Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/h5LV-gsIAa8AMgHwROkOGi5VeKo.roa
File: h5LV-gsIAa8AMgHwROkOGi5VeKo.roa (raw, json)
Hash identifier: tBZ9xJYzwN/m4JzmeRLw5AmvUd0t4fUdrw217ILBSsA=
Subject key identifier: 87:92:D5:FA:0B:08:01:AF:00:32:01:F0:44:E9:0E:1A:2E:55:78:AA
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 0B2EB27A
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/h5LV-gsIAa8AMgHwROkOGi5VeKo.roa
Signing time: Sat 01 Jan 2022 06:59:32 +0000
ROA not before: Sat 01 Jan 2022 06:59:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30935
IP address blocks: 185.253.204.0/22 maxlen: 24
193.16.220.0/24 maxlen: 24
91.223.186.0/24 maxlen: 24
2a0c:40c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187609722 (0xb2eb27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Jan 1 06:59:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8792d5fa0b0801af003201f044e90e1a2e5578aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:82:93:36:b3:19:b1:9b:5a:b1:a7:0f:29:
3b:02:fd:dd:c5:9b:ef:b5:d5:61:8f:05:ca:54:ae:
b0:77:d4:55:0b:d7:05:6c:0b:1b:af:11:a8:53:7d:
30:03:13:27:a1:a3:48:55:cc:d2:b2:e6:d3:b7:1a:
ea:e0:1c:c4:2d:69:56:33:a6:40:f6:17:3f:53:02:
da:f5:f9:bf:8f:bc:1d:35:f8:ae:98:db:a7:a4:af:
90:04:3c:5b:33:2d:6c:75:e7:d8:f2:cc:c5:1d:ba:
1d:71:79:28:6c:bb:49:a1:9d:ba:da:d1:7c:3e:1b:
17:bf:3b:e7:ae:0d:2c:48:c9:25:4e:be:3f:ff:92:
ce:54:ec:09:c0:77:c6:6a:b3:73:c4:5d:25:52:ea:
fe:79:59:68:f7:71:13:b8:d0:46:cc:de:ee:8b:0f:
e1:2d:c2:eb:5f:ea:b7:b9:29:41:7c:2b:d9:b9:53:
e6:8d:2e:e8:0c:2f:86:5a:8a:0e:11:9f:37:00:5e:
49:41:03:03:5b:13:bb:b2:d6:cb:09:51:41:d8:c2:
45:eb:c0:ca:92:86:9f:cf:02:56:1e:96:05:d1:4c:
19:58:a8:8c:32:30:eb:bc:85:3a:34:d6:2a:b1:b5:
d0:14:4a:ce:a3:62:97:94:79:f5:8f:a0:d1:44:33:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:92:D5:FA:0B:08:01:AF:00:32:01:F0:44:E9:0E:1A:2E:55:78:AA
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/h5LV-gsIAa8AMgHwROkOGi5VeKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.186.0/24
185.253.204.0/22
193.16.220.0/24
IPv6:
2a0c:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:71:af:c6:cd:46:6f:bc:9a:d0:2d:18:c4:a9:ea:f6:1e:b3:
bc:f8:6a:9e:a5:a5:82:b4:ce:0a:fc:f9:ad:57:60:01:24:4b:
33:b0:32:c0:c3:69:1d:ab:6d:c0:50:c5:db:1e:72:41:dd:d1:
ba:a8:17:c8:e0:90:92:ab:51:94:5f:1b:1a:b6:ca:b1:ae:46:
ab:7d:57:b5:8e:66:32:df:12:8c:23:5b:3d:42:5c:2b:24:84:
67:9d:f6:cf:db:e9:78:0e:b0:73:6f:a6:e6:3c:39:72:8a:b1:
ad:b0:43:ab:43:f8:65:ad:00:25:96:78:31:30:80:df:53:30:
5e:d6:bb:90:8d:45:f4:69:53:6f:51:e7:42:94:db:af:21:a4:
bf:d8:0e:d3:b0:78:4b:6d:78:97:ff:7a:23:3a:52:5d:35:8b:
9d:71:f1:f6:0c:ae:a7:14:ab:bd:c5:fd:82:5e:9b:2c:88:4c:
e4:64:66:49:eb:db:1a:25:ab:b2:76:23:6f:5f:87:8c:a3:54:
98:9b:3c:6c:6e:67:4b:c6:2b:ce:4b:1a:32:30:42:9a:04:66:
ff:e6:47:d9:f1:85:f1:4c:ec:57:5d:2a:90:0f:0f:f3:b4:11:
7e:d5:3b:d7:03:63:92:23:cf:da:66:3b:0d:de:61:e6:bf:39:
d3:35:99:23
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIECy6yejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ODVlM2VlMWMzMjU4MTc1ZjRmZjZkOWI1NTlkYTU0YzgzZWMwYjRmMB4XDTIyMDEw
MTA2NTkzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODc5MmQ1ZmEwYjA4
MDFhZjAwMzIwMWYwNDRlOTBlMWEyZTU1NzhhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJKygpM2sxmxm1qxpw8pOwL93cWb77XVYY8FylSusHfUVQvX
BWwLG68RqFN9MAMTJ6GjSFXM0rLm07ca6uAcxC1pVjOmQPYXP1MC2vX5v4+8HTX4
rpjbp6SvkAQ8WzMtbHXn2PLMxR26HXF5KGy7SaGdutrRfD4bF787564NLEjJJU6+
P/+SzlTsCcB3xmqzc8RdJVLq/nlZaPdxE7jQRsze7osP4S3C61/qt7kpQXwr2blT
5o0u6AwvhlqKDhGfNwBeSUEDA1sTu7LWywlRQdjCRevAypKGn88CVh6WBdFMGVio
jDIw67yFOjTWKrG10BRKzqNil5R59Y+g0UQzREMCAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBSHktX6CwgBrwAyAfBE6Q4aLlV4qjAfBgNVHSMEGDAWgBRIXj7hwyWBdfT/
bZtVnaVMg+wLTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NGNC00Y01sZ1hYMF8yMmJWWjJsVElQc0MwOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvOTZkMDIyLWVlMDItNDQ3Yy1hMzQ5LTljOTMzY2NkMTZjNy8x
L2g1TFYtZ3NJQWE4QU1nSHdST2tPR2k1VmVLby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
OTZkMDIyLWVlMDItNDQ3Yy1hMzQ5LTljOTMzY2NkMTZjNy8xL1NGNC00Y01sZ1hY
MF8yMmJWWjJsVElQc0MwOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAFvfugMEArn9zAMEAMEQ3DANBAIA
AjAHAwUDKgxAwDANBgkqhkiG9w0BAQsFAAOCAQEACnGvxs1Gb7ya0C0YxKnq9h6z
vPhqnqWlgrTOCvz5rVdgASRLM7AywMNpHattwFDF2x5yQd3RuqgXyOCQkqtRlF8b
GrbKsa5Gq31XtY5mMt8SjCNbPUJcKySEZ532z9vpeA6wc2+m5jw5coqxrbBDq0P4
Za0AJZZ4MTCA31MwXta7kI1F9GlTb1HnQpTbryGkv9gO07B4S214l/96IzpSXTWL
nXHx9gyupxSrvcX9gl6bLIhM5GRmSevbGiWrsnYjb1+HjKNUmJs8bG5nS8Yrzksa
MjBCmgRm/+ZH2fGF8UzsV10qkA8P87QRftU71wNjkiPP2mY7Dd5h5r850zWZIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:54 2024 by rpki-client on console-fra.rpki-client.org