Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/1-HFZGhDwhUpOwHfWhr0Iy_tIxCM.roa
File: 1-HFZGhDwhUpOwHfWhr0Iy_tIxCM.roa (raw, json)
Hash identifier: QTfw/8BpoxywPG1KxRsfMYDmBRnSNqTRBaCcNckg4LI=
Subject key identifier: F8:71:59:1A:10:F0:85:4A:4E:C0:77:D6:86:BD:08:CB:FB:48:C4:23
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 042F78FF
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/1-HFZGhDwhUpOwHfWhr0Iy_tIxCM.roa
Signing time: Fri 11 Feb 2022 13:26:34 +0000
ROA not before: Fri 11 Feb 2022 13:26:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209103
IP address blocks: 185.159.157.0/24 maxlen: 24
185.159.159.0/24 maxlen: 24
2a07:b941:f9f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70220031 (0x42f78ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Feb 11 13:26:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f871591a10f0854a4ec077d686bd08cbfb48c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:a4:d1:91:a5:1a:94:85:8f:27:8d:14:84:
36:a9:6d:d5:0e:ac:09:2c:58:74:18:4a:e0:01:aa:
e9:f7:0b:91:cc:d7:07:cb:bd:73:68:c8:8d:b5:50:
d0:61:ca:9a:ec:ce:f1:3e:2d:01:87:df:ac:ab:d3:
4f:36:96:b7:ca:ff:60:f5:c8:91:09:a6:e3:90:83:
ac:c4:63:f3:9f:8f:4f:ce:f7:e4:13:ab:71:54:09:
63:ce:ab:85:03:a8:86:b9:c8:d1:a4:aa:d0:fc:b0:
fa:2d:fc:06:0f:ee:8c:fe:25:07:18:9c:37:bf:b8:
07:e9:1c:42:9e:6c:8a:eb:f8:ae:af:a9:5c:b2:2c:
0d:36:5b:f1:b3:de:61:57:47:56:2f:01:cb:c9:a5:
06:a7:85:c0:7d:14:d6:08:04:ac:bd:3b:6f:64:9a:
b8:f1:85:51:f8:96:10:3a:ef:4a:19:60:1c:0a:77:
f4:7e:28:49:bd:f1:70:b8:6a:32:8c:43:4c:24:2d:
a1:1d:16:d2:42:51:77:04:41:2a:d4:9d:f4:50:72:
c6:66:de:71:a5:0c:bc:c4:f8:00:71:a1:cf:45:09:
ea:ce:79:d6:b3:49:e9:53:cb:21:d1:c7:1d:73:2b:
d0:5c:52:1d:bc:b2:59:4c:49:64:12:a1:2f:3a:ab:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:71:59:1A:10:F0:85:4A:4E:C0:77:D6:86:BD:08:CB:FB:48:C4:23
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/1-HFZGhDwhUpOwHfWhr0Iy_tIxCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.157.0/24
185.159.159.0/24
IPv6:
2a07:b941:f9f::/48
Signature Algorithm: sha256WithRSAEncryption
38:1c:ca:c4:0c:9f:60:9f:a8:9b:a4:66:24:57:0b:f2:12:3c:
62:2a:8e:60:a4:10:56:58:7e:de:63:72:cb:cb:37:cd:a5:bd:
e6:7a:f9:e3:a1:ac:f1:0a:aa:c2:bf:82:3a:01:5a:52:cb:19:
e7:92:2b:2f:aa:20:c9:bc:bc:37:a3:0d:f8:76:44:5c:c7:ca:
0a:c7:b7:e3:0d:67:4b:db:bb:7b:08:89:96:18:bd:f7:b8:70:
86:0d:b6:4c:85:f8:5b:9a:6b:d8:74:7c:07:18:44:a4:d2:b8:
4e:2a:f5:86:86:3e:f3:51:12:3a:20:d3:70:f8:e4:ad:6f:48:
31:b5:fc:43:95:4f:21:d5:74:f9:9f:42:4f:b4:44:93:79:a3:
40:f6:ad:84:5b:ca:a0:79:1b:32:84:bf:a3:72:24:d4:ba:4a:
2d:7d:3a:6d:02:2b:bc:83:ba:43:9f:fb:c8:3b:03:aa:db:ba:
d7:46:c7:7b:c1:4c:74:87:6c:79:9b:74:3b:c8:e2:79:92:76:
ca:da:cc:13:ae:a4:82:ee:85:b8:5e:33:16:83:74:ba:17:f5:
d3:f5:2d:60:df:09:b7:56:37:19:d8:85:a1:b2:99:63:88:f4:
82:7a:44:8b:9a:fd:6a:f8:ea:5e:50:d2:a3:3f:ac:23:ce:99:
6e:92:11:83
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEBC94/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
YWIxOTk2NTE1ODg0NDM0Yjg3ODgyYjViOTcyYTZlNTI5ZmZiMDBiMB4XDTIyMDIx
MTEzMjYzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg3MTU5MWExMGYw
ODU0YTRlYzA3N2Q2ODZiZDA4Y2JmYjQ4YzQyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKp3pNGRpRqUhY8njRSENqlt1Q6sCSxYdBhK4AGq6fcLkczX
B8u9c2jIjbVQ0GHKmuzO8T4tAYffrKvTTzaWt8r/YPXIkQmm45CDrMRj85+PT873
5BOrcVQJY86rhQOohrnI0aSq0Pyw+i38Bg/ujP4lBxicN7+4B+kcQp5siuv4rq+p
XLIsDTZb8bPeYVdHVi8By8mlBqeFwH0U1ggErL07b2SauPGFUfiWEDrvShlgHAp3
9H4oSb3xcLhqMoxDTCQtoR0W0kJRdwRBKtSd9FByxmbecaUMvMT4AHGhz0UJ6s55
1rNJ6VPLIdHHHXMr0FxSHbyyWUxJZBKhLzqrY4ECAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBT4cVkaEPCFSk7Ad9aGvQjL+0jEIzAfBgNVHSMEGDAWgBRasZllFYhENLh4
grW5cqblKf+wCzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dyR1paUldJUkRTNGVJSzF1WEttNVNuX3NBcy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzUvOTRjOTE5LWU2ZWEtNGUxOC1hZjEyLWVkNWIwMWQyNTI4Yy8x
LzEtSEZaR2hEd2hVcE93SGZXaHIwSXlfdEl4Q00ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM1
Lzk0YzkxOS1lNmVhLTRlMTgtYWYxMi1lZDViMDFkMjUyOGMvMS9XckdaWlJXSVJE
UzRlSUsxdVhLbTVTbl9zQXMuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
NgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwDBAC5n50DBAC5n58wDwQCAAIwCQMH
ACoHuUEPnzANBgkqhkiG9w0BAQsFAAOCAQEAOBzKxAyfYJ+om6RmJFcL8hI8YiqO
YKQQVlh+3mNyy8s3zaW95nr546Gs8Qqqwr+COgFaUssZ55IrL6ogyby8N6MN+HZE
XMfKCse34w1nS9u7ewiJlhi997hwhg22TIX4W5pr2HR8BxhEpNK4Tir1hoY+81ES
OiDTcPjkrW9IMbX8Q5VPIdV0+Z9CT7REk3mjQPathFvKoHkbMoS/o3Ik1LpKLX06
bQIrvIO6Q5/7yDsDqtu610bHe8FMdIdseZt0O8jieZJ2ytrME66kgu6FuF4zFoN0
uhf10/UtYN8Jt1Y3GdiFobKZY4j0gnpEi5r9avjqXlDSoz+sI86ZbpIRgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org