Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-Htg12Lg5dzE0RY7IuVRKJhR-2k.roa
File: 1-Htg12Lg5dzE0RY7IuVRKJhR-2k.roa (raw, json)
Hash identifier: JpezhK+6ma5I4unPgMDr6ixv053vvCHMTO3segccja8=
Subject key identifier: F8:7B:60:D7:62:E0:E5:DC:C4:D1:16:3B:22:E5:51:28:98:51:FB:69
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 0183E60EC838BFC54EC2888FA0F0A9360DB4
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-Htg12Lg5dzE0RY7IuVRKJhR-2k.roa
Signing time: Mon 17 Oct 2022 13:07:51 +0000
ROA not before: Mon 17 Oct 2022 13:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 89.43.42.0/24 maxlen: 24
89.43.43.0/24 maxlen: 24
89.43.44.0/24 maxlen: 24
89.43.40.0/24 maxlen: 24
89.43.41.0/24 maxlen: 24
89.43.45.0/24 maxlen: 24
89.43.46.0/24 maxlen: 24
89.43.73.0/24 maxlen: 24
89.39.252.0/24 maxlen: 24
188.213.18.0/24 maxlen: 24
188.240.14.0/24 maxlen: 24
93.113.202.0/24 maxlen: 24
93.114.99.0/24 maxlen: 24
89.33.163.0/24 maxlen: 24
89.45.34.0/24 maxlen: 24
93.114.55.0/24 maxlen: 24
188.215.72.0/23 maxlen: 24
188.215.73.0/24 maxlen: 24
93.114.187.0/24 maxlen: 24
86.106.80.0/24 maxlen: 24
86.106.104.0/24 maxlen: 24
89.34.8.0/21 maxlen: 21
93.114.171.0/24 maxlen: 24
85.204.125.0/24 maxlen: 24
85.204.127.0/24 maxlen: 24
93.113.158.0/24 maxlen: 24
89.37.136.0/24 maxlen: 24
85.204.78.0/24 maxlen: 24
2a05:b680:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:0e:c8:38:bf:c5:4e:c2:88:8f:a0:f0:a9:36:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Oct 17 13:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f87b60d762e0e5dcc4d1163b22e551289851fb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:93:21:b6:5b:d6:8a:ea:8b:76:80:fe:0c:ab:
4d:16:b9:3c:d2:20:c5:e2:e6:d5:a7:1e:cf:a6:33:
93:7c:f5:4e:fc:47:74:21:dc:a3:e1:8c:b3:26:86:
78:0b:2f:66:bd:0b:60:8b:f4:aa:3c:27:09:e4:c3:
00:0f:2a:e5:f7:97:49:9a:31:bf:ad:69:6f:d9:16:
77:2d:b2:23:8c:70:a1:5d:9c:d6:5a:80:cb:4d:cc:
9a:8a:50:39:61:36:ef:74:60:e5:05:08:d2:86:02:
ad:a5:3c:90:b0:b7:07:2c:92:36:38:3b:04:68:33:
a9:fb:dc:0c:b6:4e:46:78:6d:4f:c1:da:e8:6a:98:
bf:a3:01:24:46:c2:5a:15:6c:01:13:fa:b7:b1:2c:
ee:20:a8:6b:b6:3d:6c:83:8e:27:c9:5a:08:2b:42:
b9:41:5d:c9:a4:83:bf:65:ae:63:dd:19:8b:70:9e:
af:78:9f:7c:6d:13:51:f2:1d:04:24:c1:4d:8f:af:
2a:14:d0:73:6e:ef:2a:e2:c7:0b:86:f2:28:9a:51:
55:46:d0:5d:50:7e:45:ec:fe:94:b3:2e:f7:74:e0:
d4:49:c6:6e:72:87:c0:29:fb:69:b0:50:2d:b7:6f:
e7:a9:b6:99:ae:d2:10:f3:32:c4:bc:37:3c:95:5c:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:60:D7:62:E0:E5:DC:C4:D1:16:3B:22:E5:51:28:98:51:FB:69
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/1-Htg12Lg5dzE0RY7IuVRKJhR-2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
85.204.125.0/24
85.204.127.0/24
86.106.80.0/24
86.106.104.0/24
89.33.163.0/24
89.34.8.0/21
89.37.136.0/24
89.39.252.0/24
