Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HF09LMMcYNywzwPn9Haan7GZNGY.roa
File: HF09LMMcYNywzwPn9Haan7GZNGY.roa (raw, json)
Hash identifier: GzdNw1Pw4sCVwwMS6XtRC3GYMFGqqD4bgu6gkPmwnI8=
Subject key identifier: 1C:5D:3D:2C:C3:1C:60:DC:B0:CF:03:E7:F4:76:9A:9F:B1:99:34:66
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 189C5DCE
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HF09LMMcYNywzwPn9Haan7GZNGY.roa
Signing time: Wed 15 Jun 2022 09:17:44 +0000
ROA not before: Wed 15 Jun 2022 09:17:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59903
IP address blocks: 141.101.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 412900814 (0x189c5dce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jun 15 09:17:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c5d3d2cc31c60dcb0cf03e7f4769a9fb1993466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:6e:38:a8:50:5b:14:3b:c8:73:e5:ea:36:
52:43:94:a1:f3:0c:b5:8f:e1:3b:c3:98:2e:ad:42:
b7:a6:2a:2d:07:3d:a0:0c:87:6b:48:fe:6f:8e:07:
55:ac:65:16:56:59:e8:b4:1f:6a:af:0f:62:c1:d7:
0b:35:79:c7:96:f6:4e:3f:bc:f7:7b:1f:17:36:5e:
43:63:10:5b:2a:ed:a9:ac:7e:23:46:24:b5:9a:42:
cf:a2:bd:d3:2f:80:0b:e4:52:60:e7:26:d9:dc:f7:
f8:c4:ad:94:b4:d1:f0:9f:8a:a5:0f:83:ae:21:d2:
27:2d:22:e4:c4:db:0c:73:46:07:b1:23:d4:6e:59:
17:a0:df:dc:48:75:2c:af:d0:5e:ba:bc:bb:dc:c1:
8c:42:0c:92:fd:df:7d:ee:bc:6b:60:aa:d2:f3:3b:
4b:fb:6d:5e:93:34:a8:1d:db:bc:a0:62:e8:ea:e0:
d7:9a:d6:fc:49:c7:65:a2:f9:7b:bc:be:07:db:ec:
ad:62:a6:e9:1f:9d:df:62:35:03:99:f2:b0:37:b8:
c0:b6:ac:f1:f5:df:38:8c:b0:11:15:c1:74:f7:7a:
43:42:64:ba:fc:0a:5c:7c:29:73:f5:68:7f:53:85:
a6:f7:72:55:df:94:35:a9:72:f2:c7:f9:ab:cf:e7:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:3D:2C:C3:1C:60:DC:B0:CF:03:E7:F4:76:9A:9F:B1:99:34:66
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HF09LMMcYNywzwPn9Haan7GZNGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
98:81:c0:f4:97:a3:ef:e2:c6:d8:fb:28:a7:9b:f3:b1:10:8d:
02:42:83:c5:4b:85:73:10:aa:12:f5:2f:44:1a:52:a7:52:b9:
6a:df:38:ca:65:f3:98:60:51:09:08:0f:ed:3c:77:85:5a:16:
e2:1a:71:92:18:38:b5:6f:ce:ec:79:e3:bc:a0:ed:4c:ba:53:
f9:b4:36:f9:bc:82:5c:3c:89:22:62:4e:93:4b:5f:66:1b:08:
70:64:8f:2c:71:9d:cd:a7:48:80:de:8b:63:18:b3:1e:b8:85:
e5:1e:69:42:7d:30:f2:4d:2b:76:7e:7e:8f:d7:00:0a:7d:6d:
bf:b5:a1:65:9d:70:62:4e:5c:26:67:06:ae:2a:ed:7c:55:d3:
ac:35:23:f4:07:a6:78:13:54:58:99:bd:4c:27:e8:47:96:f4:
bd:0b:9f:03:8a:b8:86:2f:85:91:d3:61:a4:47:d1:e6:5d:6d:
7d:4c:e8:fa:3a:3b:12:7d:31:9e:be:3a:4d:72:7f:f9:5d:11:
94:78:77:b9:a4:f4:57:e1:53:82:6f:d0:c0:25:d8:5e:3c:50:
37:7a:0c:54:23:83:1d:f0:b4:30:49:18:fe:e3:07:c8:cb:79:
41:f0:97:aa:a8:d1:5b:ee:13:16:73:9b:c1:ad:b8:5e:56:e6:
bc:e3:89:11
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEGJxdzjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
ODg1ZTg4NGMyZmM3YTc1ZDEyZGQxZGVhNDljZTIzNDljNDcwNjdlMB4XDTIyMDYx
NTA5MTc0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWM1ZDNkMmNjMzFj
NjBkY2IwY2YwM2U3ZjQ3NjlhOWZiMTk5MzQ2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7ubjioUFsUO8hz5eo2UkOUofMMtY/hO8OYLq1Ct6YqLQc9
oAyHa0j+b44HVaxlFlZZ6LQfaq8PYsHXCzV5x5b2Tj+893sfFzZeQ2MQWyrtqax+
I0YktZpCz6K90y+AC+RSYOcm2dz3+MStlLTR8J+KpQ+DriHSJy0i5MTbDHNGB7Ej
1G5ZF6Df3Eh1LK/QXrq8u9zBjEIMkv3ffe68a2Cq0vM7S/ttXpM0qB3bvKBi6Org
15rW/EnHZaL5e7y+B9vsrWKm6R+d32I1A5nysDe4wLas8fXfOIywERXBdPd6Q0Jk
uvwKXHwpc/Vof1OFpvdyVd+UNaly8sf5q8/np+ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQcXT0swxxg3LDPA+f0dpqfsZk0ZjAfBgNVHSMEGDAWgBRYheiEwvx6ddEt
0d6knOI0nEcGfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dJWG9oTUw4ZW5YUkxkSGVwSnppTkp4SEJuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvNmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8x
L0hGMDlMTU1jWU55d3p3UG45SGFhbjdHWk5HWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
NmMwYmY3LTVmMTMtNDRhMi05OTg5LThjOTU4MWQ5NmQ4Zi8xL1dJWG9oTUw4ZW5Y
UkxkSGVwSnppTkp4SEJuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI1l+DANBgkqhkiG9w0BAQsFAAOC
AQEAmIHA9Jej7+LG2Psop5vzsRCNAkKDxUuFcxCqEvUvRBpSp1K5at84ymXzmGBR
CQgP7Tx3hVoW4hpxkhg4tW/O7HnjvKDtTLpT+bQ2+byCXDyJImJOk0tfZhsIcGSP
LHGdzadIgN6LYxizHriF5R5pQn0w8k0rdn5+j9cACn1tv7WhZZ1wYk5cJmcGrirt
fFXTrDUj9AemeBNUWJm9TCfoR5b0vQufA4q4hi+FkdNhpEfR5l1tfUzo+jo7En0x
nr46TXJ/+V0RlHh3uaT0V+FTgm/QwCXYXjxQN3oMVCODHfC0MEkY/uMHyMt5QfCX
qqjRW+4TFnObwa24XlbmvOOJEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org