Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/hTpgI7lDy51D5KtYWosVvXh5a2E.roa
File: hTpgI7lDy51D5KtYWosVvXh5a2E.roa (raw, json)
Hash identifier: w5l8rFaFDPJH2VlgPC9KgCeBoBfToL7tyWMp1giG6v0=
Subject key identifier: 85:3A:60:23:B9:43:CB:9D:43:E4:AB:58:5A:8B:15:BD:78:79:6B:61
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 04047CFB
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/hTpgI7lDy51D5KtYWosVvXh5a2E.roa
Signing time: Sat 01 Jan 2022 15:05:34 +0000
ROA not before: Sat 01 Jan 2022 15:05:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20249
IP address blocks: 185.55.132.0/22 maxlen: 22
185.55.132.0/23 maxlen: 23
185.55.134.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67403003 (0x4047cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 1 15:05:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853a6023b943cb9d43e4ab585a8b15bd78796b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:98:3a:1c:b0:b3:0e:25:9f:1e:10:08:c0:
76:14:25:05:05:38:4b:8c:ce:94:69:b4:1f:03:dd:
8e:71:7d:bd:56:a2:3e:26:5b:bb:93:b7:1e:df:7f:
39:3f:e7:63:8d:e6:82:f1:74:30:fc:f4:90:58:6c:
af:34:69:f5:27:a0:92:c8:b1:c4:f1:ac:f2:ac:a9:
ac:9e:50:ca:57:12:57:50:e2:b7:1b:45:c9:b2:36:
85:45:4b:88:1a:8d:10:21:c4:43:d7:e5:f9:2e:8c:
be:d5:67:f6:42:af:04:7c:4e:ed:fe:a0:1b:8e:d3:
c8:61:14:b7:4b:4b:b8:e7:76:d1:e7:31:63:18:8e:
86:19:47:a9:d8:49:10:28:0a:01:71:0c:fa:dc:11:
0f:b9:32:3e:17:43:07:c3:52:cb:06:51:eb:92:54:
f9:31:93:b8:ea:1b:ee:ba:8e:96:33:a4:fe:3f:ca:
9b:f7:1d:6e:62:63:bc:53:76:5f:fe:9c:fa:9b:bd:
65:b0:19:d4:80:29:b8:79:f2:d7:7c:e9:ed:bf:7f:
fe:f5:30:8f:62:ef:63:85:f7:47:b9:cb:98:f4:c2:
1b:d8:c8:26:d3:15:1d:10:f5:3d:86:d4:42:ac:dd:
f9:5e:83:14:ff:4d:7a:f4:11:72:b9:bc:87:7b:71:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:60:23:B9:43:CB:9D:43:E4:AB:58:5A:8B:15:BD:78:79:6B:61
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/hTpgI7lDy51D5KtYWosVvXh5a2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
01:91:9e:87:72:88:07:f3:b9:eb:bc:20:f2:9b:11:8f:1f:f9:
18:8b:0a:b3:f5:f4:01:6e:49:9b:af:ee:ee:fc:dd:27:8e:96:
ce:d1:0e:b7:b1:c1:51:2e:dd:23:fe:71:8d:da:19:54:22:18:
dc:ad:94:1a:24:26:5a:4e:15:46:f9:b3:69:16:d7:86:bc:e3:
37:a1:1b:87:d8:65:2d:d8:47:43:3f:58:44:b3:b5:eb:cc:35:
20:8c:fb:4d:04:81:06:4d:53:4d:40:c7:91:ad:df:45:4b:6d:
a3:be:1b:df:62:c4:59:35:73:ad:00:96:84:b3:63:11:44:83:
fa:69:61:65:d4:d9:56:7f:1a:2b:25:91:cc:85:51:85:cd:ff:
55:4c:93:a2:1b:4a:aa:95:34:54:30:4c:48:40:93:dd:2b:56:
48:d2:95:c2:ed:d6:28:82:2b:bd:50:47:31:82:f2:ad:bd:c5:
95:9c:1f:60:b3:09:dc:53:dd:d9:d3:b0:a8:8a:fd:4f:75:ae:
42:82:3a:a5:6f:02:cb:92:95:8e:6e:89:9c:d4:96:04:76:eb:
b9:cc:0d:24:5a:34:1c:9f:c7:8c:a2:1b:89:f8:85:84:9f:11:
10:38:dd:b3:9a:14:26:63:15:ad:4b:d1:41:90:df:d8:0b:a0:
92:98:67:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBAR8+zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
ZThiMTA3MTEzMTc2M2FhZGFiMWYyOTRlMzdjZDUwYWRhYzA5MzljMB4XDTIyMDEw
MTE1MDUzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUzYTYwMjNiOTQz
Y2I5ZDQzZTRhYjU4NWE4YjE1YmQ3ODc5NmI2MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL9ImDocsLMOJZ8eEAjAdhQlBQU4S4zOlGm0HwPdjnF9vVai
PiZbu5O3Ht9/OT/nY43mgvF0MPz0kFhsrzRp9SegksixxPGs8qyprJ5QylcSV1Di
txtFybI2hUVLiBqNECHEQ9fl+S6MvtVn9kKvBHxO7f6gG47TyGEUt0tLuOd20ecx
YxiOhhlHqdhJECgKAXEM+twRD7kyPhdDB8NSywZR65JU+TGTuOob7rqOljOk/j/K
m/cdbmJjvFN2X/6c+pu9ZbAZ1IApuHny13zp7b9//vUwj2LvY4X3R7nLmPTCG9jI
JtMVHRD1PYbUQqzd+V6DFP9NevQRcrm8h3txm/cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSFOmAjuUPLnUPkq1haixW9eHlrYTAfBgNVHSMEGDAWgBSOixBxExdjqtqx
8pTjfNUK2sCTnDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2pvc1FjUk1YWTZyYXNmS1U0M3pWQ3RyQWs1dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzkvMzMzMzlmLTZkOTgtNGI1Zi1hYjYwLTFjOTRjYjdkZmViMy8x
L2hUcGdJN2xEeTUxRDVLdFlXb3NWdlhoNWEyRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzkv
MzMzMzlmLTZkOTgtNGI1Zi1hYjYwLTFjOTRjYjdkZmViMy8xL2pvc1FjUk1YWTZy
YXNmS1U0M3pWQ3RyQWs1dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArk3hDANBgkqhkiG9w0BAQsFAAOC
AQEAAZGeh3KIB/O567wg8psRjx/5GIsKs/X0AW5Jm6/u7vzdJ46WztEOt7HBUS7d
I/5xjdoZVCIY3K2UGiQmWk4VRvmzaRbXhrzjN6Ebh9hlLdhHQz9YRLO168w1IIz7
TQSBBk1TTUDHka3fRUtto74b32LEWTVzrQCWhLNjEUSD+mlhZdTZVn8aKyWRzIVR
hc3/VUyTohtKqpU0VDBMSECT3StWSNKVwu3WKIIrvVBHMYLyrb3FlZwfYLMJ3FPd
2dOwqIr9T3WuQoI6pW8Cy5KVjm6JnNSWBHbrucwNJFo0HJ/HjKIbifiFhJ8REDjd
s5oUJmMVrUvRQZDf2Augkphndw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:56 2024 by rpki-client on console-ams.rpki-client.org