89.43.40.0-89.43.46.255
89.43.73.0/24
89.45.34.0/24
93.113.158.0/24
93.113.202.0/24
93.114.55.0/24
93.114.99.0/24
93.114.171.0/24
93.114.187.0/24
188.213.18.0/24
188.215.72.0/23
188.240.14.0/24
IPv6:
2a05:b680:1::/48
Signature Algorithm: sha256WithRSAEncryption
6f:96:24:f1:fc:ab:60:3c:11:80:19:73:51:e1:f6:19:bb:40:
5d:95:5e:a7:b7:98:26:d4:b3:a1:e1:b9:16:bb:60:b6:56:3c:
26:5b:a0:ab:de:30:e7:9b:4d:e4:66:b2:43:d8:e8:e3:87:db:
0f:81:fa:bc:fd:1e:ca:ea:00:5a:f1:38:68:34:c3:72:36:98:
48:df:96:86:d1:21:de:e5:22:42:3a:08:1c:cd:c5:90:68:4d:
a6:1f:be:44:34:ce:65:fe:55:4d:45:c6:eb:6e:b0:f5:1f:29:
41:e7:4b:57:8d:db:75:8a:9a:47:1f:ae:a4:af:7d:e3:4f:83:
b2:cd:7f:99:cc:f0:fc:c0:b0:df:a0:f5:d8:62:b2:a4:17:a0:
7c:c8:99:d9:08:a6:26:71:a6:b6:8c:9a:8d:bb:fa:57:ed:d6:
eb:95:80:9c:19:4b:28:a9:1f:e6:30:fe:dc:9b:5a:22:75:76:
2d:1a:9a:cb:24:30:91:30:dd:fd:c2:f0:2c:cb:5d:22:2e:4e:
9e:24:e2:31:aa:55:74:90:50:4e:12:58:c2:c5:db:5e:c1:7b:
ab:b8:a1:5d:28:dc:5b:80:cc:05:f3:c5:d2:25:74:cc:15:f8:
8d:cd:4f:5d:7a:d7:0a:43:a9:d2:7d:71:4c:b1:6c:7e:0e:44:
5b:c9:3f:5d
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYPmDsg4v8VOwoiPoPCpNg20MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5
M2FlYjkwHhcNMjIxMDE3MTMwNzUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODdiNjBkNzYyZTBlNWRjYzRkMTE2M2IyMmU1NTEyODk4NTFmYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5MhtlvWiuqLdoD+DKtNFrk80iDF
4ubVpx7PpjOTfPVO/Ed0Idyj4YyzJoZ4Cy9mvQtgi/SqPCcJ5MMADyrl95dJmjG/
rWlv2RZ3LbIjjHChXZzWWoDLTcyailA5YTbvdGDlBQjShgKtpTyQsLcHLJI2ODsE
aDOp+9wMtk5GeG1Pwdroapi/owEkRsJaFWwBE/q3sSzuIKhrtj1sg44nyVoIK0K5
QV3JpIO/Za5j3RmLcJ6veJ98bRNR8h0EJMFNj68qFNBzbu8q4scLhvIomlFVRtBd
UH5F7P6Usy73dODUScZucofAKftpsFAtt2/nqbaZrtIQ8zLEvDc8lVw+MQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPh7YNdi4OXcxNEWOyLlUSiYUftpMB8GA1UdIwQY
MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt
NWQ0OGI2NWNlNTczLzEvMS1IdGcxMkxnNWR6RTBSWTdJdVZSS0poUi0yay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvYjI2YWE4LWFjZTctNGZhNi05ZThlLTVkNDhiNjVjZTU3
My8xL19saVZMVGs1TmZEVHZPZ1VfWkY0MEVhVHJyay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBtAYIKwYBBQUHAQcBAf8EgaQwgaEwgY0EAgABMIGGAwQA
VcxOAwQAVcx9AwQAVcx/AwQAVmpQAwQAVmpoAwQAWSGjAwQDWSIIAwQAWSWIAwQA
WSf8MAwDBANZKygDBABZKy4DBABZK0kDBABZLSIDBABdcZ4DBABdccoDBABdcjcD
BABdcmMDBABdcqsDBABdcrsDBAC81RIDBAG810gDBAC88A4wDwQCAAIwCQMHACoF
toAAATANBgkqhkiG9w0BAQsFAAOCAQEAb5Yk8fyrYDwRgBlzUeH2GbtAXZVep7eY
JtSzoeG5FrtgtlY8Jlugq94w55tN5GayQ9jo44fbD4H6vP0eyuoAWvE4aDTDcjaY
SN+WhtEh3uUiQjoIHM3FkGhNph++RDTOZf5VTUXG626w9R8pQedLV43bdYqaRx+u
pK9940+Dss1/mczw/MCw36D12GKypBegfMiZ2QimJnGmtoyajbv6V+3W65WAnBlL
KKkf5jD+3JtaInV2LRqayyQwkTDd/cLwLMtdIi5OniTiMapVdJBQThJYwsXbXsF7
q7ihXSjcW4DMBfPF0iV0zBX4jc1PXXrXCkOp0n1xTLFsfg5EW8k/XQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org