Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/HL0hh1O0-2TEvgpIvqLybymi14U.roa
File: HL0hh1O0-2TEvgpIvqLybymi14U.roa (raw, json)
Hash identifier: wG/AZ/aUpmFx/Pbq0jeKpJMVP+eJlp4J6js3DiZbe44=
Subject key identifier: 1C:BD:21:87:53:B4:FB:64:C4:BE:0A:48:BE:A2:F2:6F:29:A2:D7:85
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 018ACC32D1C6A4C0E606380DF4562092E06D
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/HL0hh1O0-2TEvgpIvqLybymi14U.roa
Signing time: Mon 25 Sep 2023 11:56:37 +0000
ROA not before: Mon 25 Sep 2023 11:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39543
IP address blocks: 194.150.85.0/24 maxlen: 24
194.150.84.0/22 maxlen: 22
194.150.84.0/23 maxlen: 23
194.150.84.0/24 maxlen: 24
194.150.86.0/24 maxlen: 24
194.150.86.0/23 maxlen: 23
194.150.87.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:32:d1:c6:a4:c0:e6:06:38:0d:f4:56:20:92:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Sep 25 11:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cbd218753b4fb64c4be0a48bea2f26f29a2d785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:ad:17:74:d5:c0:85:b1:04:26:62:23:cf:
69:41:98:a7:98:e8:63:b1:92:65:df:e1:e6:10:db:
10:48:92:18:bf:95:76:ff:8a:ff:e4:d1:f2:05:eb:
d0:48:b6:d8:d2:48:60:e2:d7:6f:33:3a:a8:d5:d6:
ca:f7:28:b1:53:92:29:b9:f5:1e:b4:43:a5:24:c6:
28:59:df:97:0a:14:7e:15:d2:cb:a1:b5:75:28:2a:
6a:d9:2f:e9:f8:2e:93:d2:cf:76:6d:cb:e8:f9:08:
70:fa:41:99:4b:e3:aa:31:2f:a9:9a:7f:d4:44:8f:
8b:d9:c6:c8:7d:54:a5:e1:6d:65:86:b4:d3:c2:cc:
b2:45:43:2c:af:2f:fe:cf:8d:ce:74:a7:f0:4a:cc:
58:4c:68:4b:4c:9a:00:da:93:28:2e:72:ca:49:47:
f0:8b:75:03:fb:a9:f4:aa:41:d3:b2:42:fe:7d:e1:
24:91:a5:0f:40:b7:0e:7d:58:f8:11:27:fa:e0:76:
58:d5:7b:3d:19:61:0d:5f:7a:bc:cb:f0:ad:85:27:
01:d7:4d:39:8e:1d:9a:8a:cb:14:d2:1d:dd:35:ad:
20:53:db:d4:03:6b:9c:92:13:6e:92:be:d2:07:c7:
cf:f3:21:10:24:46:c6:81:24:c2:b0:2e:90:23:5c:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BD:21:87:53:B4:FB:64:C4:BE:0A:48:BE:A2:F2:6F:29:A2:D7:85
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/HL0hh1O0-2TEvgpIvqLybymi14U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.84.0/22
Signature Algorithm: sha256WithRSAEncryption
96:19:10:0a:30:77:5a:c0:68:a3:e0:04:1a:44:ed:f5:6b:5e:
97:10:66:1f:65:48:e8:d5:e3:48:08:de:f7:48:89:f3:3d:c9:
a6:3d:b7:14:b3:dc:e6:40:4e:5c:74:cd:7f:ba:33:51:89:58:
ca:ef:4b:19:d3:de:c9:4c:1b:6d:cf:cf:b4:a8:1c:76:8c:73:
ac:ba:22:94:6c:fe:36:cc:89:f5:be:f1:42:1d:ac:7f:ec:18:
dd:ea:eb:df:ed:20:6e:2d:45:8c:f2:12:3f:62:3c:7b:08:5a:
3e:27:f7:92:ac:89:a5:67:77:0a:11:e7:87:e7:c7:30:d2:8a:
32:2b:2a:2f:43:b9:29:da:0f:74:36:93:56:8c:b8:f7:03:14:
45:5e:17:02:a5:31:f9:c4:45:46:4f:01:2e:3e:de:52:de:f7:
28:ce:b2:a5:20:84:21:2c:84:4c:a3:eb:76:c5:1a:33:4b:7e:
03:4d:d8:f2:06:fa:a6:8c:a8:79:7f:06:68:a1:3d:16:b0:84:
97:57:e5:2a:9c:96:5e:05:c2:05:fd:a7:d3:a8:26:b8:b5:c5:
ee:a4:c1:7d:e0:43:5f:08:11:78:d7:fc:e4:f7:c5:0a:e9:94:
fa:36:89:41:3a:76:5f:34:62:37:f6:15:b8:fb:61:10:57:1f:
2b:0f:c9:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrMMtHGpMDmBjgN9FYgkuBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTg1ZmE0YmU2Njk0MmU1OTA5ZmQzYTFmZDRhMGMyNmUz
NmEwZDIwHhcNMjMwOTI1MTE1NjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2JkMjE4NzUzYjRmYjY0YzRiZTBhNDhiZWEyZjI2ZjI5YTJkNzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwmtF3TVwIWxBCZiI89pQZinmOhj
sZJl3+HmENsQSJIYv5V2/4r/5NHyBevQSLbY0khg4tdvMzqo1dbK9yixU5IpufUe
tEOlJMYoWd+XChR+FdLLobV1KCpq2S/p+C6T0s92bcvo+Qhw+kGZS+OqMS+pmn/U
RI+L2cbIfVSl4W1lhrTTwsyyRUMsry/+z43OdKfwSsxYTGhLTJoA2pMoLnLKSUfw
i3UD+6n0qkHTskL+feEkkaUPQLcOfVj4ESf64HZY1Xs9GWENX3q8y/CthScB1005
jh2aissU0h3dNa0gU9vUA2uckhNukr7SB8fP8yEQJEbGgSTCsC6QI1wv5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBy9IYdTtPtkxL4KSL6i8m8poteFMB8GA1UdIwQY
MBaAFAPoX6S+ZpQuWQn9Oh/UoMJuNqDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMt
NThlNWI3NmJlYmI3LzEvSEwwaGgxTzAtMlRFdmdwSXZxTHlieW1pMTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMtNThlNWI3NmJlYmI3
LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpZUMA0G
CSqGSIb3DQEBCwUAA4IBAQCWGRAKMHdawGij4AQaRO31a16XEGYfZUjo1eNICN73
SInzPcmmPbcUs9zmQE5cdM1/ujNRiVjK70sZ097JTBttz8+0qBx2jHOsuiKUbP42
zIn1vvFCHax/7Bjd6uvf7SBuLUWM8hI/Yjx7CFo+J/eSrImlZ3cKEeeH58cw0ooy
KyovQ7kp2g90NpNWjLj3AxRFXhcCpTH5xEVGTwEuPt5S3vcozrKlIIQhLIRMo+t2
xRozS34DTdjyBvqmjKh5fwZooT0WsISXV+UqnJZeBcIF/afTqCa4tcXupMF94ENf
CBF41/zk98UK6ZT6NolBOnZfNGI39hW4+2EQVx8rD8mY
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:53 2025 by rpki-client