Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/HhHATu5Mehp-U9LxhuDjdQfs1vg.roa
File: HhHATu5Mehp-U9LxhuDjdQfs1vg.roa (raw, json)
Hash identifier: ujmyl8nEeTr41imX3yObO9DXD2G4ViplptS/ROOsVaw=
Subject key identifier: 1E:11:C0:4E:EE:4C:7A:1A:7E:53:D2:F1:86:E0:E3:75:07:EC:D6:F8
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 095E4F
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/HhHATu5Mehp-U9LxhuDjdQfs1vg.roa
Signing time: Thu 28 Apr 2022 11:32:58 +0000
ROA not before: Thu 28 Apr 2022 11:32:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209746
IP address blocks: 185.7.119.0/24 maxlen: 24
185.5.142.0/24 maxlen: 24
188.68.84.0/22 maxlen: 24
188.68.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 613967 (0x95e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Apr 28 11:32:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e11c04eee4c7a1a7e53d2f186e0e37507ecd6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:97:9b:9d:b0:07:4d:0a:98:06:35:b6:7d:
4f:41:e2:c8:64:2a:29:15:f3:9c:51:d8:97:45:26:
0b:a8:69:e0:3f:cb:96:70:0f:24:cf:53:ea:14:3f:
51:07:cb:6c:7b:40:4d:fe:c6:be:03:af:fa:a2:70:
ac:71:e2:0a:e5:e3:06:1c:dd:c0:c1:ec:86:bd:e1:
de:2d:c8:6d:1f:35:b4:a8:89:54:fc:ac:da:48:6b:
3a:d8:a4:70:09:e6:ad:9a:fa:46:fc:d0:72:f0:a7:
e8:33:e3:b7:89:56:2c:f7:c9:2d:76:24:7c:f4:57:
39:11:5c:ea:0e:7e:a0:87:da:28:9e:5c:b8:48:89:
63:ed:56:df:d4:19:62:f4:06:b8:bf:ba:17:9c:c2:
0f:3b:10:57:06:73:ca:5b:db:38:65:1e:00:f1:56:
18:4d:6c:0d:f8:04:ff:c8:6f:6f:a0:c4:91:5f:f5:
85:45:62:f1:af:f2:d3:53:34:f0:0e:a9:96:5d:f9:
fc:c9:0f:33:9c:5c:42:d3:3c:8e:1f:fb:8e:95:0b:
6d:39:5c:8b:d0:a8:0c:4b:a7:f6:64:a6:73:47:1e:
2a:3b:49:a8:3a:56:57:61:83:77:d5:91:e4:7a:a8:
f3:39:f0:67:c5:c4:fd:62:a6:d5:1b:5d:48:c2:56:
d0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:C0:4E:EE:4C:7A:1A:7E:53:D2:F1:86:E0:E3:75:07:EC:D6:F8
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/HhHATu5Mehp-U9LxhuDjdQfs1vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.142.0/24
185.7.119.0/24
188.68.84.0/22
188.68.94.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:66:61:5b:67:36:03:89:6e:94:c8:5a:ef:12:c2:35:91:74:
1b:3f:96:bb:ab:0a:83:1f:a0:e4:89:f9:21:b7:0b:46:6d:07:
69:48:f9:a4:fb:ed:7a:ee:1f:92:0a:f2:3e:48:d9:23:35:ea:
d1:ca:3a:ff:ed:59:14:1f:79:da:f7:c1:e9:1b:da:7f:cd:14:
2c:13:d2:e8:ab:fe:24:17:02:09:9d:29:5f:1c:64:91:ac:a1:
d7:5d:99:b7:95:72:5c:e2:98:5c:ec:e4:f1:ea:95:6d:bd:ab:
05:fa:c5:36:82:34:f9:84:0b:b8:7d:89:3d:5b:3c:23:d4:43:
dd:72:af:89:5e:e4:5d:1f:1c:e5:da:b7:2e:28:75:2c:5b:fc:
52:01:2b:1e:27:fe:93:0e:d8:75:08:e7:9a:1f:16:34:47:80:
ec:d0:f9:c8:dc:39:ee:52:f2:7c:4b:aa:09:cd:7c:48:f3:ef:
11:4a:44:8a:44:9a:93:f9:e3:f9:29:db:74:a1:0e:62:ab:80:
10:17:26:16:37:3d:1d:f4:b3:64:7e:59:d4:67:c8:55:70:18:
e7:44:17:34:00:09:7c:31:ac:43:1b:3b:ba:85:89:20:f4:ea:
10:f3:ed:8c:27:c7:db:86:fc:e3:29:6f:0c:dc:6d:52:4e:22:
a2:c1:ec:1d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDCV5PMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
YmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1NDg4OTQwHhcNMjIwNDI4
MTEzMjU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxZTExYzA0ZWVlNGM3
YTFhN2U1M2QyZjE4NmUwZTM3NTA3ZWNkNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0YOXm52wB00KmAY1tn1PQeLIZCopFfOcUdiXRSYLqGngP8uW
cA8kz1PqFD9RB8tse0BN/sa+A6/6onCsceIK5eMGHN3AweyGveHeLchtHzW0qIlU
/KzaSGs62KRwCeatmvpG/NBy8KfoM+O3iVYs98ktdiR89Fc5EVzqDn6gh9oonly4
SIlj7Vbf1Bli9Aa4v7oXnMIPOxBXBnPKW9s4ZR4A8VYYTWwN+AT/yG9voMSRX/WF
RWLxr/LTUzTwDqmWXfn8yQ8znFxC0zyOH/uOlQttOVyL0KgMS6f2ZKZzRx4qO0mo
OlZXYYN31ZHkeqjzOfBnxcT9YqbVG11IwlbQ7wIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFB4RwE7uTHoaflPS8Ybg43UH7Nb4MB8GA1UdIwQYMBaAFG29UVdrSpNGCkZa
815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQzLzEv
SGhIQVR1NU1laHAtVTlMeGh1RGpkUWZzMXZnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84
ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQzLzEvYmIxUlYydEtrMFlL
UmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuQWOAwQAuQd3AwQCvERUAwQBvERe
MA0GCSqGSIb3DQEBCwUAA4IBAQAMZmFbZzYDiW6UyFrvEsI1kXQbP5a7qwqDH6Dk
ifkhtwtGbQdpSPmk++167h+SCvI+SNkjNerRyjr/7VkUH3na98HpG9p/zRQsE9Lo
q/4kFwIJnSlfHGSRrKHXXZm3lXJc4phc7OTx6pVtvasF+sU2gjT5hAu4fYk9Wzwj
1EPdcq+JXuRdHxzl2rcuKHUsW/xSASseJ/6TDth1COeaHxY0R4Ds0PnI3DnuUvJ8
S6oJzXxI8+8RSkSKRJqT+eP5Kdt0oQ5iq4AQFyYWNz0d9LNkflnUZ8hVcBjnRBc0
AAl8MaxDGzu6hYkg9OoQ8+2MJ8fbhvzjKW8M3G1STiKiwewd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-fra.rpki-client.org