Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/zHG4XBOID7RMEamjKHZRbjuasm4.roa
File: zHG4XBOID7RMEamjKHZRbjuasm4.roa (raw, json)
Hash identifier: 8IsSQuJEMM12dBh6p+1SxVpFaCny+drZucfsXHBbESg=
Subject key identifier: CC:71:B8:5C:13:88:0F:B4:4C:11:A9:A3:28:76:51:6E:3B:9A:B2:6E
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01823B7FC03B9C59E1784CB3DE9D0060A5F3
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/zHG4XBOID7RMEamjKHZRbjuasm4.roa
Signing time: Tue 26 Jul 2022 17:13:24 +0000
ROA not before: Tue 26 Jul 2022 17:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 93.185.166.0/24 maxlen: 24
45.159.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:7f:c0:3b:9c:59:e1:78:4c:b3:de:9d:00:60:a5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jul 26 17:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc71b85c13880fb44c11a9a32876516e3b9ab26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:6f:c6:f9:ae:a1:89:74:c6:80:b4:25:3d:
a2:f6:29:0d:c9:d4:4e:ec:75:1b:43:d8:9a:54:40:
88:6d:44:34:c2:35:eb:b4:0a:89:4d:2d:7c:29:13:
76:5b:f5:47:04:a2:a9:ef:65:ce:6f:de:81:ad:18:
b1:83:25:11:db:c7:bc:5d:bb:2f:8f:ce:e7:b8:7c:
ea:1d:c2:c5:76:03:02:30:81:63:fe:b3:8d:98:f5:
25:75:81:81:bc:b8:77:65:19:d9:7a:1a:78:c1:76:
7a:4f:d4:17:96:56:fc:77:7c:fb:b7:8e:49:05:35:
2e:fa:f0:75:c2:23:dd:82:3d:39:2b:ba:9c:3d:78:
c8:ab:09:3d:24:e9:7d:04:c1:1d:e2:21:d1:e1:4a:
ae:10:0f:e8:31:db:c2:ce:c1:9e:06:94:f2:4c:fe:
29:e2:48:cc:bb:be:1f:f3:5b:66:15:ae:5f:13:cc:
de:31:ea:4b:d1:ab:39:88:2a:2a:19:bd:d0:a5:bd:
e5:f8:72:2f:36:42:17:cf:f7:0c:d8:dd:66:ad:68:
6a:a8:73:0d:1c:7f:43:0b:91:3c:55:48:2a:70:c6:
a6:a5:b2:10:98:d7:96:a1:68:fb:f7:0b:9a:5c:b9:
95:30:df:91:6b:0f:6f:23:99:80:51:b3:d8:f5:86:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:B8:5C:13:88:0F:B4:4C:11:A9:A3:28:76:51:6E:3B:9A:B2:6E
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/zHG4XBOID7RMEamjKHZRbjuasm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.248.0/24
93.185.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:b6:4a:41:29:37:78:a6:a9:ee:52:3d:a1:95:70:01:0c:0a:
22:4f:4e:6d:a6:f1:9b:c4:83:98:9d:13:d9:18:b1:71:2c:de:
c9:02:49:4b:19:8f:92:e3:c0:a5:af:63:e5:3c:c6:d0:ca:f5:
bc:94:3a:6b:8e:4c:48:98:cf:0a:74:f4:0a:38:a8:93:82:92:
59:89:7f:91:e3:ad:3c:b1:2c:e2:eb:3f:52:e4:80:04:6e:03:
89:f4:85:83:07:bd:54:37:a2:2c:56:90:b2:42:b0:21:78:f4:
f5:94:80:d7:c6:88:ad:2d:e6:d3:f2:bd:2a:f2:6f:5b:c8:d1:
37:b4:ec:c1:ae:c7:41:5e:a6:ee:c5:00:d3:d4:85:25:d7:db:
c0:29:45:33:c2:95:06:ab:8f:e3:25:2a:ea:a6:a7:93:18:9d:
ff:06:0c:e2:46:90:ac:2f:6b:e4:91:af:5f:96:86:22:6f:35:
6f:69:50:74:33:e7:31:07:ad:96:b1:ba:84:e6:73:99:c0:73:
2a:b3:4a:e5:e3:58:79:b4:61:2e:ae:ca:60:41:00:08:81:70:
78:ba:25:40:6a:f8:b4:a2:37:fa:48:c1:e0:b0:1a:ed:f1:85:
97:7e:de:df:ff:62:7d:8e:39:e8:d1:cd:72:18:69:96:4a:26:
06:16:08:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYI7f8A7nFnheEyz3p0AYKXzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjIwNzI2MTcxMzI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzcxYjg1YzEzODgwZmI0NGMxMWE5YTMyODc2NTE2ZTNiOWFiMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSlvxvmuoYl0xoC0JT2i9ikNydRO
7HUbQ9iaVECIbUQ0wjXrtAqJTS18KRN2W/VHBKKp72XOb96BrRixgyUR28e8Xbsv
j87nuHzqHcLFdgMCMIFj/rONmPUldYGBvLh3ZRnZehp4wXZ6T9QXllb8d3z7t45J
BTUu+vB1wiPdgj05K7qcPXjIqwk9JOl9BMEd4iHR4UquEA/oMdvCzsGeBpTyTP4p
4kjMu74f81tmFa5fE8zeMepL0as5iCoqGb3Qpb3l+HIvNkIXz/cM2N1mrWhqqHMN
HH9DC5E8VUgqcMampbIQmNeWoWj79wuaXLmVMN+Raw9vI5mAUbPY9YZRwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMxxuFwTiA+0TBGpoyh2UW47mrJuMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvekhHNFhCT0lEN1JNRWFtaktIWlJianVhc200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ/4AwQA
XbmmMA0GCSqGSIb3DQEBCwUAA4IBAQDFtkpBKTd4pqnuUj2hlXABDAoiT05tpvGb
xIOYnRPZGLFxLN7JAklLGY+S48Clr2PlPMbQyvW8lDprjkxImM8KdPQKOKiTgpJZ
iX+R4608sSzi6z9S5IAEbgOJ9IWDB71UN6IsVpCyQrAhePT1lIDXxoitLebT8r0q
8m9byNE3tOzBrsdBXqbuxQDT1IUl19vAKUUzwpUGq4/jJSrqpqeTGJ3/BgziRpCs
L2vkka9floYibzVvaVB0M+cxB62WsbqE5nOZwHMqs0rl41h5tGEurspgQQAIgXB4
uiVAavi0ojf6SMHgsBrt8YWXft7f/2J9jjno0c1yGGmWSiYGFgiX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org