Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/H2c6ycro3C1JbhUiISrJsD4f4XU.roa
File: H2c6ycro3C1JbhUiISrJsD4f4XU.roa (raw, json)
Hash identifier: H/u5HPrrzhDMnKyzTTaSm2Mvi37bQQ/VfMSqMWxz+AQ=
Subject key identifier: 1F:67:3A:C9:CA:E8:DC:2D:49:6E:15:22:21:2A:C9:B0:3E:1F:E1:75
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 0E2C87E5
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/H2c6ycro3C1JbhUiISrJsD4f4XU.roa
Signing time: Tue 29 Mar 2022 20:11:06 +0000
ROA not before: Tue 29 Mar 2022 20:11:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43966
IP address blocks: 79.173.80.0/20 maxlen: 24
94.243.192.0/20 maxlen: 24
94.243.232.0/21 maxlen: 24
79.173.64.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 237799397 (0xe2c87e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Mar 29 20:11:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f673ac9cae8dc2d496e1522212ac9b03e1fe175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:d2:72:85:05:de:be:46:e5:98:72:4a:74:
12:5a:69:93:e9:01:9c:ed:e3:3c:92:4d:f0:bc:c8:
b7:ca:1d:1a:4e:46:12:67:3f:ea:02:9a:48:40:ae:
81:6b:84:09:cc:5d:20:01:21:2b:be:fa:4e:b3:b4:
d0:53:8b:ba:38:a4:4b:53:f3:b7:9e:94:0d:45:eb:
33:c9:ce:c7:bd:7e:0e:c0:01:41:9a:6a:f8:48:a1:
42:b0:db:b2:16:fd:b4:ac:46:c8:41:97:f7:48:2a:
76:31:6c:fb:ee:a8:90:72:a5:7d:b0:8c:f2:33:b7:
b4:c9:74:cb:ce:f7:7a:aa:8a:95:6b:72:78:f1:e7:
27:e8:40:9d:15:8e:8a:7f:91:01:90:94:02:d7:45:
35:96:98:e0:61:05:fa:67:73:cd:c4:7a:fc:89:65:
72:de:87:af:81:b1:38:3b:09:ad:35:a7:c5:c1:cc:
13:1f:2b:76:94:1e:52:1b:65:5c:f0:fd:ec:c8:1a:
4b:90:55:fa:40:43:fc:f8:29:cb:ec:23:7d:b2:e1:
48:eb:9d:48:fa:b8:ae:a6:ae:84:2a:d4:21:02:fc:
0a:a9:f7:c5:8e:b9:3e:f4:47:2e:cc:26:7c:4c:7b:
76:f0:46:3d:0d:28:5c:3a:d8:e4:47:6c:65:f1:86:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:67:3A:C9:CA:E8:DC:2D:49:6E:15:22:21:2A:C9:B0:3E:1F:E1:75
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/H2c6ycro3C1JbhUiISrJsD4f4XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.64.0/23
79.173.80.0/20
94.243.192.0/20
94.243.232.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:5a:8b:1f:cd:e7:01:16:9a:4a:fe:7d:30:f1:fc:1a:45:c0:
a6:67:d7:b3:c6:b0:d8:94:ed:7f:03:f8:3c:f0:a7:1a:d0:ee:
39:83:68:af:e4:04:be:61:af:b9:ec:a4:54:14:0b:3a:90:b8:
6e:e0:7d:37:9e:02:79:a5:48:35:4c:f7:16:9e:d7:89:6c:c8:
a3:7b:ae:af:2b:13:ee:0a:02:09:f2:9b:da:69:c5:88:40:a6:
89:bb:fd:f0:62:66:bb:cc:f8:14:d0:5f:b2:ab:15:71:99:2b:
7b:58:72:a5:7f:b1:ee:b5:fe:c5:1d:4f:96:b1:b6:aa:23:9c:
32:1c:f9:6b:6e:7c:4d:20:96:8e:cd:04:28:d0:7a:94:9c:63:
18:43:d2:a1:15:07:8c:19:c0:2e:4c:55:9d:a3:e2:83:0d:dd:
5d:d3:24:86:f4:48:86:14:a1:0b:ad:05:89:6c:9b:f5:d5:b6:
b2:cd:27:ed:96:26:69:15:c4:67:84:75:9c:53:59:34:dd:6d:
57:37:b0:9c:ce:3f:91:90:7d:d4:d1:a5:df:92:b8:9d:ef:96:
15:7a:54:08:63:4b:c1:1d:b9:3e:55:b7:a2:10:52:33:29:96:
fa:92:51:43:d5:70:3c:40:23:20:b5:88:3c:a8:f9:0e:c6:bc:
2f:99:df:74
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEDiyH5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ODAwOTlhODFiMzQ2ZjlhYmNhZjI2MDU2ZjViNzcwOTRkMWNmMTEzMB4XDTIyMDMy
OTIwMTEwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY2NzNhYzljYWU4
ZGMyZDQ5NmUxNTIyMjEyYWM5YjAzZTFmZTE3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMSl0nKFBd6+RuWYckp0Elppk+kBnO3jPJJN8LzIt8odGk5G
Emc/6gKaSECugWuECcxdIAEhK776TrO00FOLujikS1Pzt56UDUXrM8nOx71+DsAB
QZpq+EihQrDbshb9tKxGyEGX90gqdjFs++6okHKlfbCM8jO3tMl0y873eqqKlWty
ePHnJ+hAnRWOin+RAZCUAtdFNZaY4GEF+mdzzcR6/Illct6Hr4GxODsJrTWnxcHM
Ex8rdpQeUhtlXPD97MgaS5BV+kBD/Pgpy+wjfbLhSOudSPq4rqauhCrUIQL8Cqn3
xY65PvRHLswmfEx7dvBGPQ0oXDrY5EdsZfGGVlECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBQfZzrJyujcLUluFSIhKsmwPh/hdTAfBgNVHSMEGDAWgBQ4AJmoGzRvmryv
JgVvW3cJTRzxEzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09BQ1pxQnMwYjVxOHJ5WUZiMXQzQ1UwYzhSTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzMvOGU1MDFkLWMwODgtNDg5NS1hZWUzLTQ1MGZlMzM1OTVkMS8x
L0gyYzZ5Y3JvM0MxSmJoVWlJU3JKc0Q0ZjRYVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzMv
OGU1MDFkLWMwODgtNDg5NS1hZWUzLTQ1MGZlMzM1OTVkMS8xL09BQ1pxQnMwYjVx
OHJ5WUZiMXQzQ1UwYzhSTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAU+tQAMEBE+tUAMEBF7zwAMEA17z
6DANBgkqhkiG9w0BAQsFAAOCAQEAa1qLH83nARaaSv59MPH8GkXApmfXs8aw2JTt
fwP4PPCnGtDuOYNor+QEvmGvueykVBQLOpC4buB9N54CeaVINUz3Fp7XiWzIo3uu
rysT7goCCfKb2mnFiECmibv98GJmu8z4FNBfsqsVcZkre1hypX+x7rX+xR1PlrG2
qiOcMhz5a258TSCWjs0EKNB6lJxjGEPSoRUHjBnALkxVnaPigw3dXdMkhvRIhhSh
C60FiWyb9dW2ss0n7ZYmaRXEZ4R1nFNZNN1tVzewnM4/kZB91NGl35K4ne+WFXpU
CGNLwR25PlW3ohBSMymW+pJRQ9VwPEAjILWIPKj5Dsa8L5nfdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:59 2024 by rpki-client on console-fra.rpki-client.org