Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/Hsn12taroC_crzVvso9gx-4cBq4.roa
File: Hsn12taroC_crzVvso9gx-4cBq4.roa (raw, json)
Hash identifier: u21mXwuQ6SRnPGrq6zskir06GrID8aH2IeVfHDXs9cU=
Subject key identifier: 1E:C9:F5:DA:D6:AB:A0:2F:DC:AF:35:6F:B2:8F:60:C7:EE:1C:06:AE
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 02C665
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/Hsn12taroC_crzVvso9gx-4cBq4.roa
Signing time: Mon 28 Feb 2022 05:58:51 +0000
ROA not before: Mon 28 Feb 2022 05:58:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199811
IP address blocks: 185.214.152.0/22 maxlen: 22
185.74.35.0/24 maxlen: 24
185.74.32.0/22 maxlen: 22
185.74.32.0/24 maxlen: 24
185.43.244.0/22 maxlen: 22
109.237.60.0/22 maxlen: 22
2a01:71e0::/32 maxlen: 32
2a05:4880::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 181861 (0x2c665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Feb 28 05:58:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ec9f5dad6aba02fdcaf356fb28f60c7ee1c06ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:bc:ef:b8:5b:85:9c:f3:39:bd:3a:a5:32:
5e:ef:13:ad:c6:d0:c1:13:4a:0d:6e:9b:fe:56:7a:
ff:ec:db:f9:fc:6a:cb:60:c6:b9:d5:05:4f:cb:78:
e0:74:7f:66:f2:6d:2e:cc:3a:8c:a7:f5:e9:3e:ae:
e0:25:24:df:af:ce:52:55:28:c5:36:5a:e6:ae:d3:
6d:e2:21:5c:e9:ea:0f:49:2d:ed:eb:b7:a7:9b:cc:
5f:b4:62:6b:37:f6:5b:5d:0f:05:41:af:3b:62:a8:
05:4d:1d:54:fd:d5:79:42:76:c9:c0:53:c5:3a:2f:
55:5a:41:5d:cc:42:3b:db:9c:37:f3:eb:4e:14:92:
76:d8:87:12:68:92:02:e5:e7:53:35:06:cb:51:fc:
71:ed:18:da:ff:ff:5b:14:fb:df:58:0b:47:07:23:
10:b2:e2:c5:84:eb:9f:b3:59:5e:42:28:7c:0a:d5:
46:e4:5a:c7:ba:f9:38:ab:e9:2d:4a:dd:fd:42:80:
c7:5b:71:94:3d:68:0e:69:ef:bb:23:4a:89:1c:e8:
86:40:03:f3:6e:16:d9:d2:ef:12:2a:0a:22:84:74:
58:a9:9f:e3:76:34:df:d0:90:ea:a3:89:4c:c9:64:
9a:7a:1e:39:bb:36:a3:69:41:45:54:06:87:3c:bb:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:F5:DA:D6:AB:A0:2F:DC:AF:35:6F:B2:8F:60:C7:EE:1C:06:AE
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/Hsn12taroC_crzVvso9gx-4cBq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.60.0/22
185.43.244.0/22
185.74.32.0/22
185.214.152.0/22
IPv6:
2a01:71e0::/32
2a05:4880::/29
Signature Algorithm: sha256WithRSAEncryption
8c:50:f0:c2:f5:cf:e3:60:85:7c:3a:62:de:3c:5a:39:c7:99:
63:4f:20:53:4a:8f:2b:fe:e1:a3:ec:6a:bb:18:99:a4:cc:12:
c8:97:68:2a:c3:43:18:c7:5c:29:58:84:fd:e5:de:a4:77:8d:
28:aa:4c:49:1a:ab:4d:23:86:e0:e2:e9:f5:67:5e:4d:9c:87:
