Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HdHhSmVrP7xq6dejC74KZ-L230A.roa
File: HdHhSmVrP7xq6dejC74KZ-L230A.roa (raw, json)
Hash identifier: rj8j0Zyw2/0hHpS8Scf9c2MEwbr268SZTNtaYR/Hqmk=
Subject key identifier: 1D:D1:E1:4A:65:6B:3F:BC:6A:E9:D7:A3:0B:BE:0A:67:E2:F6:DF:40
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B8119DE327F397181643CCE1F445AD6
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HdHhSmVrP7xq6dejC74KZ-L230A.roa
Signing time: Sun 01 Jan 2023 04:05:00 +0000
ROA not before: Sun 01 Jan 2023 04:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47697
IP address blocks: 87.118.141.0/24 maxlen: 24
212.116.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:19:de:32:7f:39:71:81:64:3c:ce:1f:44:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dd1e14a656b3fbc6ae9d7a30bbe0a67e2f6df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:a9:8f:a0:24:31:de:2f:87:56:7a:74:33:
2a:d0:b1:04:0b:21:cb:20:17:0b:f4:09:74:20:43:
d9:29:24:f9:f4:0b:02:dc:9f:dd:27:47:0e:bd:c1:
ce:8b:1e:ba:de:8f:78:fd:47:c7:59:5b:53:23:65:
8c:0e:37:a9:80:b2:15:e8:ae:0d:06:a6:72:b8:c6:
b1:a5:4f:02:38:66:f8:ee:b2:12:45:26:9e:2b:cd:
55:78:2e:60:a1:1c:62:73:2b:69:9f:47:6c:61:12:
23:0e:26:6e:30:14:71:a4:92:fa:6f:35:cf:cf:dd:
71:44:f8:29:4e:94:3c:27:f8:3b:e4:a9:07:c9:7f:
e1:b3:fa:00:59:22:7f:a1:53:57:af:a7:b3:cc:96:
e1:0b:59:0e:2f:53:ee:4c:a0:e3:54:dd:f0:2b:b1:
9c:00:9e:27:54:80:c4:6d:f0:e1:69:d2:3b:d3:68:
ca:40:59:dd:b0:a6:db:d0:55:6a:70:ae:a1:b6:30:
18:e4:aa:59:38:2d:cf:7a:b6:fa:9a:cb:36:01:96:
3c:71:30:9b:07:f7:2e:1a:03:f0:ed:df:67:22:b5:
a8:c4:b4:fd:7b:00:7d:58:7f:27:0e:8f:8b:09:cf:
76:0f:e4:ef:cd:8c:68:b8:93:6b:e1:87:14:27:cd:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:E1:4A:65:6B:3F:BC:6A:E9:D7:A3:0B:BE:0A:67:E2:F6:DF:40
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/HdHhSmVrP7xq6dejC74KZ-L230A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.118.141.0/24
212.116.131.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5c:e5:b1:b4:35:2e:c3:33:5f:72:48:86:ae:2e:fd:4c:92:
67:53:85:83:29:05:68:61:23:ab:77:18:a1:11:3d:11:02:31:
c5:8e:81:3a:84:d2:80:c9:da:e0:be:57:9b:d0:37:f6:6a:7e:
86:88:88:0e:d3:a8:e1:a1:00:09:8f:72:a5:f2:ff:5b:e7:bd:
46:54:a0:d1:3f:85:d6:1a:9f:08:13:e7:5d:b2:54:42:66:f9:
b3:e0:c8:27:9c:c0:bb:28:c2:ab:6b:57:51:5c:f3:ff:c7:38:
91:f2:fe:55:7f:71:b5:59:a6:74:f2:d3:df:68:bc:57:45:01:
15:61:8a:a0:9f:2d:70:33:bc:85:23:fd:d9:5c:f1:86:46:72:
30:6f:89:47:d5:f9:ea:50:eb:86:34:7a:1d:60:cd:84:2c:4b:
ee:b8:22:25:8c:ad:2d:81:92:29:29:bd:42:7b:96:ab:98:98:
e9:14:88:96:ec:20:e8:da:0e:ac:45:8c:c9:cd:18:82:f0:16:
0f:df:8d:ee:7d:4b:4f:df:71:fe:d5:a8:65:96:24:5f:2e:fd:
74:26:f5:24:04:bf:04:5a:1f:87:d6:87:f5:46:73:68:37:61:
44:f1:81:a8:5d:3c:42:1d:03:c5:fe:50:04:25:29:39:66:48:
7c:70:0a:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrgRneMn85cYFkPM4fRFrWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjMwMTAxMDQwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZGQxZTE0YTY1NmIzZmJjNmFlOWQ3YTMwYmJlMGE2N2UyZjZkZjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSapj6AkMd4vh1Z6dDMq0LEECyHL
IBcL9Al0IEPZKST59AsC3J/dJ0cOvcHOix663o94/UfHWVtTI2WMDjepgLIV6K4N
BqZyuMaxpU8COGb47rISRSaeK81VeC5goRxicytpn0dsYRIjDiZuMBRxpJL6bzXP
z91xRPgpTpQ8J/g75KkHyX/hs/oAWSJ/oVNXr6ezzJbhC1kOL1PuTKDjVN3wK7Gc
AJ4nVIDEbfDhadI702jKQFndsKbb0FVqcK6htjAY5KpZOC3Perb6mss2AZY8cTCb
B/cuGgPw7d9nIrWoxLT9ewB9WH8nDo+LCc92D+TvzYxouJNr4YcUJ8379QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB3R4Uplaz+8aunXowu+Cmfi9t9AMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvSGRIaFNtVnJQN3hxNmRlakM3NEtaLUwyMzBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3aNAwQA
1HSDMA0GCSqGSIb3DQEBCwUAA4IBAQBwXOWxtDUuwzNfckiGri79TJJnU4WDKQVo
YSOrdxihET0RAjHFjoE6hNKAydrgvleb0Df2an6GiIgO06jhoQAJj3Kl8v9b571G
VKDRP4XWGp8IE+ddslRCZvmz4MgnnMC7KMKra1dRXPP/xziR8v5Vf3G1WaZ08tPf
aLxXRQEVYYqgny1wM7yFI/3ZXPGGRnIwb4lH1fnqUOuGNHodYM2ELEvuuCIljK0t
gZIpKb1Ce5armJjpFIiW7CDo2g6sRYzJzRiC8BYP343ufUtP33H+1ahlliRfLv10
JvUkBL8EWh+H1of1RnNoN2FE8YGoXTxCHQPF/lAEJSk5Zkh8cApX
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:38 2025 by rpki-client