Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/Hf7E4RjZNDODl-2la6Bj1HuJRhM.roa
File: Hf7E4RjZNDODl-2la6Bj1HuJRhM.roa (raw, json)
Hash identifier: 6IFPSDzHJPAwoM/GSGHO8ExlLTYLh5fa8dBY/MOU6Fc=
Subject key identifier: 1D:FE:C4:E1:18:D9:34:33:83:97:ED:A5:6B:A0:63:D4:7B:89:46:13
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 02909642
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/Hf7E4RjZNDODl-2la6Bj1HuJRhM.roa
Signing time: Sat 01 Jan 2022 08:59:43 +0000
ROA not before: Sat 01 Jan 2022 08:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.253.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43030082 (0x2909642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 1 08:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1dfec4e118d934338397eda56ba063d47b894613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:3a:09:ed:eb:2a:78:d8:6c:41:cb:dd:3a:
8d:61:f9:ca:8a:d7:58:a9:85:6b:00:8a:d4:20:45:
0a:70:7d:61:bf:69:76:21:cb:e7:39:ab:64:09:e6:
31:08:75:b3:75:be:1a:2c:6c:d3:96:14:8a:a3:26:
53:2d:77:de:c4:e6:e2:75:23:e2:af:84:b5:95:21:
4a:0e:35:62:4b:5d:72:af:c6:0b:7c:5f:4c:6c:1b:
20:71:7c:cd:57:7c:08:47:de:d2:99:f0:44:18:57:
7e:c6:55:f6:d2:80:ef:81:92:15:7f:79:23:8d:7c:
a3:70:48:30:d5:d2:ee:f6:40:06:f4:b1:47:40:d7:
ec:12:1f:2c:7d:c5:7c:2e:5e:29:91:d8:e7:f0:91:
b8:d3:22:e2:5a:f2:ba:d8:3e:83:08:05:a8:ab:0d:
f3:eb:41:d3:35:60:2b:4b:91:be:3d:43:a9:f6:f1:
4e:dd:89:f3:35:83:c0:bd:db:90:bd:9a:b9:e2:d6:
71:86:1c:1a:e8:a6:39:54:a8:68:8d:e7:9d:15:8f:
b0:ca:1c:e2:3e:31:dd:af:aa:fb:7f:07:bc:96:fe:
18:de:09:c2:3f:07:ff:12:6d:ed:e4:11:dc:4d:d9:
ab:59:cf:09:e4:4c:77:38:0b:4f:d2:1d:27:dd:19:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FE:C4:E1:18:D9:34:33:83:97:ED:A5:6B:A0:63:D4:7B:89:46:13
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/Hf7E4RjZNDODl-2la6Bj1HuJRhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
04:42:ea:c7:00:ed:5e:89:4c:1d:75:89:ca:d4:4b:5a:6a:28:
1b:73:c3:7a:37:2c:88:75:4f:2a:bb:b4:6e:7e:39:8b:78:4d:
c2:20:c8:18:86:ca:3b:a8:2c:0e:1a:33:75:10:9c:ab:78:2e:
63:d3:65:0e:43:65:d4:88:b8:f0:7b:97:cb:62:b1:73:94:1f:
1b:b5:cc:85:a5:7e:cb:a2:d4:36:ad:48:fa:6c:3b:eb:d9:7c:
ad:83:71:b8:5e:08:95:73:c6:d0:98:38:13:fb:38:b1:0c:0c:
e0:06:eb:41:dd:7a:b8:78:e1:86:c8:ee:58:35:c2:7c:de:e6:
a8:82:f6:81:cf:d5:b9:67:c6:80:87:a6:35:1e:fd:f5:a6:53:
12:87:0b:fd:c9:09:af:89:22:69:42:eb:e6:89:69:54:bd:5f:
d9:ea:20:81:f2:04:3a:b5:fd:b9:67:13:28:6a:98:27:1f:ad:
4d:4b:ff:4c:49:b7:77:1d:8d:28:56:36:5c:91:88:8f:ad:6e:
63:ff:92:c2:80:15:ab:08:05:fc:ac:b0:da:c1:92:a0:08:07:
0c:9f:5e:b0:d2:81:f7:54:88:0a:7a:98:42:a0:bf:90:9c:1d:
56:5e:5e:64:01:4f:74:f6:9c:05:10:6b:61:2d:4e:61:98:c6:
86:a2:8a:83
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEApCWQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OWNjNDRkN2YxZDBkYzBhNWFiZjI3NzY0OTViNjFkZTQ4MTk5MjVmMB4XDTIyMDEw
MTA4NTk0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWRmZWM0ZTExOGQ5
MzQzMzgzOTdlZGE1NmJhMDYzZDQ3Yjg5NDYxMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZiOgnt6yp42GxBy906jWH5yorXWKmFawCK1CBFCnB9Yb9p
diHL5zmrZAnmMQh1s3W+Gixs05YUiqMmUy133sTm4nUj4q+EtZUhSg41Yktdcq/G
C3xfTGwbIHF8zVd8CEfe0pnwRBhXfsZV9tKA74GSFX95I418o3BIMNXS7vZABvSx
R0DX7BIfLH3FfC5eKZHY5/CRuNMi4lryutg+gwgFqKsN8+tB0zVgK0uRvj1Dqfbx
Tt2J8zWDwL3bkL2aueLWcYYcGuimOVSoaI3nnRWPsMoc4j4x3a+q+38HvJb+GN4J
wj8H/xJt7eQR3E3Zq1nPCeRMdzgLT9IdJ90ZN/kCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQd/sThGNk0M4OX7aVroGPUe4lGEzAfBgNVHSMEGDAWgBSpzETX8dDcClq/
J3ZJW2HeSBmSXzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FjeEUxX0hRM0FwYXZ5ZDJTVnRoM2tnWmtsOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGIvZGFiODY3LWE1NzktNGE5NS1hZWY3LTE2MTdmMzhhNmRmYy8x
L0hmN0U0UmpaTkRPRGwtMmxhNkJqMUh1SlJoTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGIv
ZGFiODY3LWE1NzktNGE5NS1hZWY3LTE2MTdmMzhhNmRmYy8xL3FjeEUxX0hRM0Fw
YXZ5ZDJTVnRoM2tnWmtsOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn9CTANBgkqhkiG9w0BAQsFAAOC
AQEABELqxwDtXolMHXWJytRLWmooG3PDejcsiHVPKru0bn45i3hNwiDIGIbKO6gs
DhozdRCcq3guY9NlDkNl1Ii48HuXy2Kxc5QfG7XMhaV+y6LUNq1I+mw769l8rYNx
uF4IlXPG0Jg4E/s4sQwM4AbrQd16uHjhhsjuWDXCfN7mqIL2gc/VuWfGgIemNR79
9aZTEocL/ckJr4kiaULr5olpVL1f2eoggfIEOrX9uWcTKGqYJx+tTUv/TEm3dx2N
KFY2XJGIj61uY/+SwoAVqwgF/Kyw2sGSoAgHDJ9esNKB91SICnqYQqC/kJwdVl5e
ZAFPdPacBRBrYS1OYZjGhqKKgw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:55 2023 by rpki-client on console-ams.rpki-client.org