Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/HUoP23z9Zr3py9BILI5nBX1k71M.roa
File: HUoP23z9Zr3py9BILI5nBX1k71M.roa (raw, json)
Hash identifier: 8XtbaVXRLYodiBuWw1LLMXUYZbvNpEYuJR481RE96u0=
Subject key identifier: 1D:4A:0F:DB:7C:FD:66:BD:E9:CB:D0:48:2C:8E:67:05:7D:64:EF:53
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01827C4883A1C676B042685EBEA95DDC5636
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/HUoP23z9Zr3py9BILI5nBX1k71M.roa
Signing time: Mon 08 Aug 2022 07:08:23 +0000
ROA not before: Mon 08 Aug 2022 07:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203576
IP address blocks: 185.173.145.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:48:83:a1:c6:76:b0:42:68:5e:be:a9:5d:dc:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Aug 8 07:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d4a0fdb7cfd66bde9cbd0482c8e67057d64ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:a5:68:c2:19:33:af:fc:83:23:56:b1:f6:
c1:ec:3e:bb:69:a8:59:26:ba:17:45:74:6f:c7:1c:
0b:e9:7f:a7:f5:b4:59:0f:f8:53:d1:8c:8f:10:08:
db:b6:25:de:bc:65:81:07:49:1e:78:b8:ba:c0:a6:
dc:e6:af:a1:6c:91:db:4a:b9:0a:16:e9:9c:07:e9:
a8:70:ad:7f:5a:cb:69:34:e9:fb:4b:76:6d:8d:af:
55:06:9f:d2:f7:f7:43:6f:2f:df:da:1b:b8:01:f9:
3f:55:ea:ea:4b:6d:1a:70:ef:f1:95:cd:98:3a:99:
df:8b:a1:5b:cf:52:96:45:c9:31:a4:c3:5b:00:7b:
db:38:23:1b:d4:fc:e7:67:dc:68:14:e2:a9:c8:7b:
7a:5c:2b:e1:e4:23:53:67:9b:0a:34:91:9d:ec:a4:
33:09:67:2a:26:0c:75:e6:93:3d:d3:3c:55:c5:b8:
ac:42:fb:b9:54:df:5b:1a:81:0c:ba:eb:98:68:16:
27:e5:5c:ce:9a:33:31:31:49:cf:d4:51:cb:16:66:
c7:81:e9:50:78:da:32:ef:7d:a2:52:ef:ee:b4:6f:
4b:1d:7f:27:64:45:af:45:a6:97:94:2b:10:4c:75:
a9:1e:a8:62:75:cc:4d:66:26:33:58:f9:4a:9b:b4:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4A:0F:DB:7C:FD:66:BD:E9:CB:D0:48:2C:8E:67:05:7D:64:EF:53
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/HUoP23z9Zr3py9BILI5nBX1k71M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.145.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b1:ce:8f:7e:58:f9:13:c9:12:bd:08:19:5f:0d:29:b8:26:
be:6b:26:41:b9:e1:ef:03:53:94:0f:fe:8a:5e:1b:15:b4:8c:
3f:2e:0f:2c:37:1b:eb:f0:f0:c9:cc:a3:dc:f1:28:28:44:17:
db:5b:c4:3a:b6:4a:94:52:8a:8d:b3:b6:04:dd:df:3b:22:13:
ab:f4:a6:d7:b2:21:26:7d:c4:8e:8a:7e:be:67:63:bf:36:c6:
cc:a3:f1:d9:d4:ea:a3:62:74:71:ff:a1:41:30:10:01:47:3e:
df:df:a4:52:89:d4:97:78:dc:d5:41:41:38:35:2f:5f:bc:35:
2d:14:55:9d:3e:06:e3:ce:db:04:c4:97:87:24:c5:72:b0:9f:
32:a0:d6:20:f4:f9:80:ad:e0:96:92:30:ba:82:fd:50:9c:23:
27:32:6e:55:d8:a3:bd:a8:b2:63:26:6b:bd:1b:8b:7d:58:ce:
34:bb:93:61:cf:1d:20:f8:66:db:21:83:e0:0c:f4:9f:24:e8:
e9:e1:1c:32:11:ff:e4:7a:d8:24:57:4c:14:02:30:52:bc:5b:
c5:f8:79:9c:f3:6b:db:98:76:32:b9:19:46:37:89:8a:3b:ba:
9d:4b:2d:38:87:78:18:f7:88:29:f3:ca:16:93:88:85:e8:ca:
7c:49:81:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJ8SIOhxnawQmhevqld3FY2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjIwODA4MDcwODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDRhMGZkYjdjZmQ2NmJkZTljYmQwNDgyYzhlNjcwNTdkNjRlZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvKlaMIZM6/8gyNWsfbB7D67aahZ
JroXRXRvxxwL6X+n9bRZD/hT0YyPEAjbtiXevGWBB0keeLi6wKbc5q+hbJHbSrkK
FumcB+mocK1/WstpNOn7S3Ztja9VBp/S9/dDby/f2hu4Afk/VerqS20acO/xlc2Y
Opnfi6Fbz1KWRckxpMNbAHvbOCMb1PznZ9xoFOKpyHt6XCvh5CNTZ5sKNJGd7KQz
CWcqJgx15pM90zxVxbisQvu5VN9bGoEMuuuYaBYn5VzOmjMxMUnP1FHLFmbHgelQ
eNoy732iUu/utG9LHX8nZEWvRaaXlCsQTHWpHqhidcxNZiYzWPlKm7T8UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1KD9t8/Wa96cvQSCyOZwV9ZO9TMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvSFVvUDIzejlacjNweTlCSUxJNW5CWDFrNzFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua2RMA0G
CSqGSIb3DQEBCwUAA4IBAQBUsc6Pflj5E8kSvQgZXw0puCa+ayZBueHvA1OUD/6K
XhsVtIw/Lg8sNxvr8PDJzKPc8SgoRBfbW8Q6tkqUUoqNs7YE3d87IhOr9KbXsiEm
fcSOin6+Z2O/NsbMo/HZ1OqjYnRx/6FBMBABRz7f36RSidSXeNzVQUE4NS9fvDUt
FFWdPgbjztsExJeHJMVysJ8yoNYg9PmAreCWkjC6gv1QnCMnMm5V2KO9qLJjJmu9
G4t9WM40u5Nhzx0g+GbbIYPgDPSfJOjp4RwyEf/ketgkV0wUAjBSvFvF+Hmc82vb
mHYyuRlGN4mKO7qdSy04h3gY94gp88oWk4iF6Mp8SYGF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org