Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/8m9sh-0G9OAW_rs0AHTzaNFE7cA.roa
File: 8m9sh-0G9OAW_rs0AHTzaNFE7cA.roa (raw, json)
Hash identifier: nQhMO6SPiIlqXwFXl/9mpmosc2DMK7E5MFeE8/nzsy8=
Subject key identifier: F2:6F:6C:87:ED:06:F4:E0:16:FE:BB:34:00:74:F3:68:D1:44:ED:C0
Certificate issuer: /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial: 0183CCDFB422B7750F4358453CF8CFE0F41D
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/8m9sh-0G9OAW_rs0AHTzaNFE7cA.roa
Signing time: Wed 12 Oct 2022 15:45:56 +0000
ROA not before: Wed 12 Oct 2022 15:45:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200915
IP address blocks: 185.91.152.0/22 maxlen: 23
2a05:eb40::/29 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:df:b4:22:b7:75:0f:43:58:45:3c:f8:cf:e0:f4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
Validity
Not Before: Oct 12 15:45:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f26f6c87ed06f4e016febb340074f368d144edc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:67:32:46:30:2f:e4:08:b1:7d:ae:f9:ce:21:
ad:0b:1a:21:9c:cd:09:92:ea:f0:e2:a4:51:8b:33:
ca:56:79:4b:48:a8:02:1c:16:79:23:e5:ab:f3:c3:
df:15:03:51:ab:b1:19:3f:d8:f1:38:58:dc:5a:4b:
8a:ff:4a:1d:30:32:a4:92:24:e2:58:6e:29:a2:96:
32:68:aa:9e:98:54:fb:0b:18:b5:ce:9d:d8:be:16:
86:77:30:4e:12:39:9e:ce:c7:ce:82:a8:e9:ad:c2:
8e:a2:bb:f5:a0:5b:77:c9:5a:ac:f4:32:ca:f1:51:
2a:1e:38:50:3d:8e:60:35:91:f3:9e:38:18:25:b3:
5a:8f:68:c8:22:7b:cb:c6:ac:2b:bd:77:d8:b4:91:
b8:e4:f4:de:d0:53:14:a9:29:fc:01:fb:72:bd:07:
55:c9:5a:7f:29:01:e1:d2:99:09:f4:14:79:1f:d6:
ad:ba:ae:93:eb:ce:24:d1:b0:b3:ba:bc:2e:a3:c8:
4e:ec:47:e0:50:9b:64:9f:16:ee:8c:e7:bd:63:0b:
be:db:02:87:25:9b:a6:3a:04:28:74:29:17:35:74:
9f:74:83:41:f3:07:5e:1b:73:53:eb:d1:30:98:4c:
79:9f:ff:94:4c:05:68:3d:33:08:da:db:78:86:74:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6F:6C:87:ED:06:F4:E0:16:FE:BB:34:00:74:F3:68:D1:44:ED:C0
X509v3 Authority Key Identifier:
keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/8m9sh-0G9OAW_rs0AHTzaNFE7cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.152.0/22
IPv6:
2a05:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
47:5c:2f:13:d5:1c:99:87:f9:8c:29:2f:93:b0:4e:7a:d4:f8:
5d:bb:62:74:57:ee:ce:5d:79:66:dd:0f:66:03:a6:16:c0:85:
24:da:58:91:e7:65:74:63:0b:24:e4:b1:4f:5b:2d:af:bd:ee:
76:82:c1:a0:8e:48:b8:89:1e:55:40:1d:f2:65:ec:fb:45:80:
9b:2f:1c:26:22:e9:ff:eb:cc:32:07:d9:4f:15:92:5f:77:5c:
f2:f4:f3:40:44:f7:49:56:8d:86:96:28:e8:53:f0:21:48:8b:
33:51:3a:d4:48:f3:92:7b:24:1e:bc:f1:e7:77:1c:6d:2d:50:
c8:8c:f3:10:d2:ab:26:69:1f:70:19:37:b6:a4:cf:df:c1:ec:
03:fe:40:5a:83:0f:cf:05:ab:38:99:57:8a:a0:f7:bd:6d:db:
bc:b1:60:f8:02:e7:2a:4d:5e:dc:91:3d:e7:25:8c:0a:21:3b:
10:f5:00:3a:71:28:2a:bf:09:60:bc:68:82:96:4f:f3:ba:e7:
fe:6f:8f:6c:4e:07:60:0b:17:00:d1:e3:cc:2b:14:e3:fc:65:
b9:20:16:97:18:2b:03:3b:96:4c:ff:7d:2e:0c:91:3c:67:16:
29:55:e9:cf:55:12:65:a6:15:2a:4d:b6:3d:48:b6:13:9f:50:
80:05:2b:da
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYPM37Qit3UPQ1hFPPjP4PQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhM2IxZGRkYWIzM2U0NTUwNmFkOTc3MDQwOTI0NzIwNDE3
ZDU2ODgwHhcNMjIxMDEyMTU0NTU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjZmNmM4N2VkMDZmNGUwMTZmZWJiMzQwMDc0ZjM2OGQxNDRlZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGcyRjAv5Aixfa75ziGtCxohnM0J
kurw4qRRizPKVnlLSKgCHBZ5I+Wr88PfFQNRq7EZP9jxOFjcWkuK/0odMDKkkiTi
WG4popYyaKqemFT7Cxi1zp3YvhaGdzBOEjmezsfOgqjprcKOorv1oFt3yVqs9DLK
8VEqHjhQPY5gNZHznjgYJbNaj2jIInvLxqwrvXfYtJG45PTe0FMUqSn8AftyvQdV
yVp/KQHh0pkJ9BR5H9atuq6T684k0bCzurwuo8hO7EfgUJtknxbujOe9Ywu+2wKH
JZumOgQodCkXNXSfdINB8wdeG3NT69EwmEx5n/+UTAVoPTMI2tt4hnSYkwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPJvbIftBvTgFv67NAB082jRRO3AMB8GA1UdIwQY
MBaAFFo7Hd2rM+RVBq2XcECSRyBBfVaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYt
NjhmMzE2NjA3Mzc2LzEvOG05c2gtMEc5T0FXX3JzMEFIVHphTkZFN2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYtNjhmMzE2NjA3Mzc2
LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVuYMA0E
AgACMAcDBQMqBetAMA0GCSqGSIb3DQEBCwUAA4IBAQBHXC8T1RyZh/mMKS+TsE56
1Phdu2J0V+7OXXlm3Q9mA6YWwIUk2liR52V0Ywsk5LFPWy2vve52gsGgjki4iR5V
QB3yZez7RYCbLxwmIun/68wyB9lPFZJfd1zy9PNARPdJVo2GlijoU/AhSIszUTrU
SPOSeyQevPHndxxtLVDIjPMQ0qsmaR9wGTe2pM/fwewD/kBagw/PBas4mVeKoPe9
bdu8sWD4AucqTV7ckT3nJYwKITsQ9QA6cSgqvwlgvGiClk/zuuf+b49sTgdgCxcA
0ePMKxTj/GW5IBaXGCsDO5ZM/30uDJE8ZxYpVenPVRJlphUqTbY9SLYTn1CABSva
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:13 2024 by rpki-client on console-fra.rpki-client.org