Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/hMh0-tL1wigDSC9T7YnZk0qzGGw.roa
File: hMh0-tL1wigDSC9T7YnZk0qzGGw.roa (raw, json)
Hash identifier: PNo1Ex7KuHALjaPAFHzw4mgSa4PM0i1MtP3fLKM4JmI=
Subject key identifier: 84:C8:74:FA:D2:F5:C2:28:03:48:2F:53:ED:89:D9:93:4A:B3:18:6C
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 0661FDA2
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/hMh0-tL1wigDSC9T7YnZk0qzGGw.roa
Signing time: Tue 19 Apr 2022 14:12:27 +0000
ROA not before: Tue 19 Apr 2022 14:12:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206424
IP address blocks: 95.85.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107085218 (0x661fda2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Apr 19 14:12:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84c874fad2f5c22803482f53ed89d9934ab3186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:e5:44:99:67:b0:f8:2c:b5:76:4d:fb:5e:
d3:8a:28:6d:0a:eb:29:50:c2:79:13:7a:7c:c5:5f:
d4:1b:39:70:cf:4a:1e:b9:82:78:a7:01:cf:77:65:
3d:9d:12:e7:8d:66:05:19:98:c6:29:ac:26:23:b5:
f3:6f:12:9f:8b:45:0e:94:4a:44:97:b6:fa:34:a5:
8a:8f:a7:cb:55:31:75:87:4c:a7:d4:8a:3b:79:35:
b3:f3:95:34:1c:f7:df:76:39:04:3d:db:d6:b0:a8:
37:7f:8a:e9:0a:7b:9b:50:f9:41:b5:74:f9:95:5a:
58:10:ac:a0:d6:b9:ae:d1:e0:4c:a9:ff:5e:ac:3a:
37:af:35:63:d5:19:ef:a1:4c:97:4f:37:80:18:d1:
af:2e:ba:d7:23:25:da:5e:3f:f0:4b:c7:24:58:99:
b8:d9:67:44:65:0c:d9:fe:50:43:7f:e8:60:73:eb:
13:58:73:70:dc:28:56:3e:05:4c:0c:4e:ae:28:00:
90:5b:be:ff:d9:88:9e:1f:3c:cf:30:59:b7:d5:b3:
0c:f6:f8:48:23:26:b8:df:6f:79:2f:56:b1:d4:1e:
f9:18:d4:19:b0:f6:93:f2:33:51:fb:b5:1a:d4:1f:
0f:2b:10:17:b9:e8:70:06:e2:1c:dd:5e:97:77:45:
8d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:74:FA:D2:F5:C2:28:03:48:2F:53:ED:89:D9:93:4A:B3:18:6C
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/hMh0-tL1wigDSC9T7YnZk0qzGGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.83.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6a:6c:d2:42:7a:6c:64:61:0d:87:d1:e2:64:b9:3b:39:99:
b5:6e:b3:45:e2:f6:14:3b:53:a4:34:eb:b2:2f:84:66:b6:75:
69:d9:dd:48:32:fe:9c:e5:94:f3:1c:df:1e:cc:de:01:44:ea:
13:55:20:7a:74:a0:87:10:39:50:45:12:85:40:a8:72:de:c3:
bd:56:f2:1f:df:df:55:9c:af:75:d2:95:13:18:d9:79:f0:ef:
b3:ef:5c:ad:83:3e:51:80:4e:18:7e:98:cd:27:d7:25:97:24:
2b:31:41:f9:b7:b6:89:c3:26:55:a9:d1:89:83:3e:bc:39:71:
71:78:da:e0:59:9d:c5:93:90:9f:4d:be:b5:98:da:b0:41:71:
c9:c7:b9:9e:55:42:d9:fe:70:63:70:eb:5c:95:00:11:d9:36:
72:3a:98:65:f1:62:d8:d7:86:dc:c8:19:40:61:34:d6:43:6f:
13:2d:96:e2:3c:36:9e:a5:32:63:ba:ff:36:f7:a2:dd:6f:44:
b8:e6:55:57:f3:26:d9:52:43:eb:aa:69:18:ec:25:83:28:53:
07:ac:43:11:e2:e3:ac:e0:b6:98:07:05:8f:a2:b4:7d:ed:11:
e4:97:26:a5:4a:0d:9a:a2:c5:cf:c1:84:77:5e:1b:95:df:d0:
15:ed:1c:0e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBmH9ojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzM4ZWY0MWIyYzAxMDVhOTFjY2JiOWM4OTMzN2ZhZWIxMjlmZjg0MB4XDTIyMDQx
OTE0MTIyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODRjODc0ZmFkMmY1
YzIyODAzNDgyZjUzZWQ4OWQ5OTM0YWIzMTg2YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/I5USZZ7D4LLV2Tfte04oobQrrKVDCeRN6fMVf1Bs5cM9K
HrmCeKcBz3dlPZ0S541mBRmYximsJiO1828Sn4tFDpRKRJe2+jSlio+ny1UxdYdM
p9SKO3k1s/OVNBz333Y5BD3b1rCoN3+K6Qp7m1D5QbV0+ZVaWBCsoNa5rtHgTKn/
Xqw6N681Y9UZ76FMl083gBjRry661yMl2l4/8EvHJFiZuNlnRGUM2f5QQ3/oYHPr
E1hzcNwoVj4FTAxOrigAkFu+/9mInh88zzBZt9WzDPb4SCMmuN9veS9WsdQe+RjU
GbD2k/IzUfu1GtQfDysQF7nocAbiHN1el3dFjRECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSEyHT60vXCKANIL1PtidmTSrMYbDAfBgNVHSMEGDAWgBSDOO9BssAQWpHM
u5yJM3+usSn/hDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d6anZRYkxBRUZxUnpMdWNpVE5fcnJFcF80US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8x
L2hNaDAtdEwxd2lnRFNDOVQ3WW5aazBxekdHdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
NDBkOTk2LWEyY2QtNDFmMS1hNzM4LTI4ZmM3Nzk2Nzc2My8xL2d6anZRYkxBRUZx
UnpMdWNpVE5fcnJFcF80US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF9VUzANBgkqhkiG9w0BAQsFAAOC
AQEAg2ps0kJ6bGRhDYfR4mS5OzmZtW6zReL2FDtTpDTrsi+EZrZ1adndSDL+nOWU
8xzfHszeAUTqE1UgenSghxA5UEUShUCoct7DvVbyH9/fVZyvddKVExjZefDvs+9c
rYM+UYBOGH6YzSfXJZckKzFB+be2icMmVanRiYM+vDlxcXja4FmdxZOQn02+tZja
sEFxyce5nlVC2f5wY3DrXJUAEdk2cjqYZfFi2NeG3MgZQGE01kNvEy2W4jw2nqUy
Y7r/Nvei3W9EuOZVV/Mm2VJD66ppGOwlgyhTB6xDEeLjrOC2mAcFj6K0fe0R5Jcm
pUoNmqLFz8GEd14bld/QFe0cDg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:07 2023 by rpki-client on console-fra.rpki-client.org