Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/HoTel_rz20_c8IYoUl2a4ApgKbA.roa
File: HoTel_rz20_c8IYoUl2a4ApgKbA.roa (raw, json)
Hash identifier: bKrQiaumapUBkMT1JXGi16TZmao5bcCma6RfIrOH7Kg=
Subject key identifier: 1E:84:DE:97:FA:F3:DB:4F:DC:F0:86:28:52:5D:9A:E0:0A:60:29:B0
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 018545DDCA8567B3C3E4704996BDD64DAC45
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/HoTel_rz20_c8IYoUl2a4ApgKbA.roa
Signing time: Sat 24 Dec 2022 20:40:41 +0000
ROA not before: Sat 24 Dec 2022 20:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54145
IP address blocks: 193.151.172.0/22 maxlen: 22
206.190.220.0/22 maxlen: 24
2a0d:e8c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:45:dd:ca:85:67:b3:c3:e4:70:49:96:bd:d6:4d:ac:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Dec 24 20:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e84de97faf3db4fdcf08628525d9ae00a6029b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:cf:cb:02:fd:d4:ed:cf:9e:9e:54:07:30:
bf:77:91:98:fa:c9:77:21:97:07:99:2a:cf:86:b7:
f5:5f:19:95:d7:15:5b:36:06:ee:7a:64:77:43:a3:
2d:84:4f:2b:6f:55:88:72:fe:5c:7c:18:5d:e5:3f:
0a:1e:ab:6f:34:41:33:c8:eb:a1:9d:fc:04:b3:38:
86:57:3e:b0:30:42:01:b1:e1:90:bf:aa:5f:13:b0:
13:8d:7a:d9:24:2e:8e:e3:c0:ed:33:d9:1c:f9:e0:
ca:5e:5b:0d:8d:70:ad:f7:22:7e:99:94:0c:fc:58:
c5:8e:35:15:db:8c:19:e2:12:e0:57:62:c8:3d:63:
40:15:d7:77:0d:c4:ea:88:17:5c:02:7c:c6:9c:32:
11:02:db:65:fc:07:2f:5d:e3:ca:61:30:d7:f1:ba:
f2:06:79:aa:1f:df:99:ef:a6:c5:72:88:52:94:4e:
2e:29:2f:75:7c:61:fa:d3:1b:89:1e:a0:4c:16:cd:
13:28:cc:8a:1a:9a:81:67:43:69:ed:c7:b7:fc:db:
de:99:89:23:14:61:4c:60:e7:fa:30:6e:6f:ea:65:
ee:db:e0:bb:c2:aa:7a:67:cb:11:ce:37:d8:54:1b:
0c:01:02:38:f6:1e:05:2a:51:33:52:93:07:93:4f:
c2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:DE:97:FA:F3:DB:4F:DC:F0:86:28:52:5D:9A:E0:0A:60:29:B0
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/HoTel_rz20_c8IYoUl2a4ApgKbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.172.0/22
206.190.220.0/22
IPv6:
2a0d:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:76:76:76:70:b9:5a:ac:db:cf:15:61:cf:e7:85:4b:e0:89:
f6:2d:38:9b:85:c0:db:7b:7d:4e:06:20:d9:ba:f8:f5:46:a0:
6f:21:da:6f:d5:12:f7:c9:f4:1c:c3:29:92:fa:5e:68:b8:ed:
f0:ed:18:5b:4b:4c:09:d8:c9:67:36:c2:6b:68:e8:1e:15:9a:
c6:be:c1:c2:25:ac:f6:8e:a6:fa:fe:8c:4e:ce:d8:f1:4a:03:
64:82:f4:d7:91:61:7d:25:52:71:fb:36:05:67:0b:c1:d3:7b:
f6:8e:9a:ba:1d:59:48:8c:67:b8:4f:1b:da:c5:61:37:7c:bc:
3a:68:bf:81:33:aa:e5:6d:ba:99:9c:f9:43:cb:af:72:73:ec:
40:ed:91:01:f2:c6:b4:ad:2f:79:ef:32:98:e0:c3:87:a0:58:
17:8d:54:f9:c8:ef:b9:bb:50:71:26:6f:6d:3b:72:40:ec:a3:
09:64:1f:33:b2:b1:0b:3b:68:e4:d4:a3:a5:1e:db:7f:f3:de:
3b:df:45:92:5c:39:60:16:a1:e6:17:e8:36:2f:e9:e8:1d:f6:
46:05:21:6f:9a:58:77:f5:58:6a:b0:b2:e0:d1:fe:ac:21:0f:
37:e9:e7:06:fa:bd:37:81:c3:bb:c8:43:12:6e:b4:5c:b4:b7:
68:0e:e1:cf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVF3cqFZ7PD5HBJlr3WTaxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjIxMjI0MjA0MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTg0ZGU5N2ZhZjNkYjRmZGNmMDg2Mjg1MjVkOWFlMDBhNjAyOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgDPywL91O3Pnp5UBzC/d5GY+sl3
IZcHmSrPhrf1XxmV1xVbNgbuemR3Q6MthE8rb1WIcv5cfBhd5T8KHqtvNEEzyOuh
nfwEsziGVz6wMEIBseGQv6pfE7ATjXrZJC6O48DtM9kc+eDKXlsNjXCt9yJ+mZQM
/FjFjjUV24wZ4hLgV2LIPWNAFdd3DcTqiBdcAnzGnDIRAttl/AcvXePKYTDX8bry
BnmqH9+Z76bFcohSlE4uKS91fGH60xuJHqBMFs0TKMyKGpqBZ0Np7ce3/NvemYkj
FGFMYOf6MG5v6mXu2+C7wqp6Z8sRzjfYVBsMAQI49h4FKlEzUpMHk0/CfwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB6E3pf689tP3PCGKFJdmuAKYCmwMB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvSG9UZWxfcnoyMF9jOElZb1VsMmE0QXBnS2JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwZesAwQC
zr7cMA0EAgACMAcDBQMqDejAMA0GCSqGSIb3DQEBCwUAA4IBAQCcdnZ2cLlarNvP
FWHP54VL4In2LTibhcDbe31OBiDZuvj1RqBvIdpv1RL3yfQcwymS+l5ouO3w7Rhb
S0wJ2MlnNsJraOgeFZrGvsHCJaz2jqb6/oxOztjxSgNkgvTXkWF9JVJx+zYFZwvB
03v2jpq6HVlIjGe4TxvaxWE3fLw6aL+BM6rlbbqZnPlDy69yc+xA7ZEB8sa0rS95
7zKY4MOHoFgXjVT5yO+5u1BxJm9tO3JA7KMJZB8zsrELO2jk1KOlHtt/894730WS
XDlgFqHmF+g2L+noHfZGBSFvmlh39VhqsLLg0f6sIQ836ecG+r03gcO7yEMSbrRc
tLdoDuHP
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:17 2024 by rpki-client on console-ams.rpki-client.org