c6:db:73:27:e8:2f:f7:50:3d:e6:0f:e1:00:7e:27:dd:cc:f0:
b4:f3:b4:4b:3f:45:31:90:a5:b6:a0:69:ad:81:ee:8e:ba:50:
fb:3b:2f:8d:5b:f9:a1:35:aa:d3:4d:92:4b:00:dc:8d:67:68:
9f:13:4b:45:07:e3:93:5f:b3:89:e5:41:3c:82:ae:d3:37:64:
af:61:f8:43:e3:38:c2:14:61:56:76:e0:14:89:6a:89:8f:50:
70:8a:7a:c0:d0:d6:a8:e6:b0:ad:74:c2:7d:d8:87:86:47:05:
db:35:7e:4a:ee:0d:12:df:08:61:3c:14:cc:1b:6d:b0:6a:3a:
12:23:77:bc:73:94:8d:be:5b:91:ac:d0:61:b1:05:8c:a7:6f:
32:30:7b:ff:56:1e:a9:a5:c7:16:6e:26:a7:95:dc:26:5f:ad:
75:4e:53:12:da:9a:52:40:15:d4:4e:fe:e9:b4:62:71:70:f8:
2a:96:c0:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIDAsZlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDlj
OTNlYjhhN2QxOWZmZDc4MDQ3NjVhY2ZkY2YyMjYwYzZjMGQ2NTkwHhcNMjIwMjI4
MDU1ODUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxZWM5ZjVkYWQ2YWJh
MDJmZGNhZjM1NmZiMjhmNjBjN2VlMWMwNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1vG877hbhZzzOb06pTJe7xOtxtDBE0oNbpv+Vnr/7Nv5/GrL
YMa51QVPy3jgdH9m8m0uzDqMp/XpPq7gJSTfr85SVSjFNlrmrtNt4iFc6eoPSS3t
67enm8xftGJrN/ZbXQ8FQa87YqgFTR1U/dV5QnbJwFPFOi9VWkFdzEI725w38+tO
FJJ22IcSaJIC5edTNQbLUfxx7Rja//9bFPvfWAtHByMQsuLFhOufs1leQih8CtVG
5FrHuvk4q+ktSt39QoDHW3GUPWgOae+7I0qJHOiGQAPzbhbZ0u8SKgoihHRYqZ/j
djTf0JDqo4lMyWSaeh45uzajaUFFVAaHPLtC1wIDAQABo4ICMTCCAi0wHQYDVR0O
BBYEFB7J9drWq6Av3K81b7KPYMfuHAauMB8GA1UdIwQYMBaAFJyT64p9Gf/XgEdl
rP3PImDGwNZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
bkpQcmluMFpfOWVBUjJXc19jOGlZTWJBMWxrLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83MC9jM2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBlLzEv
SHNuMTJ0YXJvQ19jcnpWdnNvOWd4LTRjQnE0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9j
M2M0NWYtNWYxYy00N2YyLTkxMGQtMzk2YWQ3MDEyMzBlLzEvbkpQcmluMFpfOWVB
UjJXc19jOGlZTWJBMWxrLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcG
CCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCbe08AwQCuSv0AwQCuUogAwQCudaY
MBQEAgACMA4DBQAqAXHgAwUDKgVIgDANBgkqhkiG9w0BAQsFAAOCAQEAjFDwwvXP
42CFfDpi3jxaOceZY08gU0qPK/7ho+xquxiZpMwSyJdoKsNDGMdcKViE/eXepHeN
KKpMSRqrTSOG4OLp9WdeTZyHxttzJ+gv91A95g/hAH4n3czwtPO0Sz9FMZCltqBp
rYHujrpQ+zsvjVv5oTWq002SSwDcjWdonxNLRQfjk1+zieVBPIKu0zdkr2H4Q+M4
whRhVnbgFIlqiY9QcIp6wNDWqOawrXTCfdiHhkcF2zV+Su4NEt8IYTwUzBttsGo6
EiN3vHOUjb5bkazQYbEFjKdvMjB7/1YeqaXHFm4mp5XcJl+tdU5TEtqaUkAV1E7+
6bRicXD4KpbA8w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:23 2024 by rpki-client on console-ams.rpki-client.org