Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HSdYEjH2KyKVSbiX-XDDmKxirEI.roa
File: HSdYEjH2KyKVSbiX-XDDmKxirEI.roa (raw, json)
Hash identifier: gM1DrO53OeOG9p5MyyqFWrCnMAgJNdjNbnzg6lx9Kd4=
Subject key identifier: 1D:27:58:12:31:F6:2B:22:95:49:B8:97:F9:70:C3:98:AC:62:AC:42
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 03FD89FC
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HSdYEjH2KyKVSbiX-XDDmKxirEI.roa
Signing time: Sat 01 Jan 2022 01:52:26 +0000
ROA not before: Sat 01 Jan 2022 01:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42815
IP address blocks: 87.118.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66947580 (0x3fd89fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 01:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d27581231f62b229549b897f970c398ac62ac42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:ea:a1:af:9d:f8:2c:a6:4c:ea:b0:b5:c6:
8c:41:0f:62:74:bb:ff:d7:dd:38:a0:39:3c:2f:1c:
f0:f6:0c:dd:b1:99:e6:68:04:72:5d:5b:36:65:94:
88:5e:2a:cc:f0:ee:50:06:f5:53:a8:16:b9:6b:2b:
f4:f4:3c:ce:ce:14:86:48:60:2d:a9:71:f1:1d:e8:
56:04:48:0f:7f:a1:13:ff:a7:d3:24:2a:0b:c5:92:
1d:e8:2f:da:95:8b:65:d8:5a:4e:6d:57:c1:85:8b:
08:79:41:e6:5a:ff:31:9b:69:d4:35:a6:ba:c4:65:
1b:88:58:c7:a1:b2:72:a9:aa:5f:b0:61:ef:af:c3:
e8:13:a5:f2:86:4b:93:b4:37:28:e2:05:d3:1d:33:
f2:12:b3:47:60:d4:dd:ff:4c:53:cc:74:69:c7:f2:
16:b7:85:ee:c7:bf:52:e5:dd:fe:eb:16:31:44:d4:
1a:0d:5e:92:5d:dd:1f:fe:d5:2e:50:9b:68:fc:14:
c4:25:3a:bb:21:05:5a:e2:55:c9:61:b9:00:3b:29:
34:2c:7a:a0:1a:ee:f8:05:cf:c5:9e:14:5f:cb:33:
d4:5c:5f:dd:06:2f:84:6a:c8:10:e1:e2:19:71:5c:
27:12:d5:19:ef:fd:8b:a7:32:fe:a0:55:bf:ee:c7:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:27:58:12:31:F6:2B:22:95:49:B8:97:F9:70:C3:98:AC:62:AC:42
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HSdYEjH2KyKVSbiX-XDDmKxirEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d7:81:5a:51:db:65:4f:d3:c2:ce:06:08:08:0f:89:51:f8:
66:d9:84:15:df:55:84:dc:2c:b6:19:da:eb:d1:e2:e5:e8:2b:
ac:47:fc:7f:86:72:59:c4:73:51:f0:a1:be:88:65:7b:7a:3c:
b1:54:9c:8d:aa:03:b7:bf:53:5c:0b:1f:e9:6e:2c:1e:5d:fd:
34:e0:a1:29:85:12:08:11:94:a4:aa:1e:6b:c3:5a:8e:4a:ef:
c6:88:69:df:92:25:f4:96:11:d1:f8:83:fa:82:ef:8b:54:f6:
ae:0b:47:f4:32:3b:01:50:ce:fd:8a:99:63:b6:30:2a:77:86:
ea:ba:74:24:1a:6f:4f:ea:f5:c4:21:33:0e:21:ad:cf:eb:aa:
0b:c2:53:9c:6e:fd:82:d4:2d:66:50:6c:05:af:1e:08:13:d8:
aa:e2:78:8b:b1:41:b8:a7:92:59:95:9b:e8:04:2e:ae:7f:9c:
ad:fa:50:11:dd:45:84:4e:88:ea:95:be:94:08:6a:b4:c4:b2:
cb:43:b1:50:57:6d:37:ee:f5:12:b4:d0:da:73:44:4f:90:90:
e1:ac:3b:b1:af:9f:01:88:c1:8a:87:aa:25:17:c7:f5:19:4d:
44:c5:61:81:c8:12:b1:ab:dd:48:18:97:08:71:8d:10:65:a8:
98:c6:40:92
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA/2J/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MDdkNzU3M2FhY2FlODIxYzg3ZDZkMzY0MzFjZmU0YjI4MDFhYjQxMB4XDTIyMDEw
MTAxNTIyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWQyNzU4MTIzMWY2
MmIyMjk1NDliODk3Zjk3MGMzOThhYzYyYWM0MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALZG6qGvnfgspkzqsLXGjEEPYnS7/9fdOKA5PC8c8PYM3bGZ
5mgEcl1bNmWUiF4qzPDuUAb1U6gWuWsr9PQ8zs4UhkhgLalx8R3oVgRID3+hE/+n
0yQqC8WSHegv2pWLZdhaTm1XwYWLCHlB5lr/MZtp1DWmusRlG4hYx6GycqmqX7Bh
76/D6BOl8oZLk7Q3KOIF0x0z8hKzR2DU3f9MU8x0acfyFreF7se/UuXd/usWMUTU
Gg1ekl3dH/7VLlCbaPwUxCU6uyEFWuJVyWG5ADspNCx6oBru+AXPxZ4UX8sz1Fxf
3QYvhGrIEOHiGXFcJxLVGe/9i6cy/qBVv+7HoiUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdJ1gSMfYrIpVJuJf5cMOYrGKsQjAfBgNVHSMEGDAWgBTQfXVzqsroIch9
bTZDHP5LKAGrQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBIMTFjNnJLNkNISWZXMDJReHotU3lnQnEwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvNTcyNWNjLWFkNzAtNDZmOC1iYjYyLWNmOWRjNWJhYWE3OS8x
L0hTZFlFakgyS3lLVlNiaVgtWEREbUt4aXJFSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
NTcyNWNjLWFkNzAtNDZmOC1iYjYyLWNmOWRjNWJhYWE3OS8xLzBIMTFjNnJLNkNI
SWZXMDJReHotU3lnQnEwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFd2hjANBgkqhkiG9w0BAQsFAAOC
AQEAHteBWlHbZU/Tws4GCAgPiVH4ZtmEFd9VhNwsthna69Hi5egrrEf8f4ZyWcRz
UfChvohle3o8sVScjaoDt79TXAsf6W4sHl39NOChKYUSCBGUpKoea8Najkrvxohp
35Il9JYR0fiD+oLvi1T2rgtH9DI7AVDO/YqZY7YwKneG6rp0JBpvT+r1xCEzDiGt
z+uqC8JTnG79gtQtZlBsBa8eCBPYquJ4i7FBuKeSWZWb6AQurn+crfpQEd1FhE6I
6pW+lAhqtMSyy0OxUFdtN+71ErTQ2nNET5CQ4aw7sa+fAYjBioeqJRfH9RlNRMVh
gcgSsavdSBiXCHGNEGWomMZAkg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org