Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/HRsYqg2__6meLn0vN1vjuC4DUl8.roa
File: HRsYqg2__6meLn0vN1vjuC4DUl8.roa (raw, json)
Hash identifier: iGFgvtNg+Xu9o29d07WS1VX6ILsL3G8AS/tZFbePROE=
Subject key identifier: 1D:1B:18:AA:0D:BF:FF:A9:9E:2E:7D:2F:37:5B:E3:B8:2E:03:52:5F
Certificate issuer: /CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Certificate serial: 0182EE9202A4ABE00828F985CA917489B362
Authority key identifier: 01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/HRsYqg2__6meLn0vN1vjuC4DUl8.roa
Signing time: Tue 30 Aug 2022 11:45:22 +0000
ROA not before: Tue 30 Aug 2022 11:45:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12301
IP address blocks: 91.220.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:92:02:a4:ab:e0:08:28:f9:85:ca:91:74:89:b3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=010a7d4c64aed4bc98c6b5b064ff0a9b82eada82
Validity
Not Before: Aug 30 11:45:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d1b18aa0dbfffa99e2e7d2f375be3b82e03525f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:c2:88:ab:89:6b:9c:4d:01:56:dc:ad:18:
85:83:cd:db:75:7d:92:a8:83:53:21:d5:59:a6:ae:
75:68:a3:86:3a:bb:76:f8:c5:23:0d:76:20:02:b8:
2e:a9:b8:35:a6:05:ab:ed:b8:61:6e:c5:fd:d5:2e:
4a:e3:53:3a:60:70:85:50:e7:c7:93:ab:ae:4d:45:
14:06:12:20:bc:1c:60:1b:e8:79:b9:39:9e:ba:17:
17:88:df:30:bc:13:c6:3f:67:3c:f1:2c:c9:4b:51:
32:e8:76:d4:8a:66:31:03:57:00:2a:33:0e:6f:a4:
b3:7a:e0:63:f4:2d:ce:b9:d7:d9:25:56:9f:af:ff:
55:65:4a:a6:a0:36:f8:8f:65:a4:fb:25:8a:5f:0d:
ba:15:e8:27:5e:30:9b:29:96:7d:87:3c:b7:ee:ac:
f4:00:5a:51:5f:d2:9b:f6:5b:7a:07:ca:89:39:b6:
a6:5c:39:f4:c3:ef:e0:01:0d:1d:c3:e3:97:36:71:
ef:ea:d7:ed:4f:2d:8c:4a:04:58:c3:b7:77:1f:31:
fb:50:b7:11:e3:5e:e6:39:8b:8b:94:48:3c:35:63:
4d:5f:2b:2b:f4:23:39:9b:56:15:7c:40:af:0e:8b:
50:f7:28:4c:7f:2b:f7:1c:74:d9:cd:50:08:54:83:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:18:AA:0D:BF:FF:A9:9E:2E:7D:2F:37:5B:E3:B8:2E:03:52:5F
X509v3 Authority Key Identifier:
keyid:01:0A:7D:4C:64:AE:D4:BC:98:C6:B5:B0:64:FF:0A:9B:82:EA:DA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/HRsYqg2__6meLn0vN1vjuC4DUl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d3363e-4832-4d57-9da5-dbf76ed3939f/1/AQp9TGSu1LyYxrWwZP8Km4Lq2oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.251.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:46:1b:82:0a:f9:46:9b:40:5e:7b:f8:26:9d:5b:1f:70:a4:
83:a4:54:0b:d0:64:2e:3c:de:87:1b:13:88:a5:64:38:3d:42:
87:f8:67:f4:f6:6d:21:4e:52:c0:68:80:0b:89:00:6c:f6:b0:
88:2b:9f:48:c5:29:60:24:10:21:f3:fd:6c:48:cd:bc:f6:f2:
e6:e5:fc:e0:40:80:0f:08:15:b6:c6:94:d2:46:1f:35:2f:b3:
a5:a5:3b:f1:6c:fa:8c:18:16:c3:06:c3:ef:9e:67:1d:2f:43:
6d:83:bc:28:62:4c:ad:a5:79:e3:41:79:47:7d:77:24:27:c7:
79:1a:a6:e9:3f:8c:c9:7f:8b:33:dd:e9:3d:49:a7:8e:3a:3c:
08:ac:43:dd:cf:b3:e0:e7:a0:17:c8:33:3f:ae:39:75:2b:20:
bd:8c:b5:58:bd:6e:25:3f:26:9a:11:df:13:1d:46:99:86:e4:
21:67:18:e3:0c:b3:b7:30:bd:e7:2a:12:07:9e:e6:73:9e:36:
e0:d4:7e:50:04:0b:4f:64:49:b9:72:2e:72:5c:b4:72:ab:43:
da:ed:f2:90:5a:93:29:55:91:6d:85:a0:51:02:8f:71:09:93:
13:c4:7c:10:55:68:f3:fd:82:a5:8a:36:1d:8c:23:f7:89:75:
01:9c:1a:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLukgKkq+AIKPmFypF0ibNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMGE3ZDRjNjRhZWQ0YmM5OGM2YjViMDY0ZmYwYTliODJl
YWRhODIwHhcNMjIwODMwMTE0NTIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDFiMThhYTBkYmZmZmE5OWUyZTdkMmYzNzViZTNiODJlMDM1MjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9vCiKuJa5xNAVbcrRiFg83bdX2S
qINTIdVZpq51aKOGOrt2+MUjDXYgArguqbg1pgWr7bhhbsX91S5K41M6YHCFUOfH
k6uuTUUUBhIgvBxgG+h5uTmeuhcXiN8wvBPGP2c88SzJS1Ey6HbUimYxA1cAKjMO
b6SzeuBj9C3OudfZJVafr/9VZUqmoDb4j2Wk+yWKXw26FegnXjCbKZZ9hzy37qz0
AFpRX9Kb9lt6B8qJObamXDn0w+/gAQ0dw+OXNnHv6tftTy2MSgRYw7d3HzH7ULcR
417mOYuLlEg8NWNNXysr9CM5m1YVfECvDotQ9yhMfyv3HHTZzVAIVINxQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0bGKoNv/+pni59Lzdb47guA1JfMB8GA1UdIwQY
MBaAFAEKfUxkrtS8mMa1sGT/CpuC6tqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUt
ZGJmNzZlZDM5MzlmLzEvSFJzWXFnMl9fNm1lTG4wdk4xdmp1QzREVWw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kMzM2M2UtNDgzMi00ZDU3LTlkYTUtZGJmNzZlZDM5Mzlm
LzEvQVFwOVRHU3UxTHlZeHJXd1pQOEttNExxMm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9z7MA0G
CSqGSIb3DQEBCwUAA4IBAQCnRhuCCvlGm0Bee/gmnVsfcKSDpFQL0GQuPN6HGxOI
pWQ4PUKH+Gf09m0hTlLAaIALiQBs9rCIK59IxSlgJBAh8/1sSM289vLm5fzgQIAP
CBW2xpTSRh81L7OlpTvxbPqMGBbDBsPvnmcdL0Ntg7woYkytpXnjQXlHfXckJ8d5
GqbpP4zJf4sz3ek9SaeOOjwIrEPdz7Pg56AXyDM/rjl1KyC9jLVYvW4lPyaaEd8T
HUaZhuQhZxjjDLO3ML3nKhIHnuZznjbg1H5QBAtPZEm5ci5yXLRyq0Pa7fKQWpMp
VZFthaBRAo9xCZMTxHwQVWjz/YKlijYdjCP3iXUBnBoR
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:42:21 2025 by rpki-client