Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/hLxbLrQtfQJXwd0LXcyMbuVcKZc.roa
File: hLxbLrQtfQJXwd0LXcyMbuVcKZc.roa (raw, json)
Hash identifier: rSaate/v+8+UgvOlhEDunyKDMWK8cmapJI3o5u4OA2U=
Subject key identifier: 84:BC:5B:2E:B4:2D:7D:02:57:C1:DD:0B:5D:CC:8C:6E:E5:5C:29:97
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 0DF16D42
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/hLxbLrQtfQJXwd0LXcyMbuVcKZc.roa
Signing time: Sat 01 Jan 2022 10:57:12 +0000
ROA not before: Sat 01 Jan 2022 10:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199483
IP address blocks: 185.167.0.0/22 maxlen: 24
185.221.88.0/22 maxlen: 24
185.15.24.0/22 maxlen: 24
31.14.0.0/22 maxlen: 24
91.209.103.0/24 maxlen: 24
2a02:f840::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 233925954 (0xdf16d42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jan 1 10:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84bc5b2eb42d7d0257c1dd0b5dcc8c6ee55c2997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:76:11:71:a9:f9:09:12:9b:a1:09:c4:9b:
b3:c3:7c:e3:43:09:3c:84:4b:02:44:a7:d6:92:a1:
a7:9c:20:96:09:1d:34:c3:86:e1:2b:0c:08:17:ed:
f4:48:31:3c:69:06:0e:4d:6f:a3:15:b5:e7:b4:07:
c2:c8:fe:42:b8:f5:30:4f:73:c1:65:cb:dc:d4:6f:
26:44:87:27:ea:73:cc:e2:10:09:d1:5b:d5:40:a0:
36:d3:09:fe:d6:59:94:b2:1f:ee:2c:19:41:17:a5:
5d:3d:89:d5:8b:ca:d9:67:7d:77:fe:7d:0d:9b:22:
90:dd:b8:43:40:19:81:5e:ef:e5:6a:9c:1c:cc:10:
1b:28:78:9a:ce:07:f0:21:64:e2:3f:1a:38:a4:9e:
f0:15:b5:ed:60:47:11:61:e4:7d:75:88:8c:98:5f:
5c:2a:c7:1b:4d:20:47:dd:17:85:82:1e:a3:13:ed:
97:e4:85:a4:16:2a:77:67:59:cd:90:c3:96:40:d4:
76:59:88:a2:52:4f:0e:59:d8:5b:eb:a1:2b:1e:bc:
51:01:5c:73:3c:b5:02:68:17:b7:37:4b:92:4f:11:
21:e2:bc:d4:14:70:17:51:c5:d4:57:1a:e7:45:60:
ec:d4:d0:28:42:89:28:db:af:88:85:c8:b5:4b:b6:
30:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:5B:2E:B4:2D:7D:02:57:C1:DD:0B:5D:CC:8C:6E:E5:5C:29:97
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/hLxbLrQtfQJXwd0LXcyMbuVcKZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.0.0/22
91.209.103.0/24
185.15.24.0/22
185.167.0.0/22
185.221.88.0/22
IPv6:
2a02:f840::/29
Signature Algorithm: sha256WithRSAEncryption
27:4a:f3:f6:6b:27:2f:f0:a4:56:93:76:5a:6b:0a:ab:dd:5f:
8f:aa:af:4b:44:2e:7d:f3:76:dc:ae:f7:e9:7e:4b:86:8d:e4:
58:68:80:3e:d9:55:05:3e:99:d4:1f:74:4f:87:d2:75:b4:02:
