Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/HsCBhkXpQPYCw4LRKiAfJuYmDws.roa
File: HsCBhkXpQPYCw4LRKiAfJuYmDws.roa (raw, json)
Hash identifier: FVvK69+fOIGy8ZE79S4umOIRCI6BISyizpZEC8NLtLY=
Subject key identifier: 1E:C0:81:86:45:E9:40:F6:02:C3:82:D1:2A:20:1F:26:E6:26:0F:0B
Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Certificate serial: 01889F5BE6673B74401C2E057B40A2F21D77
Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/HsCBhkXpQPYCw4LRKiAfJuYmDws.roa
Signing time: Fri 09 Jun 2023 08:53:00 +0000
ROA not before: Fri 09 Jun 2023 08:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 212.113.120.0/24 maxlen: 24
212.113.121.0/24 maxlen: 24
212.113.122.0/24 maxlen: 24
212.113.123.0/24 maxlen: 24
212.113.117.0/24 maxlen: 24
212.113.118.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:5b:e6:67:3b:74:40:1c:2e:05:7b:40:a2:f2:1d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29
Validity
Not Before: Jun 9 08:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ec0818645e940f602c382d12a201f26e6260f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:bc:43:2b:c6:dd:3e:fb:33:c5:38:e5:79:
98:5f:5b:ec:9f:ac:7d:a7:17:fa:55:78:e6:2c:6b:
e4:7b:e8:f2:7f:1a:93:6b:ba:1a:47:f3:39:fe:cc:
a6:7c:ba:03:40:4c:77:35:83:99:47:df:42:49:93:
0a:c8:18:32:a5:93:20:d1:79:3c:49:49:56:4b:34:
ba:97:44:a6:80:60:d0:f7:90:14:c2:ac:4b:f0:c3:
b2:80:9c:f0:84:2f:34:7d:e5:c5:fb:ff:85:2c:f9:
35:3d:aa:64:b3:46:57:64:af:30:e4:66:60:bd:5d:
ae:1a:f3:85:34:8b:a8:3d:6a:b6:15:88:c6:fd:0a:
14:5a:4a:83:45:f4:f8:ad:3d:6f:a0:9d:c4:11:ad:
ea:70:5b:0b:9f:81:e5:b7:11:03:6d:28:dc:1e:c9:
b2:78:2e:01:c3:96:e3:72:89:e2:84:a0:e7:f0:97:
89:6e:ce:58:68:58:13:cf:02:da:93:99:cd:10:c5:
6e:88:b0:6c:b1:62:ed:55:61:94:08:4f:ab:7b:dd:
92:2d:52:c7:36:45:3d:58:d1:9a:f2:0c:d6:3d:5e:
5b:16:4e:7c:f6:b6:dd:88:d3:9c:e4:38:74:19:77:
ef:51:57:eb:dc:05:c6:88:ac:0e:55:9d:f9:58:81:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:81:86:45:E9:40:F6:02:C3:82:D1:2A:20:1F:26:E6:26:0F:0B
X509v3 Authority Key Identifier:
keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/HsCBhkXpQPYCw4LRKiAfJuYmDws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.113.117.0-212.113.118.255
212.113.120.0/22
Signature Algorithm: sha256WithRSAEncryption
54:31:e4:a2:dc:db:91:8d:31:1a:c0:df:53:c1:b7:98:4d:fe:
b8:f5:3e:55:a7:8c:66:c8:06:96:23:b7:aa:04:e9:3a:7d:e6:
b0:a6:50:2f:2a:e0:c2:ab:ef:44:7d:40:d2:b2:e0:0d:1d:82:
40:9d:2c:e8:c6:9b:33:af:7f:9a:d0:50:a8:88:a2:ab:67:29:
3e:3d:aa:7b:62:fe:1f:5f:2a:68:ae:36:6f:e6:1f:82:02:63:
25:27:bd:7e:ec:fd:be:06:da:60:bb:7f:b6:13:b7:f9:b9:99:
3d:ab:0e:44:e5:8b:03:e5:7a:ff:9f:5d:00:2e:70:32:51:9a:
18:2d:da:44:12:25:13:91:e1:4f:60:ee:0c:f9:ec:9b:5c:41:
ec:b7:f0:17:2a:fe:50:7e:9f:f5:e4:58:b5:ba:1b:54:33:b4:
65:bf:b2:ba:7e:71:25:12:d4:63:41:2c:91:9d:9e:77:00:97:
d6:6c:a6:48:00:53:87:d5:e2:a3:17:c0:8a:f3:26:2a:5c:61:
9f:7a:20:b9:01:02:09:52:19:ff:54:84:80:10:7a:c1:5a:c4:
90:1e:85:57:2d:0d:f4:ef:80:fc:21:fa:6f:94:d2:95:97:28:
32:be:de:97:14:c9:43:9e:0a:42:98:9d:57:75:27:04:f8:15:
de:dc:8a:ba
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYifW+ZnO3RAHC4Fe0Ci8h13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4
NTRmMjkwHhcNMjMwNjA5MDg1MzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWMwODE4NjQ1ZTk0MGY2MDJjMzgyZDEyYTIwMWYyNmU2MjYwZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiki8QyvG3T77M8U45XmYX1vsn6x9
pxf6VXjmLGvke+jyfxqTa7oaR/M5/symfLoDQEx3NYOZR99CSZMKyBgypZMg0Xk8
SUlWSzS6l0SmgGDQ95AUwqxL8MOygJzwhC80feXF+/+FLPk1Papks0ZXZK8w5GZg
vV2uGvOFNIuoPWq2FYjG/QoUWkqDRfT4rT1voJ3EEa3qcFsLn4HltxEDbSjcHsmy
eC4Bw5bjconihKDn8JeJbs5YaFgTzwLak5nNEMVuiLBssWLtVWGUCE+re92SLVLH
NkU9WNGa8gzWPV5bFk589rbdiNOc5Dh0GXfvUVfr3AXGiKwOVZ35WIH9pQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFB7AgYZF6UD2AsOC0SogHybmJg8LMB8GA1UdIwQY
MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct
MDU3ODE3YmE5ZmI3LzEvSHNDQmhrWHBRUFlDdzRMUktpQWZKdVltRHdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3
LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADUcXUD
BADUcXYDBALUcXgwDQYJKoZIhvcNAQELBQADggEBAFQx5KLc25GNMRrA31PBt5hN
/rj1PlWnjGbIBpYjt6oE6Tp95rCmUC8q4MKr70R9QNKy4A0dgkCdLOjGmzOvf5rQ
UKiIoqtnKT49qnti/h9fKmiuNm/mH4ICYyUnvX7s/b4G2mC7f7YTt/m5mT2rDkTl
iwPlev+fXQAucDJRmhgt2kQSJROR4U9g7gz57JtcQey38Bcq/lB+n/XkWLW6G1Qz
tGW/srp+cSUS1GNBLJGdnncAl9ZspkgAU4fV4qMXwIrzJipcYZ96ILkBAglSGf9U
hIAQesFaxJAehVctDfTvgPwh+m+U0pWXKDK+3pcUyUOeCkKYnVd1JwT4Fd7ciro=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:49 2025 by rpki-client