Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/HB_1jr3CrDw_9Mv5v70LQluL3xM.roa
File: HB_1jr3CrDw_9Mv5v70LQluL3xM.roa (raw, json)
Hash identifier: 4pGvuIaUoJPwiInmwPV0/Rm1DIz5ruzbA5q/AW15h2E=
Subject key identifier: 1C:1F:F5:8E:BD:C2:AC:3C:3F:F4:CB:F9:BF:BD:0B:42:5B:8B:DF:13
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0183D6EA32CDED0E8280905C9FACFFE912BB
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/HB_1jr3CrDw_9Mv5v70LQluL3xM.roa
Signing time: Fri 14 Oct 2022 14:33:36 +0000
ROA not before: Fri 14 Oct 2022 14:33:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 188.209.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:ea:32:cd:ed:0e:82:80:90:5c:9f:ac:ff:e9:12:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 14 14:33:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c1ff58ebdc2ac3c3ff4cbf9bfbd0b425b8bdf13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:1e:4d:b3:11:59:69:d5:3a:ee:25:ef:53:
5c:28:bb:42:e2:c1:6b:39:ae:8f:6c:9e:d5:86:13:
91:01:49:87:68:a3:a5:55:db:f4:38:12:0c:22:da:
10:bd:79:11:df:e0:0c:06:13:58:b3:1d:37:29:94:
4f:ea:19:29:21:c2:c3:bb:9d:97:9e:5a:d7:29:bf:
4e:9d:0c:af:aa:c8:ef:32:7d:1b:07:72:ac:9f:90:
a0:01:6e:52:69:c8:be:3e:ed:f5:9c:c7:76:1e:d6:
fb:cb:ac:cb:16:18:af:76:7a:26:ac:ad:18:ec:46:
74:39:3f:79:26:72:71:c2:0b:3b:dd:b0:3b:9e:4e:
89:8a:b7:2a:14:1a:f4:22:eb:5e:8a:9b:92:7c:50:
45:c9:db:64:74:3c:38:6f:b9:8a:fb:38:f0:15:3f:
7c:48:b4:ea:be:c9:47:f4:3a:fa:38:4c:2d:0b:c7:
2b:ad:da:f5:2f:8c:04:4d:73:7e:2d:3d:b7:ac:a3:
45:96:90:0e:86:29:22:f4:16:2b:50:95:3a:f0:8e:
ff:0b:24:a5:42:c4:31:a8:ba:7d:74:46:1e:48:09:
bf:47:9a:fa:0e:7a:db:32:7e:b4:ad:83:57:94:e2:
cf:01:13:a0:90:3e:d7:39:e6:00:51:d9:20:4f:09:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:F5:8E:BD:C2:AC:3C:3F:F4:CB:F9:BF:BD:0B:42:5B:8B:DF:13
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/HB_1jr3CrDw_9Mv5v70LQluL3xM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.136.0/22
Signature Algorithm: sha256WithRSAEncryption
02:96:16:2c:b1:24:f6:c4:82:56:51:71:52:c6:0b:42:df:4e:
8d:31:44:65:f7:7f:95:45:7c:c8:ef:d5:df:7e:e7:a3:40:19:
de:0c:af:ba:c2:95:b0:3d:bd:37:d2:a3:3d:71:cf:b3:a2:5f:
87:4e:cb:72:50:f1:57:27:53:ae:eb:6c:23:d2:55:3d:4a:da:
ac:e7:28:61:4d:31:87:f0:07:ce:f4:01:4d:70:c3:a7:f5:bd:
20:66:d3:10:52:d4:c4:e8:27:98:b2:97:13:ba:20:84:bd:a5:
6e:8c:fc:c9:77:b3:b0:7c:62:72:a4:7d:a2:8f:33:11:f0:04:
b4:1f:a3:88:bc:31:c4:f9:c6:13:ca:10:4e:dc:7c:b6:04:ab:
7b:93:77:cc:eb:60:0e:a5:aa:2e:f4:75:40:ff:1f:33:4e:99:
74:51:d2:4c:8c:dd:c1:25:f1:d5:68:39:5e:88:56:ab:2e:16:
f8:b0:3f:58:68:11:c8:c2:be:d5:db:0a:38:e6:39:89:22:6a:
90:74:00:c7:9b:c3:49:f8:1e:b9:9e:1a:b1:b7:ea:92:4e:a9:
a9:22:ef:cd:50:03:ad:74:49:9e:b7:95:ac:74:de:fd:d5:60:
a6:ba:71:ba:dd:6c:7f:21:fa:1d:a0:e4:f5:e1:bc:4b:37:52:
c9:92:35:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPW6jLN7Q6CgJBcn6z/6RK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjIxMDE0MTQzMzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzFmZjU4ZWJkYzJhYzNjM2ZmNGNiZjliZmJkMGI0MjViOGJkZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLUeTbMRWWnVOu4l71NcKLtC4sFr
Oa6PbJ7VhhORAUmHaKOlVdv0OBIMItoQvXkR3+AMBhNYsx03KZRP6hkpIcLDu52X
nlrXKb9OnQyvqsjvMn0bB3Ksn5CgAW5Saci+Pu31nMd2Htb7y6zLFhivdnomrK0Y
7EZ0OT95JnJxwgs73bA7nk6JircqFBr0IuteipuSfFBFydtkdDw4b7mK+zjwFT98
SLTqvslH9Dr6OEwtC8crrdr1L4wETXN+LT23rKNFlpAOhiki9BYrUJU68I7/CySl
QsQxqLp9dEYeSAm/R5r6DnrbMn60rYNXlOLPAROgkD7XOeYAUdkgTwn6/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwf9Y69wqw8P/TL+b+9C0Jbi98TMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvSEJfMWpyM0NyRHdfOU12NXY3MExRbHVMM3hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNGIMA0G
CSqGSIb3DQEBCwUAA4IBAQAClhYssST2xIJWUXFSxgtC306NMURl93+VRXzI79Xf
fuejQBneDK+6wpWwPb030qM9cc+zol+HTstyUPFXJ1Ou62wj0lU9Stqs5yhhTTGH
8AfO9AFNcMOn9b0gZtMQUtTE6CeYspcTuiCEvaVujPzJd7OwfGJypH2ijzMR8AS0
H6OIvDHE+cYTyhBO3Hy2BKt7k3fM62AOpaou9HVA/x8zTpl0UdJMjN3BJfHVaDle
iFarLhb4sD9YaBHIwr7V2wo45jmJImqQdADHm8NJ+B65nhqxt+qSTqmpIu/NUAOt
dEmet5WsdN791WCmunG63Wx/IfodoOT14bxLN1LJkjX1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org