Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/HLs9KsJLtbdnVs3hQJO1XXZd2kE.roa
File: HLs9KsJLtbdnVs3hQJO1XXZd2kE.roa (raw, json)
Hash identifier: PtFtpqf9SLYLJFLJkovNWCS3rEGPHFVmqH5Jl6CNtzw=
Subject key identifier: 1C:BB:3D:2A:C2:4B:B5:B7:67:56:CD:E1:40:93:B5:5D:76:5D:DA:41
Certificate issuer: /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial: 01856EC1FB9752CB4FADED552369E9EB9DE9
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/HLs9KsJLtbdnVs3hQJO1XXZd2kE.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61094
IP address blocks: 185.143.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fb:97:52:cb:4f:ad:ed:55:23:69:e9:eb:9d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cbb3d2ac24bb5b76756cde14093b55d765dda41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:3c:03:5e:3a:69:bd:9a:90:6e:14:c2:64:
10:b0:0a:ed:76:dc:dc:18:85:90:78:79:0a:e6:ed:
41:a8:6d:0f:86:0a:fc:3f:06:74:48:d2:80:fc:4a:
d6:7d:d1:a8:61:17:b4:de:91:22:66:c8:7e:72:91:
4d:39:c9:57:68:17:65:82:99:02:df:9b:bd:2e:83:
3e:f8:36:36:0e:88:20:69:6a:ff:02:91:a4:7b:f4:
f5:74:64:46:db:c0:86:8f:ac:57:e7:37:b5:e4:c4:
22:fe:51:cf:c3:be:c9:e2:dc:dc:48:2d:84:e1:97:
54:d4:ac:4a:06:a3:b1:46:dc:80:22:70:fc:5c:65:
fb:cd:e1:63:91:8c:75:4b:61:1b:fc:61:9d:3d:d1:
b8:33:fd:93:ef:a9:fc:93:1f:71:f8:07:5d:cb:5c:
51:f2:ca:4c:43:6c:ea:85:16:30:ce:11:03:8e:db:
2d:f2:44:87:15:b8:69:13:2b:b3:50:20:ec:08:83:
07:e2:8a:61:0b:cd:47:af:37:f8:ac:a8:db:5e:5a:
5d:7f:de:b0:c8:18:4a:69:e0:0d:a3:23:6c:2f:55:
ad:66:81:a6:8f:e9:fb:18:9e:36:d3:79:7d:2e:97:
d2:d7:38:94:ad:e7:88:15:a9:5c:7c:97:c6:e6:80:
c8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:3D:2A:C2:4B:B5:B7:67:56:CD:E1:40:93:B5:5D:76:5D:DA:41
X509v3 Authority Key Identifier:
keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/HLs9KsJLtbdnVs3hQJO1XXZd2kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:a6:7c:1e:d9:9a:90:54:5e:d6:ee:e2:e1:36:bf:c8:f5:5e:
a8:0f:94:88:b9:0f:c7:67:17:e7:65:68:f2:e1:7a:97:da:1e:
a3:a5:76:48:30:b1:b7:b4:e2:96:db:ac:2a:65:d2:d2:da:72:
a5:e1:91:70:c2:00:4d:f5:62:94:cb:5d:1d:70:b5:b1:69:55:
bd:49:ef:9a:3e:66:f9:f5:e5:06:8e:29:73:2a:6c:b3:64:83:
9b:54:f6:c8:cb:cd:ad:51:8d:d7:ec:b6:80:67:37:63:46:22:
b7:61:1c:5e:0c:5c:f4:9b:60:3b:9a:07:da:cf:d7:ef:f9:97:
42:cd:f8:70:cc:cb:55:43:6c:63:2e:aa:d9:2d:d2:c2:42:a8:
f4:39:a4:4e:c1:cd:89:3e:1a:1d:6a:8d:9e:14:9c:14:7e:85:
d8:fa:69:58:63:a8:38:ec:ba:58:f5:6f:3b:70:96:95:fe:a1:
c6:7c:3b:a4:8a:ff:af:a9:9b:24:f6:a3:82:0c:ef:3a:10:e5:
9b:4e:84:00:0b:bc:ea:72:52:07:45:d4:26:b2:48:44:f8:7f:
06:c7:40:7d:e1:fa:c6:6f:67:c8:0a:87:c9:0b:1c:2c:c4:85:
61:94:b9:68:23:9a:98:23:7b:51:0a:cf:ac:e2:50:dd:c4:bc:
64:3b:a6:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuwfuXUstPre1VI2np653pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGM3YzAzNjRmMTA5M2NmYzU4NGM5MzAzNzAyNDEwNGZi
NDg1NGEwHhcNMjMwMTAxMTkxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2JiM2QyYWMyNGJiNWI3Njc1NmNkZTE0MDkzYjU1ZDc2NWRkYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0A8A146ab2akG4UwmQQsArtdtzc
GIWQeHkK5u1BqG0Phgr8PwZ0SNKA/ErWfdGoYRe03pEiZsh+cpFNOclXaBdlgpkC
35u9LoM++DY2DoggaWr/ApGke/T1dGRG28CGj6xX5ze15MQi/lHPw77J4tzcSC2E
4ZdU1KxKBqOxRtyAInD8XGX7zeFjkYx1S2Eb/GGdPdG4M/2T76n8kx9x+Addy1xR
8spMQ2zqhRYwzhEDjtst8kSHFbhpEyuzUCDsCIMH4ophC81Hrzf4rKjbXlpdf96w
yBhKaeANoyNsL1WtZoGmj+n7GJ4203l9LpfS1ziUreeIFalcfJfG5oDIKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBy7PSrCS7W3Z1bN4UCTtV12XdpBMB8GA1UdIwQY
MBaAFBhMfANk8Qk8/FhMkwNwJBBPtIVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAt
OThmOTQwZTRkN2MxLzEvSExzOUtzSkx0YmRuVnMzaFFKTzFYWFpkMmtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NjZkZDUtY2ZhMy00MGU3LWFhMzAtOThmOTQwZTRkN2Mx
LzEvR0V4OEEyVHhDVHo4V0V5VEEzQWtFRS0waFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY/AMA0G
CSqGSIb3DQEBCwUAA4IBAQBOpnwe2ZqQVF7W7uLhNr/I9V6oD5SIuQ/HZxfnZWjy
4XqX2h6jpXZIMLG3tOKW26wqZdLS2nKl4ZFwwgBN9WKUy10dcLWxaVW9Se+aPmb5
9eUGjilzKmyzZIObVPbIy82tUY3X7LaAZzdjRiK3YRxeDFz0m2A7mgfaz9fv+ZdC
zfhwzMtVQ2xjLqrZLdLCQqj0OaROwc2JPhodao2eFJwUfoXY+mlYY6g47LpY9W87
cJaV/qHGfDukiv+vqZsk9qOCDO86EOWbToQAC7zqclIHRdQmskhE+H8Gx0B94frG
b2fICofJCxwsxIVhlLloI5qYI3tRCs+s4lDdxLxkO6aS
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:42:15 2025 by rpki-client