Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/hQT-4vxLqtDlEu9p2DSCb5y99d4.roa
File: hQT-4vxLqtDlEu9p2DSCb5y99d4.roa (raw, json)
Hash identifier: T46IPwnSdh1mmdnwOi8ptCn3scJNmB8OFLiGi9eOO2A=
Subject key identifier: 85:04:FE:E2:FC:4B:AA:D0:E5:12:EF:69:D8:34:82:6F:9C:BD:F5:DE
Certificate issuer: /CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Certificate serial: 0B90D233
Authority key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/hQT-4vxLqtDlEu9p2DSCb5y99d4.roa
Signing time: Tue 19 Apr 2022 22:28:52 +0000
ROA not before: Tue 19 Apr 2022 22:28:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51559
IP address blocks: 185.83.147.0/24 maxlen: 24
185.83.146.0/24 maxlen: 24
185.83.144.0/24 maxlen: 24
185.83.145.0/24 maxlen: 24
185.174.30.0/24 maxlen: 24
185.174.29.0/24 maxlen: 24
185.174.28.0/24 maxlen: 24
2a0b:8100:9::/48 maxlen: 48
2a0b:8100:4::/48 maxlen: 48
2a0b:8100:e::/48 maxlen: 48
2a0b:8100:1::/48 maxlen: 48
2a0b:8100::/29 maxlen: 29
2a0b:8100:b::/48 maxlen: 48
2a0b:8100:6::/48 maxlen: 48
2a0b:8100:f::/48 maxlen: 48
2a0b:8100:a::/48 maxlen: 48
2a0b:8100:d::/48 maxlen: 48
2a0b:8100:8::/48 maxlen: 48
2a0b:8100:3::/48 maxlen: 48
2a0b:8100:c::/48 maxlen: 48
2a0b:8100:7::/48 maxlen: 48
2a0b:8100:2::/48 maxlen: 48
2a0b:8100:5::/48 maxlen: 48
2a0b:8100::/48 maxlen: 48
2a0b:8100:20a7:585b::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194040371 (0xb90d233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Validity
Not Before: Apr 19 22:28:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8504fee2fc4baad0e512ef69d834826f9cbdf5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:64:2a:bc:91:77:49:f3:09:e3:17:96:d4:95:
2d:2c:2b:fd:4d:52:ec:c6:12:f9:ac:f2:86:b2:c4:
00:84:f4:3d:f6:70:41:f0:a9:89:47:0e:9d:22:84:
5e:55:e0:e2:7f:72:2c:5d:62:70:87:9b:70:fb:dd:
af:9b:f1:05:54:46:54:d6:7a:f8:2b:9b:f2:ee:f7:
49:ec:4c:36:1f:92:71:e2:a6:86:da:16:07:73:a4:
b5:6e:34:ed:21:66:d7:67:ec:a4:98:55:87:52:5a:
33:f4:35:3f:82:c0:7b:63:92:20:b2:38:2b:42:e1:
6f:b1:6e:07:98:dd:0f:87:74:cd:de:f5:db:28:fe:
ed:1a:6b:11:36:69:bb:08:07:65:c0:5f:00:c8:f3:
24:64:75:2b:2f:bd:b4:f2:52:0c:09:46:eb:9c:1d:
9b:37:11:83:84:92:c6:31:f9:a0:58:d3:81:77:e2:
ce:ac:af:95:ef:4c:5c:3c:f1:98:af:d3:49:e5:0a:
c3:a3:9b:8e:68:9d:17:bc:04:1a:ad:16:f4:b7:41:
b6:a7:47:d6:11:23:6f:11:71:9d:40:18:ca:2d:fa:
31:3c:e4:93:a9:43:25:22:ec:a1:7c:91:5c:16:bf:
7b:45:e5:fd:ad:0f:a0:22:ce:a2:1c:19:b9:0e:f5:
37:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:FE:E2:FC:4B:AA:D0:E5:12:EF:69:D8:34:82:6F:9C:BD:F5:DE
X509v3 Authority Key Identifier:
keyid:9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/hQT-4vxLqtDlEu9p2DSCb5y99d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.144.0/22
185.174.28.0-185.174.30.255
IPv6:
2a0b:8100::/29
Signature Algorithm: sha256WithRSAEncryption
8e:c3:4a:cb:27:fc:97:14:71:34:41:3a:e3:85:c5:1f:8f:11:
40:55:4b:05:29:66:d4:2f:b6:cf:63:de:a1:96:f9:fc:17:a6:
db:be:97:c4:ae:a3:70:fd:04:c8:13:b5:f4:4d:11:7e:41:16:
d4:77:12:a3:68:cc:96:67:e7:e9:62:92:41:d1:14:c0:c0:1b:
8c:b3:cf:b8:5c:71:fb:e8:31:07:a0:09:41:c2:cd:1d:0c:d3:
00:fd:14:61:c4:38:52:1a:30:29:01:51:f0:6e:06:ae:e8:f4:
93:5c:09:ea:09:2f:e0:d0:0d:d3:c9:e4:9d:17:0a:03:00:41:
ac:81:7f:c6:55:e2:90:97:cf:8b:84:87:71:3e:29:cd:1d:dd:
ad:d8:2c:cf:5e:d8:03:4b:80:29:78:e4:44:d6:1b:41:9d:4e:
e4:4f:cc:a6:16:9f:14:60:e9:9c:5c:5c:06:56:b2:ae:63:f0:
35:a7:80:80:ab:99:32:27:4f:02:ab:11:ad:70:27:d8:95:30:
fe:91:bd:b6:16:97:fa:da:bf:0b:90:71:19:b6:bf:f2:d1:2a:
f5:62:dc:59:a0:e6:5a:9e:03:d5:cd:66:50:d6:20:9c:36:ed:
80:c6:95:3e:47:24:ce:3b:b7:3a:ad:96:65:5d:5b:fe:fe:64:
2a:06:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org