Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/hus61-Zn55dgh4omn5DrQVtHyso.roa
File: hus61-Zn55dgh4omn5DrQVtHyso.roa (raw, json)
Hash identifier: G+bIAXPYqOViIyM2FfWa0xVbbv7uqg0qwjEG7g+0WTM=
Subject key identifier: 86:EB:3A:D7:E6:67:E7:97:60:87:8A:26:9F:90:EB:41:5B:47:CA:CA
Certificate issuer: /CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Certificate serial: 0182448FAE436E876E9F0B8D57195C0B2214
Authority key identifier: 3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/hus61-Zn55dgh4omn5DrQVtHyso.roa
Signing time: Thu 28 Jul 2022 11:27:23 +0000
ROA not before: Thu 28 Jul 2022 11:27:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30848
IP address blocks: 178.250.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:8f:ae:43:6e:87:6e:9f:0b:8d:57:19:5c:0b:22:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a1a0c0016b9b33f93e8a7a393d09190d5e18499
Validity
Not Before: Jul 28 11:27:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86eb3ad7e667e79760878a269f90eb415b47caca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:68:3f:d7:ed:f6:0a:6f:41:56:b4:cc:08:
2a:d2:86:ff:59:2f:13:d4:5e:dc:56:75:e3:27:f8:
fa:5f:72:d1:1e:63:4e:a5:cf:6c:dd:ff:23:96:99:
d1:bc:99:3c:cf:ab:c1:96:b0:d2:a8:65:4f:79:29:
b6:f5:12:7f:88:87:82:32:46:47:70:92:4b:44:ec:
68:a7:4c:dc:46:23:9a:65:d5:43:47:c1:1f:ba:5b:
35:df:37:6e:22:02:62:c2:da:98:72:fa:6b:4f:42:
27:e7:98:c3:aa:ba:fb:6d:65:02:4a:b1:29:36:41:
e6:88:46:ef:9c:1a:3a:46:b0:05:20:49:78:95:6a:
bf:68:c7:cc:41:40:4d:79:4c:3e:d3:07:a6:5a:de:
a6:54:ab:f9:3d:ac:9c:57:3d:c4:70:ee:33:c9:d4:
d8:13:26:9a:5f:55:e1:6d:b7:74:c2:ec:a3:e3:aa:
60:30:7b:c2:bb:fd:77:3b:b7:c8:14:20:7f:8d:d6:
d5:39:1a:16:51:3c:33:0b:68:90:40:47:5f:f4:bd:
e2:6b:f4:5d:25:09:13:06:6f:57:af:3b:5c:26:28:
84:97:2a:65:83:f0:d9:54:1e:3c:77:17:db:a6:5f:
f5:f0:ea:76:e5:5c:6f:cc:52:23:75:77:2b:76:30:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:3A:D7:E6:67:E7:97:60:87:8A:26:9F:90:EB:41:5B:47:CA:CA
X509v3 Authority Key Identifier:
keyid:3A:1A:0C:00:16:B9:B3:3F:93:E8:A7:A3:93:D0:91:90:D5:E1:84:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OhoMABa5sz-T6Kejk9CRkNXhhJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/hus61-Zn55dgh4omn5DrQVtHyso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/995881-39cd-4104-9b29-0b6459775b64/1/OhoMABa5sz-T6Kejk9CRkNXhhJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.200.0/21
Signature Algorithm: sha256WithRSAEncryption
54:b6:94:5a:25:58:93:75:07:8f:12:c3:67:98:ba:05:2a:40:
eb:dd:c3:5a:71:f9:ad:50:d5:f8:24:4b:a0:e8:1a:fd:bd:bb:
2a:86:bc:76:68:02:4b:70:32:ac:3d:b8:1e:87:08:ba:10:46:
2d:07:52:97:ad:42:41:56:aa:bb:04:6c:36:96:80:70:19:0d:
31:a3:82:4a:80:7b:e5:79:a1:e2:ee:65:21:d7:9f:23:72:ca:
17:0e:78:1a:89:53:c3:75:bf:43:29:e5:2b:b4:2c:bd:74:5c:
7a:44:22:ee:3b:2e:f2:f7:e8:71:da:40:6c:46:a5:96:1a:9f:
25:e4:f2:c2:fe:5d:51:e5:be:58:c3:9d:ab:52:b9:23:a4:bc:
6e:e6:03:f3:f4:8a:89:38:d3:7d:7c:78:64:24:12:cb:79:dc:
e0:7a:09:92:47:87:16:71:99:d4:3a:9a:28:a4:6f:33:00:f6:
a6:f8:12:a4:ba:76:7e:ff:81:29:e4:ea:7f:7f:ce:e6:a0:cd:
74:91:df:92:c5:77:ee:c7:3a:f0:ef:4e:9d:11:12:92:14:2f:
ac:f9:77:da:8f:a7:cf:dd:51:0c:a7:d7:48:36:33:6f:4a:1b:
72:67:9a:0f:c0:9a:3e:f1:c8:0e:e7:63:2c:48:4d:8d:d7:4f:
2b:c5:8b:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJEj65DbodunwuNVxlcCyIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMWEwYzAwMTZiOWIzM2Y5M2U4YTdhMzkzZDA5MTkwZDVl
MTg0OTkwHhcNMjIwNzI4MTEyNzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmViM2FkN2U2NjdlNzk3NjA4NzhhMjY5ZjkwZWI0MTViNDdjYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRFoP9ft9gpvQVa0zAgq0ob/WS8T
1F7cVnXjJ/j6X3LRHmNOpc9s3f8jlpnRvJk8z6vBlrDSqGVPeSm29RJ/iIeCMkZH
cJJLROxop0zcRiOaZdVDR8Efuls13zduIgJiwtqYcvprT0In55jDqrr7bWUCSrEp
NkHmiEbvnBo6RrAFIEl4lWq/aMfMQUBNeUw+0wemWt6mVKv5PaycVz3EcO4zydTY
EyaaX1Xhbbd0wuyj46pgMHvCu/13O7fIFCB/jdbVORoWUTwzC2iQQEdf9L3ia/Rd
JQkTBm9XrztcJiiElyplg/DZVB48dxfbpl/18Op25VxvzFIjdXcrdjDSuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIbrOtfmZ+eXYIeKJp+Q60FbR8rKMB8GA1UdIwQY
MBaAFDoaDAAWubM/k+ino5PQkZDV4YSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjkt
MGI2NDU5Nzc1YjY0LzEvaHVzNjEtWm41NWRnaDRvbW41RHJRVnRIeXNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTU4ODEtMzljZC00MTA0LTliMjktMGI2NDU5Nzc1YjY0
LzEvT2hvTUFCYTVzei1UNktlams5Q1JrTlhoaEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvrIMA0G
CSqGSIb3DQEBCwUAA4IBAQBUtpRaJViTdQePEsNnmLoFKkDr3cNacfmtUNX4JEug
6Br9vbsqhrx2aAJLcDKsPbgehwi6EEYtB1KXrUJBVqq7BGw2loBwGQ0xo4JKgHvl
eaHi7mUh158jcsoXDngaiVPDdb9DKeUrtCy9dFx6RCLuOy7y9+hx2kBsRqWWGp8l
5PLC/l1R5b5Yw52rUrkjpLxu5gPz9IqJONN9fHhkJBLLedzgegmSR4cWcZnUOpoo
pG8zAPam+BKkunZ+/4Ep5Op/f87moM10kd+SxXfuxzrw706dERKSFC+s+Xfaj6fP
3VEMp9dINjNvShtyZ5oPwJo+8cgO52MsSE2N108rxYtS
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:53 2025 by rpki-client