a6:39:3b:08:cd:26:5a:19:5a:b4:0a:31:9a:c4:
e7:22:66:d7:71:b1:8e:84:88:a2:ba:99:db:f2:5c:0b:52:51:
5f:d2:a0:e9:18:50:b8:f4:5c:12:cd:62:e6:b1:36:a8:52:a8:
ef:94:30:f3:33:e0:e6:4a:9d:a0:07:7f:a9:81:8f:63:6d:3c:
d6:a9:9e:3c:c1:96:4c:f7:93:b6:b8:2a:5b:b4:3c:2e:4f:9f:
06:46:ef:9e:c3:e3:35:9c:64:a1:fb:ed:1e:9c:13:9e:99:cd:
f4:81:db:63:11:7f:7d:42:e2:91:73:60:14:d6:5f:47:c3:44:
ed:a6:5d:e4:d0:93:3a:d5:8f:a0:85:82:af:59:a5:c2:de:db:
1b:a9:d5:83:37:f7:10:1c:7f:56:fb:b4:65:99:85:35:7a:5c:
33:49:eb:79
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEBzxt7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YzExMGJlZjljNWI5NmE4MzFjN2FiZjk1NTkyNzQ0YmJhZjFlZTY3MB4XDTIyMDEw
MTE2MDQwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWZmYjQzOWYwOTY4
ZjMwMjMxNzM3ZTQwY2E2Y2RjZDkyMzhhNDBlMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMDK3gUUYhNT20J+ObEdiMaLIejiEOLOaVHRs6IvcxV3d5P3
w0qUzO934o7m3vqMQ+mUN9Si+RY9OL2H63CiIVNJ0IX0AwTaG6WskP6al6y/lrrB
MTKKsqLHX4qcLBEhp3m9m7nkACNSlgDh5RptB0A+SzdiZlID5bSHRBoRnDFEmx/b
3Z31kKlJCAYJL5mxfK/C5jNaulnlw5S6QGyM1nIc3AY/n6LPczbcYmQ49oz7V532
4/AtsOFQ7uqMyF8SSWgaZD76WM4Mmf15qxxFaTowxFC1elJfZ22B9EXNgmM5rFUq
Yfkmys+va1E2SVTQ6v2Pau17QVrO+3CfUXwiSEkCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQf+0OfCWjzAjFzfkDKbNzZI4pA4TAfBgNVHSMEGDAWgBTMEQvvnFuWqDHH
q/lVknRLuvHuZzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pCRUw3NXhibHFneHg2djVWWkowUzdyeDdtYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDYvNTI5YmU5LTFmY2YtNDZhMy1iMTNkLWM4YWNiNzE3M2I2Mi8x
L0hfdERud2xvOHdJeGMzNUF5bXpjMlNPS1FPRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYv
NTI5YmU5LTFmY2YtNDZhMy1iMTNkLWM4YWNiNzE3M2I2Mi8xL3pCRUw3NXhibHFn
eHg2djVWWkowUzdyeDdtYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAi2YqAMEArnYEDANBAIAAjAHAwUD
Kg9QADANBgkqhkiG9w0BAQsFAAOCAQEACkSD5FwdwavrFHpQcRr2rj9IYR3zT8lL
lml9VSF9j8BB+j1a/m847QH2WKuyxz879dDuJx7fz+8TzGoBMKf6yw01f5K5Jg2h
jN9uUJbtNLSHIKipspyrC551+ORc76Y5OwjNJloZWrQKMZrE5yJm13GxjoSIorqZ
2/JcC1JRX9Kg6RhQuPRcEs1i5rE2qFKo75Qw8zPg5kqdoAd/qYGPY2081qmePMGW
TPeTtrgqW7Q8Lk+fBkbvnsPjNZxkofvtHpwTnpnN9IHbYxF/fULikXNgFNZfR8NE
7aZd5NCTOtWPoIWCr1mlwt7bG6nVgzf3EBx/Vvu0ZZmFNXpcM0nreQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:33 2025 by rpki-client