Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ihp1142nPj5kQp9YLDlzIuUt2kM.roa
File: ihp1142nPj5kQp9YLDlzIuUt2kM.roa (raw, json)
Hash identifier: 6wx/Eic+danoXTXEH6UBdofG27076MpHlJrtaqZtarY=
Subject key identifier: 8A:1A:75:D7:8D:A7:3E:3E:64:42:9F:58:2C:39:73:22:E5:2D:DA:43
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018243BE0749BB136EBB89A930FDA6A79934
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ihp1142nPj5kQp9YLDlzIuUt2kM.roa
Signing time: Thu 28 Jul 2022 07:38:23 +0000
ROA not before: Thu 28 Jul 2022 07:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6453
IP address blocks: 176.236.0.0/16 maxlen: 24
85.153.128.0/17 maxlen: 24
212.252.0.0/15 maxlen: 24
91.93.0.0/16 maxlen: 24
195.33.192.0/18 maxlen: 24
213.254.128.0/19 maxlen: 24
213.74.0.0/16 maxlen: 24
176.88.0.0/16 maxlen: 24
84.51.0.0/18 maxlen: 24
217.131.0.0/16 maxlen: 24
213.14.207.0/24 maxlen: 24
176.232.0.0/14 maxlen: 24
213.14.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:be:07:49:bb:13:6e:bb:89:a9:30:fd:a6:a7:99:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jul 28 07:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a1a75d78da73e3e64429f582c397322e52dda43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7b:2f:8b:81:f7:22:35:13:6f:d7:3d:6f:29:
39:b1:30:04:08:90:46:6e:cb:b7:c5:69:9c:87:18:
af:48:c8:27:08:a1:44:4a:ee:aa:30:be:18:f3:43:
63:0f:fa:8c:03:68:70:da:ed:5f:55:d2:c5:a8:dc:
26:83:62:b2:00:57:9c:6a:46:4f:a7:d8:a4:59:d1:
eb:97:90:fc:86:3f:28:bf:65:e8:4d:0d:cb:7a:c4:
24:6a:66:60:b4:c9:35:2f:63:6d:1a:80:6c:21:03:
7a:42:40:4c:1c:dd:7e:40:69:93:67:42:af:ff:63:
c1:b2:98:c1:e3:83:c6:b5:06:5b:b5:e6:b4:e0:f4:
53:f6:59:5f:ae:dc:ab:91:3e:91:3e:05:23:b2:f3:
6c:98:1c:b8:6d:a2:9c:1a:79:d9:8a:85:84:fc:80:
62:82:50:2d:c6:5c:81:b8:30:c6:3b:c8:ce:68:7f:
6a:b5:a1:b7:95:c3:6c:41:e4:9c:0d:5e:4c:06:cd:
2e:41:1a:82:39:2b:a3:9a:a1:38:38:68:ec:92:ae:
4f:8c:eb:bd:9e:c5:0a:b6:f9:06:20:bc:8f:27:96:
5f:0e:ab:5b:a8:ef:51:11:4e:34:99:3f:4e:16:d2:
99:e2:f2:07:32:3e:b2:ee:8e:ae:35:fc:2f:4c:da:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1A:75:D7:8D:A7:3E:3E:64:42:9F:58:2C:39:73:22:E5:2D:DA:43
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/ihp1142nPj5kQp9YLDlzIuUt2kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.51.0.0/18
85.153.128.0/17
91.93.0.0/16
176.88.0.0/16
176.232.0.0-176.236.255.255
