Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/HmOvtqwCoffUQYg5ELdwIUIPkRA.roa
File: HmOvtqwCoffUQYg5ELdwIUIPkRA.roa (raw, json)
Hash identifier: CQDUe7w1a6v4g6mL+77i4owCRSFezqOFRXYFu8+0MqY=
Subject key identifier: 1E:63:AF:B6:AC:02:A1:F7:D4:41:88:39:10:B7:70:21:42:0F:91:10
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 09C8B50B
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/HmOvtqwCoffUQYg5ELdwIUIPkRA.roa
Signing time: Wed 13 Apr 2022 08:06:37 +0000
ROA not before: Wed 13 Apr 2022 08:06:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35258
IP address blocks: 185.93.58.0/23 maxlen: 23
185.93.56.0/24 maxlen: 24
2a03:8fa0::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164148491 (0x9c8b50b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Apr 13 08:06:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e63afb6ac02a1f7d441883910b77021420f9110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3f:4a:64:7d:a5:8c:46:7b:9a:fa:bc:02:43:
cd:e5:db:13:81:63:0a:27:3b:92:cb:bd:82:bc:dd:
ad:94:a6:8a:09:df:6f:84:26:40:6d:38:23:ff:6c:
a8:17:5c:95:87:3a:c9:a1:f4:f5:bd:cf:63:c6:fa:
df:6f:8f:98:47:5c:f9:5c:e4:fb:f3:f0:3a:85:67:
32:5d:58:96:4d:e0:31:56:09:ac:55:0f:7a:b1:74:
09:24:7a:c2:d3:eb:b1:20:62:a5:27:61:9b:46:8a:
76:5f:3a:6a:4b:4a:13:cd:40:d0:68:9b:b9:fe:cd:
75:c2:a7:a6:2e:2b:62:68:2c:81:b5:75:a0:cf:ab:
d5:e7:5a:1e:4e:05:3e:68:c9:2b:83:4c:17:1d:8e:
be:4a:21:68:9c:73:5a:6f:58:fc:9c:2e:c9:d9:1e:
f2:7f:cb:be:df:19:57:84:7a:83:28:63:ec:45:df:
b3:e7:d1:14:d3:51:0f:f0:e5:f6:5f:20:98:4f:49:
4e:45:bc:0e:30:30:d7:b3:9b:53:fd:dc:24:8c:d0:
88:79:3d:77:2f:7a:6a:8f:4d:1c:2c:df:b5:01:e2:
1e:72:a8:7a:33:10:14:cf:c6:6c:17:28:3e:76:1d:
01:d5:c6:30:ea:24:7d:8c:74:7c:81:48:ee:dd:e4:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:AF:B6:AC:02:A1:F7:D4:41:88:39:10:B7:70:21:42:0F:91:10
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/HmOvtqwCoffUQYg5ELdwIUIPkRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.56.0/24
185.93.58.0/23
IPv6:
2a03:8fa0::/36
Signature Algorithm: sha256WithRSAEncryption
7d:24:8f:36:dd:0f:2d:09:e8:a2:7b:b1:12:2a:18:9c:49:d3:
dc:74:0f:c9:68:80:9d:6c:9a:03:6a:32:b2:aa:2f:b4:97:cc:
7a:7e:11:fd:12:8e:78:a2:9d:d7:22:35:f3:d3:ef:c0:3d:17:
f8:40:02:19:69:53:2f:49:58:07:99:ad:d3:78:59:84:36:3f:
33:42:a2:50:1f:94:f0:75:4c:6d:23:0c:8a:c5:a7:07:45:8c:
ef:98:5a:3c:73:2c:43:9d:59:8d:6a:d2:69:11:b1:02:6e:23:
ab:8e:94:bf:cf:2e:34:2b:29:22:b0:fb:ae:7f:d6:64:d5:3d:
28:89:1d:5f:50:e4:64:54:87:f4:30:51:ee:30:7d:40:09:83:
ad:d0:d9:f2:6e:45:32:0f:d0:31:4a:c8:ec:97:e3:b6:c9:6b:
c4:ec:fe:b3:96:0a:49:48:8c:b6:c0:14:92:24:27:33:48:94:
81:a2:a2:db:13:c4:92:74:c4:9d:fa:67:c1:89:17:33:84:f7:
5d:37:4f:7e:67:87:48:3f:d1:50:ee:93:37:72:f0:ad:22:be:
ea:cf:1b:99:e3:f4:0b:73:0d:72:62:86:e9:54:0b:63:15:d9:
af:de:aa:36:a0:bb:10:3d:c7:86:d0:9a:64:7d:56:31:32:59:
77:b9:2b:55
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIECci1CzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YzJkN2MyMzhlODlkY2Q1MmY2ZmIyMjk2ZGZhNDc1OGM2MWM5N2JlMB4XDTIyMDQx
MzA4MDYzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWU2M2FmYjZhYzAy
YTFmN2Q0NDE4ODM5MTBiNzcwMjE0MjBmOTExMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN4/SmR9pYxGe5r6vAJDzeXbE4FjCic7ksu9grzdrZSmignf
b4QmQG04I/9sqBdclYc6yaH09b3PY8b632+PmEdc+Vzk+/PwOoVnMl1Ylk3gMVYJ
rFUPerF0CSR6wtPrsSBipSdhm0aKdl86aktKE81A0Gibuf7NdcKnpi4rYmgsgbV1
oM+r1edaHk4FPmjJK4NMFx2OvkohaJxzWm9Y/Jwuydke8n/Lvt8ZV4R6gyhj7EXf
s+fRFNNRD/Dl9l8gmE9JTkW8DjAw17ObU/3cJIzQiHk9dy96ao9NHCzftQHiHnKo
ejMQFM/GbBcoPnYdAdXGMOokfYx0fIFI7t3kEVMCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBQeY6+2rAKh99RBiDkQt3AhQg+REDAfBgNVHSMEGDAWgBQMLXwjjonc1S9v
silt+kdYxhyXvjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RDMThJNDZKM05VdmI3SXBiZnBIV01ZY2w3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvNDY5MTZlLWU4NmMtNDRhOC04YWI5LTUzODQ5YmFmMWI0NS8x
L0htT3Z0cXdDb2ZmVVFZZzVFTGR3SVVJUGtSQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
NDY5MTZlLWU4NmMtNDRhOC04YWI5LTUzODQ5YmFmMWI0NS8xL0RDMThJNDZKM05V
dmI3SXBiZnBIV01ZY2w3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwEgQCAAEwDAMEALldOAMEAbldOjAOBAIAAjAIAwYE
KgOPoAAwDQYJKoZIhvcNAQELBQADggEBAH0kjzbdDy0J6KJ7sRIqGJxJ09x0D8lo
gJ1smgNqMrKqL7SXzHp+Ef0SjniindciNfPT78A9F/hAAhlpUy9JWAeZrdN4WYQ2
PzNColAflPB1TG0jDIrFpwdFjO+YWjxzLEOdWY1q0mkRsQJuI6uOlL/PLjQrKSKw
+65/1mTVPSiJHV9Q5GRUh/QwUe4wfUAJg63Q2fJuRTIP0DFKyOyX47bJa8Ts/rOW
CklIjLbAFJIkJzNIlIGiotsTxJJ0xJ36Z8GJFzOE9103T35nh0g/0VDukzdy8K0i
vurPG5nj9AtzDXJihulUC2MV2a/eqjaguxA9x4bQmmR9VjEyWXe5K1U=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:24 2023 by rpki-client on console-ams.rpki-client.org