Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/htlz46UMK2by6IMHDkd7S-ZssdE.roa
File: htlz46UMK2by6IMHDkd7S-ZssdE.roa (raw, json)
Hash identifier: QiDcLXeHD6nW5QXo8RKw3ZlGQu4c9Y4QasCfVHYKo/s=
Subject key identifier: 86:D9:73:E3:A5:0C:2B:66:F2:E8:83:07:0E:47:7B:4B:E6:6C:B1:D1
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 036CE909
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/htlz46UMK2by6IMHDkd7S-ZssdE.roa
Signing time: Sat 01 Jan 2022 05:06:08 +0000
ROA not before: Sat 01 Jan 2022 05:06:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43962
IP address blocks: 185.123.160.0/23 maxlen: 23
185.123.162.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57469193 (0x36ce909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jan 1 05:06:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86d973e3a50c2b66f2e883070e477b4be66cb1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:31:d2:35:0d:c5:41:6e:01:bb:69:27:d1:
53:32:ae:0b:85:3a:21:8e:b9:92:95:8f:eb:82:f9:
f2:36:20:27:cf:8d:47:f0:1a:b4:af:df:5d:b3:62:
88:4b:fe:a9:75:59:0b:55:f8:44:0d:95:a0:9a:6e:
a7:14:94:a0:77:1b:c0:36:ef:d0:8e:fc:13:9f:7b:
b7:70:65:15:5a:20:86:75:51:60:87:e5:e0:db:d7:
38:75:78:33:f8:45:c0:5f:8a:72:93:68:2d:6d:3b:
9e:aa:1c:ac:05:8a:af:3a:a2:e0:c8:3b:93:22:ad:
ea:97:15:d0:7c:99:4b:88:97:06:90:df:4a:f3:05:
6d:6b:0e:ff:a7:11:ce:ba:87:bb:82:72:a2:cf:3c:
8f:8e:21:8c:8c:7b:6f:eb:1e:c2:fe:c0:99:43:e3:
c1:8a:6b:08:75:a1:5a:1a:92:ca:39:8c:27:e5:ee:
9c:fd:b4:94:6e:4f:89:2d:70:b1:81:a9:92:bf:02:
75:58:c6:88:5c:28:97:69:ce:32:ae:f2:d8:62:4e:
d9:14:c4:31:ef:c7:ab:67:91:07:18:7c:68:4a:37:
13:78:7e:76:ae:e3:62:e3:32:7a:d7:0d:90:76:67:
8a:8d:91:84:90:77:b6:3f:69:bf:0c:fa:b1:80:04:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D9:73:E3:A5:0C:2B:66:F2:E8:83:07:0E:47:7B:4B:E6:6C:B1:D1
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/htlz46UMK2by6IMHDkd7S-ZssdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.160.0/22
Signature Algorithm: sha256WithRSAEncryption
63:a4:bd:6a:f9:5f:32:3b:9d:b7:eb:6b:53:f0:b4:24:16:d1:
5c:e4:ac:75:37:a3:b9:90:4b:e2:31:b2:2d:5c:8f:f4:41:86:
18:20:49:b9:95:e7:f0:84:68:92:8d:d8:35:34:8c:92:f6:c6:
72:38:84:0f:c7:51:6d:6d:6b:8f:09:d5:b1:03:39:15:53:e7:
16:be:71:a7:bb:b4:ea:29:f8:5b:db:8d:d9:3d:90:88:6d:d8:
d1:d0:cd:7c:3c:67:6d:10:06:21:1d:7e:2e:2f:f7:99:86:89:
8f:eb:ae:7d:90:8c:b4:70:29:ea:ad:f3:d3:8a:e0:76:12:2a:
5e:95:e0:3c:e0:41:97:d0:ae:2a:85:61:11:1a:fa:f5:7c:14:
bd:0b:eb:43:05:89:6a:d9:0e:2b:d9:b6:59:3e:55:0e:3a:35:
02:6b:28:a9:f0:aa:b7:4f:86:eb:8f:11:21:0c:b2:9a:13:c6:
d3:c1:3b:e3:84:09:ec:9b:89:30:72:bb:f4:f4:c4:cb:d8:ed:
b3:8d:6c:85:ac:1c:a8:82:d9:59:32:19:e1:19:4d:a5:6d:46:
00:53:f9:df:46:34:af:b9:29:ab:63:4f:22:4c:e9:57:99:e7:
ef:4f:cc:79:55:88:36:c6:13:0b:a7:70:98:54:e7:5d:b9:a2:
54:16:70:79
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA2zpCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NmE1YWE5MThjYmZlYjNlMTI5OTdmMzM4OTBmZWIyNTg5MDdiMzQzMB4XDTIyMDEw
MTA1MDYwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODZkOTczZTNhNTBj
MmI2NmYyZTg4MzA3MGU0NzdiNGJlNjZjYjFkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALE+MdI1DcVBbgG7aSfRUzKuC4U6IY65kpWP64L58jYgJ8+N
R/AatK/fXbNiiEv+qXVZC1X4RA2VoJpupxSUoHcbwDbv0I78E597t3BlFVoghnVR
YIfl4NvXOHV4M/hFwF+KcpNoLW07nqocrAWKrzqi4Mg7kyKt6pcV0HyZS4iXBpDf
SvMFbWsO/6cRzrqHu4Jyos88j44hjIx7b+sewv7AmUPjwYprCHWhWhqSyjmMJ+Xu
nP20lG5PiS1wsYGpkr8CdVjGiFwol2nOMq7y2GJO2RTEMe/Hq2eRBxh8aEo3E3h+
dq7jYuMyetcNkHZnio2RhJB3tj9pvwz6sYAEkT0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSG2XPjpQwrZvLogwcOR3tL5myx0TAfBgNVHSMEGDAWgBQmpaqRjL/rPhKZ
fzOJD+sliQezQzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0pxV3FrWXlfNno0U21YOHppUV9ySllrSHMwTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWQvMTQzM2VhLTEwODAtNDZlNS1iNjEyLTI5N2UyODJkNjZhOC8x
L2h0bHo0NlVNSzJieTZJTUhEa2Q3Uy1ac3NkRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWQv
MTQzM2VhLTEwODAtNDZlNS1iNjEyLTI5N2UyODJkNjZhOC8xL0pxV3FrWXlfNno0
U21YOHppUV9ySllrSHMwTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArl7oDANBgkqhkiG9w0BAQsFAAOC
AQEAY6S9avlfMjudt+trU/C0JBbRXOSsdTejuZBL4jGyLVyP9EGGGCBJuZXn8IRo
ko3YNTSMkvbGcjiED8dRbW1rjwnVsQM5FVPnFr5xp7u06in4W9uN2T2QiG3Y0dDN
fDxnbRAGIR1+Li/3mYaJj+uufZCMtHAp6q3z04rgdhIqXpXgPOBBl9CuKoVhERr6
9XwUvQvrQwWJatkOK9m2WT5VDjo1AmsoqfCqt0+G648RIQyymhPG08E744QJ7JuJ
MHK79PTEy9jts41shawcqILZWTIZ4RlNpW1GAFP530Y0r7kpq2NPIkzpV5nn70/M
eVWINsYTC6dwmFTnXbmiVBZweQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:10 2024 by rpki-client on console-ams.rpki-client.org