Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hc1QuDTt_3xAdFtj-kbTihopqPU.roa
File: hc1QuDTt_3xAdFtj-kbTihopqPU.roa (raw, json)
Hash identifier: KeKG0gZDMNN08viofyxtDqD+BuBoYOWYL5G6CrDum2I=
Subject key identifier: 85:CD:50:B8:34:ED:FF:7C:40:74:5B:63:FA:46:D3:8A:1A:29:A8:F5
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018391ADC7BF630CD9ED1A727DFA44B31051
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hc1QuDTt_3xAdFtj-kbTihopqPU.roa
Signing time: Sat 01 Oct 2022 03:53:48 +0000
ROA not before: Sat 01 Oct 2022 03:53:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395092
IP address blocks: 217.195.152.0/22 maxlen: 22
213.108.246.0/23 maxlen: 23
45.146.220.0/22 maxlen: 22
45.155.36.0/22 maxlen: 22
2a0d:9ec0::/48 maxlen: 48
2a0d:d8c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:91:ad:c7:bf:63:0c:d9:ed:1a:72:7d:fa:44:b3:10:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Oct 1 03:53:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85cd50b834edff7c40745b63fa46d38a1a29a8f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:79:41:a0:e3:25:dd:3b:c7:18:aa:52:04:
62:f8:51:63:99:25:9b:2c:e2:94:4f:42:d9:b8:f8:
80:74:1c:15:c2:54:cd:0a:73:55:93:aa:f2:83:31:
1b:c1:d9:5d:47:25:d2:8b:23:a5:0f:e9:ee:cf:08:
f3:ba:62:74:e3:d1:4b:45:a9:f0:8f:d7:32:99:5d:
60:bf:21:8d:c6:a1:8c:6d:8f:66:9d:bf:ce:04:2b:
03:ed:d4:f4:99:53:f1:22:9f:22:6d:b3:b2:de:29:
64:91:b3:5b:c1:8d:17:b0:d7:02:c8:e6:55:97:68:
b0:1b:9a:f7:93:55:4e:28:91:56:13:9b:1a:ec:b9:
30:f7:a4:86:fb:2b:b1:bc:0b:44:16:d8:4f:0e:29:
c9:a9:8c:aa:86:8f:ef:11:56:ee:39:39:58:aa:6a:
1e:e5:6c:b4:cf:37:af:d0:b1:b9:b3:4e:1e:ed:21:
84:1c:49:fa:d8:29:2f:15:00:11:28:22:e1:f8:49:
45:56:9a:e7:c4:f8:f1:d0:e9:ba:c1:e8:a2:6d:80:
fb:21:b9:14:99:05:6c:c0:41:13:00:e0:27:7d:c3:
ed:ae:18:da:66:1f:8a:b8:ec:6b:f8:7e:08:3f:35:
8c:40:74:01:f3:79:a5:12:d2:11:43:b3:58:22:6c:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CD:50:B8:34:ED:FF:7C:40:74:5B:63:FA:46:D3:8A:1A:29:A8:F5
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hc1QuDTt_3xAdFtj-kbTihopqPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.220.0/22
45.155.36.0/22
213.108.246.0/23
217.195.152.0/22
IPv6:
2a0d:9ec0::/48
2a0d:d8c0::/48
Signature Algorithm: sha256WithRSAEncryption
32:5e:c7:4a:14:24:3d:b6:21:ae:1b:82:9d:04:81:27:db:9a:
fd:b0:0d:d1:73:df:55:1c:ac:bc:22:9b:35:9e:cb:0a:2c:e9:
97:28:ce:4d:ff:e6:08:91:25:cc:d5:41:e9:b9:8e:27:d3:47:
fc:91:b8:25:e5:7f:c1:3c:30:8d:5f:50:aa:63:a8:54:9c:94:
77:32:36:c9:be:96:d6:aa:e1:82:48:5d:36:cb:a7:92:d7:e8:
b1:08:b0:19:89:e4:1c:57:a7:6b:28:30:71:d1:d7:0c:63:82:
85:6e:32:45:71:d2:49:71:53:33:2a:14:c7:78:7e:4c:76:6a:
30:5e:90:10:68:b2:10:be:72:50:e8:21:de:cf:48:a6:b8:11:
61:84:b0:e6:b1:58:10:91:4c:36:21:1d:b5:ca:d7:b4:14:2d:
75:2e:dc:27:bc:1b:d5:d4:10:0b:4c:9d:65:e1:7e:70:98:7e:
ce:61:23:8e:51:e0:b3:19:0d:2d:83:d6:e4:5e:7a:ea:30:bd:
3b:54:a5:89:38:97:49:6d:bc:19:07:bf:be:12:29:d1:ae:db:
75:31:32:b2:09:7f:ea:ca:1d:42:c9:bd:8d:70:fb:c2:65:f3:
69:6a:54:8e:2e:dc:8d:0d:d4:e5:dd:09:f0:4f:21:4d:8c:6a:
4c:c2:50:5d
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYORrce/YwzZ7RpyffpEsxBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjIxMDAxMDM1MzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWNkNTBiODM0ZWRmZjdjNDA3NDViNjNmYTQ2ZDM4YTFhMjlhOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmV5QaDjJd07xxiqUgRi+FFjmSWb
LOKUT0LZuPiAdBwVwlTNCnNVk6rygzEbwdldRyXSiyOlD+nuzwjzumJ049FLRanw
j9cymV1gvyGNxqGMbY9mnb/OBCsD7dT0mVPxIp8ibbOy3ilkkbNbwY0XsNcCyOZV
l2iwG5r3k1VOKJFWE5sa7Lkw96SG+yuxvAtEFthPDinJqYyqho/vEVbuOTlYqmoe
5Wy0zzev0LG5s04e7SGEHEn62CkvFQARKCLh+ElFVprnxPjx0Om6weiibYD7IbkU
mQVswEETAOAnfcPtrhjaZh+KuOxr+H4IPzWMQHQB83mlEtIRQ7NYImwQXwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFIXNULg07f98QHRbY/pG04oaKaj1MB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvaGMxUXVEVHRfM3hBZEZ0ai1rYlRpaG9wcVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQCLZLcAwQC
LZskAwQB1Wz2AwQC2cOYMBgEAgACMBIDBwAqDZ7AAAADBwAqDdjAAAAwDQYJKoZI
hvcNAQELBQADggEBADJex0oUJD22Ia4bgp0EgSfbmv2wDdFz31UcrLwimzWeywos
6Zcozk3/5giRJczVQem5jifTR/yRuCXlf8E8MI1fUKpjqFSclHcyNsm+ltaq4YJI
XTbLp5LX6LEIsBmJ5BxXp2soMHHR1wxjgoVuMkVx0klxUzMqFMd4fkx2ajBekBBo
shC+clDoId7PSKa4EWGEsOaxWBCRTDYhHbXK17QULXUu3Ce8G9XUEAtMnWXhfnCY
fs5hI45R4LMZDS2D1uReeuowvTtUpYk4l0ltvBkHv74SKdGu23UxMrIJf+rKHULJ
vY1w+8Jl82lqVI4u3I0N1OXdCfBPIU2MakzCUF0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org