Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/HwqUIqm4b_GYw8aFyLvffrJJeBI.roa
File: HwqUIqm4b_GYw8aFyLvffrJJeBI.roa (raw, json)
Hash identifier: ItmjTAcdtsXS9jLGrLO9WbZCk3ZANtMkXcLeYbJ9FL4=
Subject key identifier: 1F:0A:94:22:A9:B8:6F:F1:98:C3:C6:85:C8:BB:DF:7E:B2:49:78:12
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01838954054BA9713ED7AFFA93459711D3D2
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/HwqUIqm4b_GYw8aFyLvffrJJeBI.roa
Signing time: Thu 29 Sep 2022 12:58:48 +0000
ROA not before: Thu 29 Sep 2022 12:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 185.232.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:54:05:4b:a9:71:3e:d7:af:fa:93:45:97:11:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Sep 29 12:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f0a9422a9b86ff198c3c685c8bbdf7eb2497812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ff:e6:80:97:57:4b:79:16:d5:03:85:04:64:
c6:87:4e:95:83:89:a2:1b:33:61:78:1a:6f:7f:6e:
38:78:b2:a4:4d:54:23:f0:ed:a4:cf:75:f3:71:e5:
0d:fc:68:fd:a2:56:3a:18:32:40:e4:bd:0a:28:0c:
99:29:8e:63:4a:5a:57:18:08:c0:dd:46:f0:5e:f5:
db:17:8d:2c:9d:ac:83:c0:03:79:a1:ff:b7:d7:d1:
a9:a3:b6:97:59:7a:32:92:e4:ed:6e:5f:b4:69:71:
73:43:d9:d9:99:f6:90:bb:68:53:b4:30:76:34:b2:
10:ea:0b:03:e0:d0:1d:c5:53:71:cc:12:b1:ce:99:
da:0c:ed:b8:1a:ac:9b:58:f0:cd:33:d4:67:27:9a:
52:c6:c8:d2:57:b4:f7:c3:24:6f:ad:15:40:ef:fc:
f1:0b:8b:d6:e8:5e:0a:e9:5b:f1:f4:97:89:98:43:
b5:98:00:62:e6:a6:a7:b8:14:c4:5b:2e:da:9d:fd:
e0:2d:38:f2:8f:53:a0:34:8d:2f:85:1b:0d:b0:56:
5e:3d:a1:10:7d:e1:8f:bb:25:91:21:50:47:fe:5c:
75:66:c8:9b:67:70:e3:23:81:96:55:d4:61:c0:e0:
e6:1d:1f:b5:83:3e:53:6c:45:94:9d:f5:39:54:95:
b3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:94:22:A9:B8:6F:F1:98:C3:C6:85:C8:BB:DF:7E:B2:49:78:12
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/HwqUIqm4b_GYw8aFyLvffrJJeBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4e:fe:d7:55:3b:d4:51:40:82:cf:10:cb:4e:07:50:df:08:
5b:6a:ef:ae:0a:b6:f6:36:1f:1b:2e:15:8c:46:7b:bc:d0:7c:
2c:1d:67:b2:71:b0:b4:cc:ee:27:c7:d5:31:f0:23:1b:26:99:
06:89:1a:1b:ec:95:7f:bc:55:8e:2d:79:dc:ce:63:9c:65:65:
bc:0b:48:4a:4c:b3:44:2a:62:08:86:b6:61:75:c0:fd:0d:30:
8d:97:c5:c1:c3:2a:f7:c0:43:a3:ad:52:f4:d8:79:c3:e3:fc:
19:1e:02:05:7f:7b:24:6c:ac:da:07:4b:23:61:86:31:cc:c5:
31:70:f3:24:c2:55:39:ad:ca:df:fa:4f:27:46:13:94:98:ab:
5f:3c:7a:ff:44:27:e8:38:97:e2:31:1b:0a:f0:14:1a:32:82:
85:f0:ab:dd:11:8c:fa:de:47:14:6b:70:9a:7b:4d:5d:0a:c1:
b5:48:03:bd:af:af:02:5d:c3:54:0b:0b:eb:b1:32:e3:94:89:
35:e7:45:ef:61:f2:a2:83:ee:17:d6:29:aa:1b:54:e9:24:f4:
f0:d0:26:98:75:ea:77:bd:16:78:a0:41:f4:a2:ca:02:92:1b:
e0:40:25:fa:c5:86:a3:0a:6b:2d:1a:49:1f:98:fc:0b:07:6b:
af:ee:45:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYOJVAVLqXE+16/6k0WXEdPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MmM5M2QyNjY4NTI3ODhlNDk5ODJkOWY3YTYyMGRiNmQ5
ZjU4OGQwHhcNMjIwOTI5MTI1ODQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjBhOTQyMmE5Yjg2ZmYxOThjM2M2ODVjOGJiZGY3ZWIyNDk3ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8//mgJdXS3kW1QOFBGTGh06Vg4mi
GzNheBpvf244eLKkTVQj8O2kz3XzceUN/Gj9olY6GDJA5L0KKAyZKY5jSlpXGAjA
3UbwXvXbF40snayDwAN5of+319Gpo7aXWXoykuTtbl+0aXFzQ9nZmfaQu2hTtDB2
NLIQ6gsD4NAdxVNxzBKxzpnaDO24GqybWPDNM9RnJ5pSxsjSV7T3wyRvrRVA7/zx
C4vW6F4K6Vvx9JeJmEO1mABi5qanuBTEWy7anf3gLTjyj1OgNI0vhRsNsFZePaEQ
feGPuyWRIVBH/lx1ZsibZ3DjI4GWVdRhwODmHR+1gz5TbEWUnfU5VJWzLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB8KlCKpuG/xmMPGhci7336ySXgSMB8GA1UdIwQY
MBaAFCgsk9JmhSeI5JmC2femINttn1iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAt
OTZhZGZmZTJlODZhLzEvSHdxVUlxbTRiX0dZdzhhRnlMdmZmckpKZUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8zODJmZjQtNGZjMi00MzAyLWFmOTAtOTZhZGZmZTJlODZh
LzEvS0N5VDBtYUZKNGprbVlMWjk2WWcyMjJmV0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuehjMA0G
CSqGSIb3DQEBCwUAA4IBAQAKTv7XVTvUUUCCzxDLTgdQ3whbau+uCrb2Nh8bLhWM
Rnu80HwsHWeycbC0zO4nx9Ux8CMbJpkGiRob7JV/vFWOLXnczmOcZWW8C0hKTLNE
KmIIhrZhdcD9DTCNl8XBwyr3wEOjrVL02HnD4/wZHgIFf3skbKzaB0sjYYYxzMUx
cPMkwlU5rcrf+k8nRhOUmKtfPHr/RCfoOJfiMRsK8BQaMoKF8KvdEYz63kcUa3Ca
e01dCsG1SAO9r68CXcNUCwvrsTLjlIk150XvYfKig+4X1imqG1TpJPTw0CaYdep3
vRZ4oEH0osoCkhvgQCX6xYajCmstGkkfmPwLB2uv7kXo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org