Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Hl0PtSESe23476wV8AriG9zWX5k.roa
File: Hl0PtSESe23476wV8AriG9zWX5k.roa (raw, json)
Hash identifier: hHwVTNRhacV8bseccPvlwHJAvj6aS/swp3x7usq+4yo=
Subject key identifier: 1E:5D:0F:B5:21:12:7B:6D:F8:EF:AC:15:F0:0A:E2:1B:DC:D6:5F:99
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 38420297
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Hl0PtSESe23476wV8AriG9zWX5k.roa
Signing time: Wed 11 May 2022 15:28:02 +0000
ROA not before: Wed 11 May 2022 15:28:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 109.248.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943850135 (0x38420297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 11 15:28:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e5d0fb521127b6df8efac15f00ae21bdcd65f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:56:09:ff:da:e6:ae:d2:08:b2:ba:e5:4f:d9:
2c:70:40:09:aa:d6:8e:62:f1:c2:51:50:31:ce:33:
d5:66:92:33:77:be:ff:c2:3c:92:cc:d8:62:05:9b:
90:27:97:d9:82:12:97:0f:04:1b:3f:a4:7e:2f:69:
89:24:a5:b1:5b:88:65:4d:e2:9d:cf:af:99:20:ee:
df:4c:93:b8:4d:af:c6:ab:e9:e7:ce:69:70:78:46:
62:a2:ff:5c:e2:21:b6:ec:d6:63:f6:de:33:ff:16:
df:c1:72:ad:81:de:02:24:bf:c1:74:5d:22:ed:7e:
31:3c:df:eb:c6:cb:21:0e:87:a5:bb:61:e2:43:11:
32:41:db:66:9f:a7:f2:c8:fb:ae:cb:e3:44:35:ae:
e6:2e:36:7d:bf:1d:12:5c:6f:b5:9c:c5:25:24:ee:
73:9e:63:21:ce:45:6b:d9:99:20:97:52:d8:66:cf:
95:5e:85:da:36:be:7a:2c:18:1a:84:36:a6:28:ed:
31:62:c4:ac:6f:f6:ee:13:c3:15:0d:68:33:c5:77:
1d:e9:85:fe:0c:b3:e8:25:d3:ee:77:ea:aa:10:04:
05:54:06:78:db:69:8c:42:15:6f:a1:7d:b4:55:ac:
94:e3:a7:3f:2e:97:78:a4:52:58:7a:29:16:d2:45:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5D:0F:B5:21:12:7B:6D:F8:EF:AC:15:F0:0A:E2:1B:DC:D6:5F:99
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Hl0PtSESe23476wV8AriG9zWX5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.42.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:37:c0:f4:e8:85:6e:a5:56:14:f6:01:58:ef:6c:f0:4a:38:
99:af:fe:71:fb:75:9a:e3:89:eb:17:d8:9d:98:01:ca:9a:b2:
da:23:a8:da:fb:10:f6:6b:86:44:e4:a8:20:58:3e:c2:c2:71:
05:76:f2:7a:fd:e2:ac:f4:a0:c2:c6:bd:25:82:56:54:3a:f2:
0a:ea:e6:9b:bd:5f:c9:2c:0e:2f:84:af:63:fe:cf:13:6f:84:
db:47:3f:6c:c5:2a:52:4a:e8:d1:25:8c:d4:f0:7b:2c:ea:a3:
9d:fa:1d:cb:c6:f8:72:5c:71:ec:92:91:90:68:04:79:e4:ca:
17:9e:c2:ca:71:82:40:2a:9e:1b:65:68:d4:e5:c1:e8:fa:57:
26:be:f5:b7:ba:27:a0:59:50:83:4d:54:4c:cb:50:50:29:6d:
0d:1f:b0:9b:fb:ed:b0:9f:9e:af:e0:35:83:0c:81:ea:1d:56:
32:02:2a:fe:4c:35:64:d2:21:39:3f:ec:bd:e6:5c:29:78:92:
54:ea:c5:01:1c:bb:3e:0e:6c:43:94:53:bc:4b:0a:ee:42:b3:
ab:c9:c0:33:4d:56:2c:d9:67:2e:32:2a:29:91:f7:ab:ec:16:
6d:80:9d:b4:34:48:66:81:76:51:28:70:71:e5:d6:fd:47:75:
ad:6f:d3:85
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOEIClzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ODViODU3NzA2ZGFjNTRlMjBjYTBkMTFiZDY0MTZjYjYzNDIwM2I0MB4XDTIyMDUx
MTE1MjgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWU1ZDBmYjUyMTEy
N2I2ZGY4ZWZhYzE1ZjAwYWUyMWJkY2Q2NWY5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAONWCf/a5q7SCLK65U/ZLHBACarWjmLxwlFQMc4z1WaSM3e+
/8I8kszYYgWbkCeX2YISlw8EGz+kfi9piSSlsVuIZU3inc+vmSDu30yTuE2vxqvp
585pcHhGYqL/XOIhtuzWY/beM/8W38FyrYHeAiS/wXRdIu1+MTzf68bLIQ6Hpbth
4kMRMkHbZp+n8sj7rsvjRDWu5i42fb8dElxvtZzFJSTuc55jIc5Fa9mZIJdS2GbP
lV6F2ja+eiwYGoQ2pijtMWLErG/27hPDFQ1oM8V3HemF/gyz6CXT7nfqqhAEBVQG
eNtpjEIVb6F9tFWslOOnPy6XeKRSWHopFtJF0Y0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQeXQ+1IRJ7bfjvrBXwCuIb3NZfmTAfBgNVHSMEGDAWgBSIW4V3BtrFTiDK
DRG9ZBbLY0IDtDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2lGdUZkd2JheFU0Z3lnMFJ2V1FXeTJOQ0E3US5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvMzIxY2RjLTIxNDMtNGI1Yy05NzMzLTE2Njk5Yzk2ZGQ1ZS8x
L0hsMFB0U0VTZTIzNDc2d1Y4QXJpRzl6V1g1ay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
MzIxY2RjLTIxNDMtNGI1Yy05NzMzLTE2Njk5Yzk2ZGQ1ZS8xL2lGdUZkd2JheFU0
Z3lnMFJ2V1FXeTJOQ0E3US5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG34KjANBgkqhkiG9w0BAQsFAAOC
AQEAbzfA9OiFbqVWFPYBWO9s8Eo4ma/+cft1muOJ6xfYnZgBypqy2iOo2vsQ9muG
ROSoIFg+wsJxBXbyev3irPSgwsa9JYJWVDryCurmm71fySwOL4SvY/7PE2+E20c/
bMUqUkro0SWM1PB7LOqjnfody8b4clxx7JKRkGgEeeTKF57CynGCQCqeG2Vo1OXB
6PpXJr71t7onoFlQg01UTMtQUCltDR+wm/vtsJ+er+A1gwyB6h1WMgIq/kw1ZNIh
OT/sveZcKXiSVOrFARy7Pg5sQ5RTvEsK7kKzq8nAM01WLNlnLjIqKZH3q+wWbYCd
tDRIZoF2UShwceXW/Ud1rW/ThQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:51 2023 by rpki-client on console-ams.rpki-client.org