1c:ca:49:37:fa:66:3f:e0:c9:14:d8:fe:96:6f:a5:8e:07:a3:
6c:55:a6:5e:b3:a2:fc:39:ad:83:44:7b:67:ae:df:60:a8:ac:
67:bf:d7:5e:7e:62:c7:0f:49:75:da:d9:20:c3:03:be:d5:13:
d6:45:27:28:35:cc:70:52:63:44:56:53:81:7f:13:bf:d2:ea:
10:40:8f:d2:1e:40:32:98:e0:a2:c2:e2:87:76:5c:a7:6d:22:
aa:5b:c3:b5:e3:56:3e:3c:e0:a1:41:d3:5e:1a:44:e9:1e:fe:
0e:aa:e6:20:2f:60:97:d4:6a:13:07:1d:3a:55:57:20:58:7e:
60:52:49:9c:8a:03:3a:87:7a:8d:51:2b:1b:95:0f:d4:eb:e1:
fa:06:c4:97:69:e9:c7:07:d4:65:81:ef:19:ee:a4:bc:5e:e7:
60:76:3a:ca:d6:da:30:81:06:06:85:18:98:96:93:0c:3b:c4:
c7:24:97:27:83:99:de:63:df:1f:52:75:09:3f:e4:09:37:80:
76:eb:2e:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIEDfFtQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
OTA3YzdiODk2NTZkZDMzOWNiOThmYjdjMmIwMzcxYzU5MjZhNjQxMB4XDTIyMDEw
MTEwNTcxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODRiYzViMmViNDJk
N2QwMjU3YzFkZDBiNWRjYzhjNmVlNTVjMjk5NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKiKdhFxqfkJEpuhCcSbs8N840MJPIRLAkSn1pKhp5wglgkd
NMOG4SsMCBft9EgxPGkGDk1voxW157QHwsj+Qrj1ME9zwWXL3NRvJkSHJ+pzzOIQ
CdFb1UCgNtMJ/tZZlLIf7iwZQRelXT2J1YvK2Wd9d/59DZsikN24Q0AZgV7v5Wqc
HMwQGyh4ms4H8CFk4j8aOKSe8BW17WBHEWHkfXWIjJhfXCrHG00gR90XhYIeoxPt
l+SFpBYqd2dZzZDDlkDUdlmIolJPDlnYW+uhKx68UQFcczy1AmgXtzdLkk8RIeK8
1BRwF1HF1Fca50Vg7NTQKEKJKNuviIXItUu2MKECAwEAAaOCAjAwggIsMB0GA1Ud
DgQWBBSEvFsutC19AlfB3QtdzIxu5VwplzAfBgNVHSMEGDAWgBSZB8e4llbdM5y5
j7fCsDccWSamQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L21RZkh1SlpXM1RPY3VZLTN3ckEzSEZrbXBrRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvN2UvN2RkMjg5LTZjYjUtNDM3MS04NDZjLTkzZGVjNzM1ZjcxNy8x
L2hMeGJMclF0ZlFKWHdkMExYY3lNYnVWY0taYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Uv
N2RkMjg5LTZjYjUtNDM3MS04NDZjLTkzZGVjNzM1ZjcxNy8xL21RZkh1SlpXM1RP
Y3VZLTN3ckEzSEZrbXBrRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAh8OAAMEAFvRZwMEArkPGAMEArmn
AAMEArndWDANBAIAAjAHAwUDKgL4QDANBgkqhkiG9w0BAQsFAAOCAQEAJ0rz9msn
L/CkVpN2WmsKq91fj6qvS0QuffN23K736X5Lho3kWGiAPtlVBT6Z1B90T4fSdbQC
HMpJN/pmP+DJFNj+lm+ljgejbFWmXrOi/Dmtg0R7Z67fYKisZ7/XXn5ixw9JddrZ
IMMDvtUT1kUnKDXMcFJjRFZTgX8Tv9LqEECP0h5AMpjgosLih3Zcp20iqlvDteNW
PjzgoUHTXhpE6R7+DqrmIC9gl9RqEwcdOlVXIFh+YFJJnIoDOod6jVErG5UP1Ovh
+gbEl2npxwfUZYHvGe6kvF7nYHY6ytbaMIEGBoUYmJaTDDvExySXJ4OZ3mPfH1J1
CT/kCTeAdusuuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org