Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hVFru6bJ-LHSp6nop74Jn9f_3aw.roa
File: hVFru6bJ-LHSp6nop74Jn9f_3aw.roa (raw, json)
Hash identifier: qFztpJDl+DUEdc5wLMLalxSi39DLYYerTE9zxLOLDs0=
Subject key identifier: 85:51:6B:BB:A6:C9:F8:B1:D2:A7:A9:E8:A7:BE:09:9F:D7:FF:DD:AC
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 914CE5
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hVFru6bJ-LHSp6nop74Jn9f_3aw.roa
Signing time: Thu 05 May 2022 05:36:29 +0000
ROA not before: Thu 05 May 2022 05:36:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 185.106.192.0/23 maxlen: 23
188.215.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9522405 (0x914ce5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 5 05:36:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85516bbba6c9f8b1d2a7a9e8a7be099fd7ffddac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e1:db:c7:62:77:5d:9b:a0:c1:02:d1:9e:99:
fe:79:91:14:f4:20:d4:60:d2:d0:b4:51:8c:a1:ad:
71:f1:e2:b3:85:e0:10:6b:7d:7f:21:86:a8:78:21:
9f:43:ed:d7:69:b2:15:0a:e2:f3:5e:dd:2f:ca:55:
26:b4:11:fa:e1:17:6a:9d:6b:ea:dc:bd:cd:c3:77:
75:a9:c7:42:57:8b:10:fc:6d:bd:ce:a9:a9:34:4a:
5d:1d:fb:56:0a:43:70:f0:06:42:d3:dd:77:1c:44:
8d:a9:a5:57:44:ac:e8:0a:ef:0d:4e:38:19:f9:52:
f1:f2:82:52:fa:ff:ba:21:d3:f3:c9:88:cc:fe:16:
2b:f7:65:a3:ae:3a:19:37:49:6d:df:0e:b3:2a:08:
a1:5e:76:ef:67:b0:e4:a4:a0:c0:ea:d0:5e:3c:32:
ab:0d:52:6d:7a:48:c3:7d:97:bc:2b:d0:9f:bb:ab:
18:d9:fb:5c:92:05:75:2c:e5:53:0d:e0:ad:a1:44:
66:df:45:9b:11:0b:92:a1:55:e6:ce:ed:e7:8c:17:
64:ca:59:85:25:64:52:27:75:3a:9e:27:32:4c:a5:
12:75:e0:f0:61:05:37:b7:1b:b7:5a:d1:ff:6d:ce:
36:fb:c8:aa:bd:5d:f0:e9:5c:fb:40:ae:34:99:8c:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:6B:BB:A6:C9:F8:B1:D2:A7:A9:E8:A7:BE:09:9F:D7:FF:DD:AC
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hVFru6bJ-LHSp6nop74Jn9f_3aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.192.0/23
188.215.120.0/22
Signature Algorithm: sha256WithRSAEncryption
67:5c:fe:b1:16:eb:ee:47:29:5c:de:49:e9:6b:5f:43:ea:36:
ce:d2:d4:2f:ac:ee:23:e7:98:fe:e0:46:6a:59:7b:81:a2:84:
21:a8:d2:e4:9e:fc:66:43:39:c3:5b:49:71:87:5d:49:36:42:
e4:b9:09:b1:74:98:d6:07:af:23:65:97:82:b2:4b:36:2f:46:
50:cd:ae:ae:6f:aa:04:8e:4f:ad:94:51:5a:4c:94:b5:2b:3d:
1a:2c:a6:59:71:47:ea:46:04:b3:88:e7:fb:64:eb:a5:b5:64:
32:3a:bb:d7:57:db:8f:fa:0f:e1:86:f0:86:29:c3:10:61:f2:
1a:bf:a5:82:c5:4a:63:1d:2b:fa:88:c6:a7:48:a7:77:e4:f4:
78:68:6b:e3:d5:2c:86:ed:56:fb:7a:33:e0:4c:26:21:90:17:
17:ee:79:b9:86:28:af:a2:18:af:17:2c:73:e0:8a:d3:d0:06:
70:1d:2e:7c:40:d4:f7:9b:af:49:d8:24:87:86:ec:cf:55:0c:
03:cb:3a:1a:c5:e7:d5:9b:2d:59:d0:36:49:93:67:5d:39:9d:
b4:9b:3b:62:8b:cd:81:5b:52:2c:2a:48:28:6f:5b:35:a4:b5:
c4:e8:4b:6e:d9:81:1a:c5:23:d8:ec:73:f6:96:ec:46:6b:8b:
ae:47:ac:6f
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAJFM5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NmNjZTA2ZTcwZGY5NzBkOTBhYmZlM2NiZTdmYTg4MmY0NjdiMWU0MB4XDTIyMDUw
NTA1MzYyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU1MTZiYmJhNmM5
ZjhiMWQyYTdhOWU4YTdiZTA5OWZkN2ZmZGRhYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPfh28did12boMEC0Z6Z/nmRFPQg1GDS0LRRjKGtcfHis4Xg
EGt9fyGGqHghn0Pt12myFQri817dL8pVJrQR+uEXap1r6ty9zcN3danHQleLEPxt
vc6pqTRKXR37VgpDcPAGQtPddxxEjamlV0Ss6ArvDU44GflS8fKCUvr/uiHT88mI
zP4WK/dlo646GTdJbd8OsyoIoV5272ew5KSgwOrQXjwyqw1SbXpIw32XvCvQn7ur
GNn7XJIFdSzlUw3graFEZt9FmxELkqFV5s7t54wXZMpZhSVkUid1Op4nMkylEnXg
8GEFN7cbt1rR/23ONvvIqr1d8Olc+0CuNJmM40MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSFUWu7psn4sdKnqeinvgmf1//drDAfBgNVHSMEGDAWgBSGzOBucN+XDZCr
/jy+f6iC9Gex5DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2hzemdibkRmbHcyUXFfNDh2bi1vZ3ZSbnNlUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNjZmMDVjLTc0MWMtNDcyMC1iYzdlLTg5NzE0YTdlOGQ1OC8x
L2hWRnJ1NmJKLUxIU3A2bm9wNzRKbjlmXzNhdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NjZmMDVjLTc0MWMtNDcyMC1iYzdlLTg5NzE0YTdlOGQ1OC8xL2hzemdibkRmbHcy
UXFfNDh2bi1vZ3ZSbnNlUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAblqwAMEArzXeDANBgkqhkiG9w0B
AQsFAAOCAQEAZ1z+sRbr7kcpXN5J6WtfQ+o2ztLUL6zuI+eY/uBGall7gaKEIajS
5J78ZkM5w1tJcYddSTZC5LkJsXSY1gevI2WXgrJLNi9GUM2urm+qBI5PrZRRWkyU
tSs9GiymWXFH6kYEs4jn+2TrpbVkMjq711fbj/oP4YbwhinDEGHyGr+lgsVKYx0r
+ojGp0ind+T0eGhr49Ushu1W+3oz4EwmIZAXF+55uYYor6IYrxcsc+CK09AGcB0u
fEDU95uvSdgkh4bsz1UMA8s6GsXn1ZstWdA2SZNnXTmdtJs7YovNgVtSLCpIKG9b
NaS1xOhLbtmBGsUj2Oxz9pbsRmuLrkesbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org