195.33.192.0/18
212.252.0.0/15
213.14.0.0/16
213.74.0.0/16
213.254.128.0/19
217.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:0d:5b:87:f8:73:0e:32:d6:d5:a3:e4:3b:cc:20:31:f1:e9:
40:3d:1d:ba:16:8e:a4:c4:bd:a1:31:3f:af:0d:cd:99:eb:8d:
9e:89:5c:44:5d:3e:0d:2d:77:7d:f3:e2:7a:7e:c4:88:9c:13:
1e:83:04:8b:fe:c4:99:d7:a4:f2:3f:f3:82:68:ae:8b:fb:96:
d4:7e:62:21:bb:37:97:64:8a:24:56:68:f9:2a:97:09:54:9c:
a5:8c:40:b2:52:4e:e3:6a:09:42:17:ea:d4:bf:66:0c:b9:7b:
7f:18:b8:6e:33:a4:36:db:92:40:05:35:b1:0a:db:11:c5:c5:
9d:a9:64:16:b7:ce:58:04:06:e0:e1:9c:cd:f2:cc:fa:90:99:
e9:a4:5a:0f:de:c3:76:d9:66:01:26:5c:b2:01:76:81:13:b9:
a0:19:3d:d2:72:c1:f6:94:7b:bf:46:0f:c4:97:25:93:f7:3d:
1b:64:d8:92:77:da:d2:b0:4c:e1:cd:13:b8:e3:d8:a2:d4:41:
ee:8c:57:d6:27:ba:7b:a6:9f:03:ba:4f:00:99:4e:9e:52:cc:
d4:c5:09:0d:01:03:0a:33:9f:a3:cf:0e:95:a0:f7:5d:03:81:
b5:3e:fc:f5:da:e1:32:d6:ae:61:c8:96:eb:56:87:8a:77:73:
1c:93:5a:f0
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYJDvgdJuxNuu4mpMP2mp5k0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjIwNzI4MDczODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTFhNzVkNzhkYTczZTNlNjQ0MjlmNTgyYzM5NzMyMmU1MmRkYTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3svi4H3IjUTb9c9byk5sTAECJBG
bsu3xWmchxivSMgnCKFESu6qML4Y80NjD/qMA2hw2u1fVdLFqNwmg2KyAFecakZP
p9ikWdHrl5D8hj8ov2XoTQ3LesQkamZgtMk1L2NtGoBsIQN6QkBMHN1+QGmTZ0Kv
/2PBspjB44PGtQZbtea04PRT9llfrtyrkT6RPgUjsvNsmBy4baKcGnnZioWE/IBi
glAtxlyBuDDGO8jOaH9qtaG3lcNsQeScDV5MBs0uQRqCOSujmqE4OGjskq5PjOu9
nsUKtvkGILyPJ5ZfDqtbqO9REU40mT9OFtKZ4vIHMj6y7o6uNfwvTNrBjQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFIoaddeNpz4+ZEKfWCw5cyLlLdpDMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvaWhwMTE0Mm5QajVrUXA5WUxEbHpJdVV0MmtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQGVDMAAwQH
VZmAAwMAW10DAwCwWDAKAwMDsOgDAwCw7AMEBsMhwAMDAdT8AwMA1Q4DAwDVSgME
BdX+gAMDANmDMA0GCSqGSIb3DQEBCwUAA4IBAQAsDVuH+HMOMtbVo+Q7zCAx8elA
PR26Fo6kxL2hMT+vDc2Z642eiVxEXT4NLXd98+J6fsSInBMegwSL/sSZ16TyP/OC
aK6L+5bUfmIhuzeXZIokVmj5KpcJVJyljECyUk7jaglCF+rUv2YMuXt/GLhuM6Q2
25JABTWxCtsRxcWdqWQWt85YBAbg4ZzN8sz6kJnppFoP3sN22WYBJlyyAXaBE7mg
GT3ScsH2lHu/Rg/ElyWT9z0bZNiSd9rSsEzhzRO449ii1EHujFfWJ7p7pp8Duk8A
mU6eUszUxQkNAQMKM5+jzw6VoPddA4G1Pvz12uEy1q5hyJbrVoeKd3Mck1rw
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:22 2024 by rpki-client on console-ams.rpki-client.org