Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/hf9a2EIz-WkRhZdmpF_U1wIpg1c.roa
File: hf9a2EIz-WkRhZdmpF_U1wIpg1c.roa (raw, json)
Hash identifier: CIeejjmEgsbMW/LzdItZ0WX+0lQYs51WRvYT8Vlb1qY=
Subject key identifier: 85:FF:5A:D8:42:33:F9:69:11:85:97:66:A4:5F:D4:D7:02:29:83:57
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 3893E742
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/hf9a2EIz-WkRhZdmpF_U1wIpg1c.roa
Signing time: Sat 01 Jan 2022 10:02:18 +0000
ROA not before: Sat 01 Jan 2022 10:02:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41073
IP address blocks: 89.207.56.0/21 maxlen: 24
185.54.104.0/22 maxlen: 22
2a00:1ed8::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949217090 (0x3893e742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Jan 1 10:02:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85ff5ad84233f96911859766a45fd4d702298357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:66:ff:55:17:36:cb:2d:0d:c1:c7:c8:d4:
b0:22:a3:e7:2d:32:e4:0e:85:45:86:b0:ee:d1:2f:
3f:04:83:62:d2:be:23:18:99:f2:20:c1:78:e8:be:
35:14:78:69:0a:70:48:56:dc:fd:dc:0f:19:41:0c:
5d:80:de:35:e1:50:69:7c:c5:34:99:f7:4d:e5:aa:
24:f1:92:7f:bb:d5:42:c7:61:10:d8:08:dc:d8:3d:
0b:35:f7:7c:da:d0:8c:02:03:d2:16:6c:71:7a:fb:
e8:c6:a2:58:43:c9:42:9a:0a:f3:1a:c1:2c:c1:a2:
8f:cd:c0:4d:98:32:a9:61:93:43:a8:59:9b:5f:88:
e3:74:55:99:6f:d1:f0:e5:85:d3:c8:73:49:e6:67:
4d:68:f6:d0:28:e9:1d:8c:62:5c:af:79:36:30:02:
0c:7d:ce:f0:42:ca:ba:ce:8d:99:35:36:1c:e9:16:
a5:69:cc:d6:1a:45:0c:5b:e9:e2:67:cc:1d:39:50:
d4:53:c9:03:6e:57:b2:c4:cd:ab:06:37:70:e3:37:
eb:28:dc:e3:8b:ce:e1:a3:e0:d7:f3:6b:c8:2a:cf:
f2:4a:db:55:14:20:20:3e:dc:c3:09:45:04:34:fc:
fa:cf:f7:a3:a9:da:30:9c:63:96:e6:a9:2b:5f:c2:
bb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:5A:D8:42:33:F9:69:11:85:97:66:A4:5F:D4:D7:02:29:83:57
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/hf9a2EIz-WkRhZdmpF_U1wIpg1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.56.0/21
185.54.104.0/22
IPv6:
2a00:1ed8::/29
Signature Algorithm: sha256WithRSAEncryption
93:11:0e:4f:09:ba:95:01:a7:79:cd:0d:e9:c3:13:5d:9d:bb:
6a:aa:02:0a:87:54:a2:14:cc:d8:b1:c4:de:c9:0e:fc:18:81:
84:56:1a:b4:05:b1:a6:7d:ee:38:8a:48:d0:7b:32:0c:e1:0b:
dc:89:03:c3:fc:2d:3c:6f:c2:61:89:21:ff:40:3d:9d:59:c3:
44:1c:13:60:af:e9:ce:e0:24:65:e4:bc:43:38:b0:7a:cd:eb:
c6:90:79:6b:bd:16:97:ff:87:f0:2e:17:6a:12:09:93:71:df:
05:ac:85:d3:41:2d:37:7d:a7:74:d8:25:72:a2:fa:36:e7:92:
b8:07:50:49:ba:5c:9a:99:04:bc:77:ed:e5:e9:74:4e:fa:d2:
64:e2:d4:37:8d:32:b3:eb:f8:75:d9:17:23:08:b3:31:38:4b:
42:1d:fd:b5:3a:9d:65:08:a6:f7:fb:e8:d5:8b:e3:23:4b:c5:
96:22:a5:ab:c0:ec:96:97:bb:dc:06:b4:36:e0:23:64:db:27:
de:8f:d8:34:cc:cd:39:38:8d:75:e7:55:d8:3a:7a:b6:ca:bd:
5f:e5:87:f3:90:21:ae:2e:0c:7a:73:09:1f:76:73:ba:45:28:
e6:df:54:b7:bd:b2:f3:0c:f5:f5:41:d8:04:94:59:e8:23:f8:
81:60:ee:db
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEOJPnQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YzkzMjEzZDg4ZmE4NzRlYjQ0NjBlMmM1Y2YxYmIxYTkxZGE5MDc4MB4XDTIyMDEw
MTEwMDIxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODVmZjVhZDg0MjMz
Zjk2OTExODU5NzY2YTQ1ZmQ0ZDcwMjI5ODM1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL5LZv9VFzbLLQ3Bx8jUsCKj5y0y5A6FRYaw7tEvPwSDYtK+
IxiZ8iDBeOi+NRR4aQpwSFbc/dwPGUEMXYDeNeFQaXzFNJn3TeWqJPGSf7vVQsdh
ENgI3Ng9CzX3fNrQjAID0hZscXr76MaiWEPJQpoK8xrBLMGij83ATZgyqWGTQ6hZ
m1+I43RVmW/R8OWF08hzSeZnTWj20CjpHYxiXK95NjACDH3O8ELKus6NmTU2HOkW
pWnM1hpFDFvp4mfMHTlQ1FPJA25XssTNqwY3cOM36yjc44vO4aPg1/NryCrP8krb
VRQgID7cwwlFBDT8+s/3o6naMJxjluapK1/CuyECAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBSF/1rYQjP5aRGFl2akX9TXAimDVzAfBgNVHSMEGDAWgBRMkyE9iPqHTrRG
Dixc8bsakdqQeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1RKTWhQWWo2aDA2MFJnNHNYUEc3R3BIYWtIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTEvZTRlNjk2LTlkNzgtNDE0Yy1hZjQwLWNmNTZjNjZhMGFjMC8x
L2hmOWEyRUl6LVdrUmhaZG1wRl9VMXdJcGcxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEv
ZTRlNjk2LTlkNzgtNDE0Yy1hZjQwLWNmNTZjNjZhMGFjMC8xL1RKTWhQWWo2aDA2
MFJnNHNYUEc3R3BIYWtIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA1nPOAMEArk2aDANBAIAAjAHAwUD
KgAe2DANBgkqhkiG9w0BAQsFAAOCAQEAkxEOTwm6lQGnec0N6cMTXZ27aqoCCodU
ohTM2LHE3skO/BiBhFYatAWxpn3uOIpI0HsyDOEL3IkDw/wtPG/CYYkh/0A9nVnD
RBwTYK/pzuAkZeS8Qziwes3rxpB5a70Wl/+H8C4XahIJk3HfBayF00EtN32ndNgl
cqL6NueSuAdQSbpcmpkEvHft5el0TvrSZOLUN40ys+v4ddkXIwizMThLQh39tTqd
ZQim9/vo1YvjI0vFliKlq8Dslpe73Aa0NuAjZNsn3o/YNMzNOTiNdedV2Dp6tsq9
X+WH85Ahri4MenMJH3ZzukUo5t9Ut72y8wz19UHYBJRZ6CP4gWDu2w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org