Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/vHMExtd1ixx8lk1zvpFEIgY_f-s.roa
File: vHMExtd1ixx8lk1zvpFEIgY_f-s.roa (raw, json)
Hash identifier: 4ueXYOG7WVqeNjlQ9/2ZHX7e3bqRCVPoZnelGy1UJh0=
Subject key identifier: BC:73:04:C6:D7:75:8B:1C:7C:96:4D:73:BE:91:44:22:06:3F:7F:EB
Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial: 018B280718FBF90E7294FF2A3DF95D6624B9
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/vHMExtd1ixx8lk1zvpFEIgY_f-s.roa
Signing time: Fri 13 Oct 2023 07:53:55 +0000
ROA not before: Fri 13 Oct 2023 07:53:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 94.136.168.0/22 maxlen: 22
185.75.20.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:07:18:fb:f9:0e:72:94:ff:2a:3d:f9:5d:66:24:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Validity
Not Before: Oct 13 07:53:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc7304c6d7758b1c7c964d73be914422063f7feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:5d:54:69:2f:c5:72:df:71:5a:ac:b8:72:
6c:8e:d7:2a:a9:3d:4e:fd:89:0c:0c:e3:01:93:31:
55:b4:23:c2:8f:c1:d9:70:a1:55:2c:9a:e5:fa:d8:
b2:44:aa:d0:9c:ad:d8:51:10:91:90:4d:47:74:9e:
5f:5f:c8:b6:8e:0e:c4:90:37:84:73:c6:7a:d4:62:
34:e9:81:77:81:b4:8e:e0:ce:3f:8b:0c:ae:58:6e:
76:5b:5e:84:f4:e2:97:78:89:52:2c:19:79:4d:8d:
88:80:8e:3e:c9:f9:8b:87:b9:3d:dc:c1:60:88:7f:
6c:b7:eb:95:b1:cc:65:92:66:df:7d:97:1b:8e:3f:
c3:10:a4:f3:4a:a4:dd:d5:e7:a6:45:16:65:1f:59:
30:12:34:cb:eb:65:7c:a6:b7:49:fe:16:e6:32:b8:
1d:31:07:8a:60:b2:eb:5d:e4:eb:55:f6:be:05:85:
65:8c:fd:d3:f9:a7:f5:14:a6:5b:74:ad:fc:8e:3e:
aa:e3:47:23:e8:c6:ad:09:54:93:2f:c9:4d:2f:6c:
c1:71:35:fc:97:59:1e:b1:16:37:91:8d:ff:0b:fa:
50:da:86:08:01:ae:ea:6a:31:03:f0:95:1a:65:92:
1e:c4:2f:38:01:8c:3e:b1:16:22:ba:71:15:99:08:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:04:C6:D7:75:8B:1C:7C:96:4D:73:BE:91:44:22:06:3F:7F:EB
X509v3 Authority Key Identifier:
keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/vHMExtd1ixx8lk1zvpFEIgY_f-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.168.0/22
185.75.20.0/23
Signature Algorithm: sha256WithRSAEncryption
02:27:0d:0c:b6:58:89:c5:de:7c:97:58:1d:27:3c:1f:55:d2:
d7:ed:96:46:65:45:eb:87:50:ac:17:ae:4d:cf:bd:7d:81:6b:
51:69:fd:7f:62:96:24:5e:ff:36:9c:78:0f:e1:03:4b:c5:a9:
04:f6:84:3f:eb:cb:c7:1f:16:e9:1a:58:3f:90:37:11:03:58:
75:ed:a9:0a:86:40:de:b3:33:e5:82:08:4e:b6:6d:df:46:95:
5f:34:01:e9:7e:71:0e:c4:06:e7:ec:85:f1:96:3b:9f:8c:ca:
c6:6f:64:8a:8d:62:b9:2c:8d:dd:1f:57:23:15:42:53:24:8a:
e7:17:b1:0f:b9:d5:8b:7d:f8:71:6d:3a:3d:d8:06:47:db:72:
63:25:10:92:50:e5:59:86:9d:23:7a:a5:b1:5f:66:4a:ff:1a:
81:71:2c:c2:5b:29:60:94:90:fd:d6:8a:b2:6b:5e:ae:85:8d:
a6:2a:bb:5f:62:df:8f:b7:53:ab:71:89:5a:2b:3a:78:1f:a4:
b0:43:94:31:32:a2:67:e2:26:c3:70:49:8e:ac:c9:47:d5:56:
7f:c5:72:32:cd:42:9b:1d:0d:35:f4:3c:90:44:15:39:66:f8:
42:16:c3:6d:b8:a1:2d:40:51:88:88:64:22:7e:ff:ef:20:3e:
3c:14:71:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsoBxj7+Q5ylP8qPfldZiS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTFhYWUwYzkzYWQwNGI3Mjk4MDgyYjY4YmY2YTU0ZmE2
OGJjZjAwHhcNMjMxMDEzMDc1MzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzczMDRjNmQ3NzU4YjFjN2M5NjRkNzNiZTkxNDQyMjA2M2Y3ZmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs75dVGkvxXLfcVqsuHJsjtcqqT1O
/YkMDOMBkzFVtCPCj8HZcKFVLJrl+tiyRKrQnK3YURCRkE1HdJ5fX8i2jg7EkDeE
c8Z61GI06YF3gbSO4M4/iwyuWG52W16E9OKXeIlSLBl5TY2IgI4+yfmLh7k93MFg
iH9st+uVscxlkmbffZcbjj/DEKTzSqTd1eemRRZlH1kwEjTL62V8prdJ/hbmMrgd
MQeKYLLrXeTrVfa+BYVljP3T+af1FKZbdK38jj6q40cj6MatCVSTL8lNL2zBcTX8
l1kesRY3kY3/C/pQ2oYIAa7qajED8JUaZZIexC84AYw+sRYiunEVmQjdvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLxzBMbXdYscfJZNc76RRCIGP3/rMB8GA1UdIwQY
MBaAFFzhquDJOtBLcpgIK2i/alT6aLzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQt
YmExNDE4ZDIyMDg3LzEvdkhNRXh0ZDFpeHg4bGsxenZwRkVJZ1lfZi1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQtYmExNDE4ZDIyMDg3
LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXoioAwQB
uUsUMA0GCSqGSIb3DQEBCwUAA4IBAQACJw0MtliJxd58l1gdJzwfVdLX7ZZGZUXr
h1CsF65Nz719gWtRaf1/YpYkXv82nHgP4QNLxakE9oQ/68vHHxbpGlg/kDcRA1h1
7akKhkDeszPlgghOtm3fRpVfNAHpfnEOxAbn7IXxljufjMrGb2SKjWK5LI3dH1cj
FUJTJIrnF7EPudWLffhxbTo92AZH23JjJRCSUOVZhp0jeqWxX2ZK/xqBcSzCWylg
lJD91oqya16uhY2mKrtfYt+Pt1OrcYlaKzp4H6SwQ5QxMqJn4ibDcEmOrMlH1VZ/
xXIyzUKbHQ019DyQRBU5ZvhCFsNtuKEtQFGIiGQifv/vID48FHEH
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:01 2025 by rpki-client