Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/HrL4mt4Gd3Q0dZb9vVx-lo92r-g.roa
File: HrL4mt4Gd3Q0dZb9vVx-lo92r-g.roa (raw, json)
Hash identifier: ulXEWZK1IOkpK9E60PHp3/2aycAEqCOHtDJK8t1Qm48=
Subject key identifier: 1E:B2:F8:9A:DE:06:77:74:34:75:96:FD:BD:5C:7E:96:8F:76:AF:E8
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 342A1839
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/HrL4mt4Gd3Q0dZb9vVx-lo92r-g.roa
Signing time: Sat 01 Jan 2022 08:58:23 +0000
ROA not before: Sat 01 Jan 2022 08:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24867
IP address blocks: 82.211.64.0/18 maxlen: 24
85.133.0.0/17 maxlen: 24
62.140.192.0/19 maxlen: 24
2a01:398::/32 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875173945 (0x342a1839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Jan 1 08:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eb2f89ade067774347596fdbd5c7e968f76afe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:db:c6:53:b9:33:6a:e7:ec:9e:4d:77:3b:
da:3b:ca:3d:6e:ed:39:95:c2:16:32:2d:f6:dc:ed:
1f:6d:e8:a4:bd:d4:93:7b:95:42:6a:2d:88:fb:89:
49:08:d6:5d:49:67:b5:92:33:1e:4c:40:29:03:67:
61:13:16:96:4b:93:13:e9:2c:14:f9:13:df:7d:91:
a9:9d:1d:c4:6a:0e:4f:c4:db:7a:61:4b:f6:23:85:
5d:e5:93:71:3e:61:54:f2:fd:4d:a1:d1:4c:62:1b:
26:a6:79:a0:84:cc:e3:47:08:2e:b1:c5:0b:9e:11:
1f:59:ad:89:9e:49:f7:6f:dd:ae:cd:d4:5f:83:43:
a7:5b:90:06:18:93:31:3a:b2:4d:5f:fb:e4:f7:c6:
47:55:82:12:6b:47:6c:29:47:ae:db:5e:ee:8a:40:
d7:4e:c2:01:09:81:1e:ce:23:94:fb:61:4d:0c:aa:
95:33:e5:b9:eb:cb:5d:bc:e3:73:d9:3a:e3:54:f0:
93:c4:59:2b:5f:cf:81:d4:50:b0:77:b8:03:63:25:
ab:1d:6d:e5:78:8c:93:2d:3a:21:89:79:a3:ed:73:
8a:d1:8c:75:76:bf:4b:5f:6c:56:8c:c7:17:7f:fe:
3b:43:a3:64:1c:81:4c:49:3e:9c:4d:3d:2c:48:d4:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:F8:9A:DE:06:77:74:34:75:96:FD:BD:5C:7E:96:8F:76:AF:E8
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/HrL4mt4Gd3Q0dZb9vVx-lo92r-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.140.192.0/19
82.211.64.0/18
85.133.0.0/17
IPv6:
2a01:398::/32
Signature Algorithm: sha256WithRSAEncryption
4e:03:d9:d5:9e:72:b1:46:ef:86:43:99:bb:06:b5:f8:11:40:
93:e9:27:b9:31:cc:d2:16:36:4f:7f:45:77:8a:e1:80:76:1d:
dd:0e:b6:68:15:fe:11:6d:2b:fa:97:23:99:31:0e:38:5c:25:
9f:d9:11:57:6b:80:69:a7:5c:16:91:3c:20:b1:70:99:5f:29:
11:5a:15:ca:64:5e:06:8a:40:38:92:c7:45:85:02:de:e2:a3:
f1:f6:bf:08:b1:8e:46:7a:f8:59:57:da:f6:f5:82:dd:3f:08:
07:de:87:36:44:4a:e2:0f:25:e4:67:4b:9f:ab:df:78:76:f9:
70:de:e6:02:9a:98:58:8b:e2:2f:c9:83:4a:86:72:03:4d:87:
db:4b:d4:af:6c:c5:17:18:7c:32:2d:39:92:26:55:5e:a7:12:
97:44:68:8e:82:45:61:56:85:57:fe:c1:0b:2b:5a:5a:9f:e6:
ff:16:a9:5a:a1:53:06:da:ab:8a:2c:10:ee:5c:f8:e3:3e:a2:
4e:db:83:cc:a6:09:4f:79:1b:e1:0d:d7:18:a9:de:64:ad:69:
6e:34:33:6d:e8:ce:46:43:2f:a2:a9:56:3e:2c:68:70:b5:b3:
ce:f5:e4:12:33:65:f4:c6:af:85:87:09:fc:9a:f1:7f:00:9c:
60:ba:a0:e8
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIENCoYOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
ZTA0ZTBhNzE4YTYxMzlhOWM2NWYwZDQ4ODZiYjgyNzE0ZGE2NjgyMB4XDTIyMDEw
MTA4NTgyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWViMmY4OWFkZTA2
Nzc3NDM0NzU5NmZkYmQ1YzdlOTY4Zjc2YWZlODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKOo28ZTuTNq5+yeTXc72jvKPW7tOZXCFjIt9tztH23opL3U
k3uVQmotiPuJSQjWXUlntZIzHkxAKQNnYRMWlkuTE+ksFPkT332RqZ0dxGoOT8Tb
emFL9iOFXeWTcT5hVPL9TaHRTGIbJqZ5oITM40cILrHFC54RH1mtiZ5J92/drs3U
X4NDp1uQBhiTMTqyTV/75PfGR1WCEmtHbClHrtte7opA107CAQmBHs4jlPthTQyq
lTPluevLXbzjc9k641Twk8RZK1/PgdRQsHe4A2Mlqx1t5XiMky06IYl5o+1zitGM
dXa/S19sVozHF3/+O0OjZByBTEk+nE09LEjUPJ0CAwEAAaOCAiQwggIgMB0GA1Ud
DgQWBBQesvia3gZ3dDR1lv29XH6Wj3av6DAfBgNVHSMEGDAWgBROBOCnGKYTmpxl
8NSIa7gnFNpmgjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RnVGdweGltRTVxY1pmRFVpR3U0SnhUYVpvSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTAvNGFmZWFiLTAyYjktNGViZC1iZmEyLThlODBiNDk2YTAzZS8x
L0hyTDRtdDRHZDNRMGRaYjl2VngtbG85MnItZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAv
NGFmZWFiLTAyYjktNGViZC1iZmEyLThlODBiNDk2YTAzZS8xL1RnVGdweGltRTVx
Y1pmRFVpR3U0SnhUYVpvSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBT6MwAMEBlLTQAMEB1WFADANBAIA
AjAHAwUAKgEDmDANBgkqhkiG9w0BAQsFAAOCAQEATgPZ1Z5ysUbvhkOZuwa1+BFA
k+knuTHM0hY2T39Fd4rhgHYd3Q62aBX+EW0r+pcjmTEOOFwln9kRV2uAaadcFpE8
ILFwmV8pEVoVymReBopAOJLHRYUC3uKj8fa/CLGORnr4WVfa9vWC3T8IB96HNkRK
4g8l5GdLn6vfeHb5cN7mApqYWIviL8mDSoZyA02H20vUr2zFFxh8Mi05kiZVXqcS
l0RojoJFYVaFV/7BCytaWp/m/xapWqFTBtqriiwQ7lz44z6iTtuDzKYJT3kb4Q3X
GKneZK1pbjQzbejORkMvoqlWPixocLWzzvXkEjNl9MavhYcJ/JrxfwCcYLqg6A==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:13 2023 by rpki-client on console-ams.rpki-client.org