Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/hTs1HE6Oa6ChalQsjRJHtN0c-Ig.roa
File: hTs1HE6Oa6ChalQsjRJHtN0c-Ig.roa (raw, json)
Hash identifier: qzjIBVn4jHAEZcTUbw6Q0dezrsCmXCH4ehR5I2th2RM=
Subject key identifier: 85:3B:35:1C:4E:8E:6B:A0:A1:6A:54:2C:8D:12:47:B4:DD:1C:F8:88
Certificate issuer: /CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Certificate serial: 0135595B
Authority key identifier: 7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/hTs1HE6Oa6ChalQsjRJHtN0c-Ig.roa
Signing time: Tue 01 Feb 2022 21:11:45 +0000
ROA not before: Tue 01 Feb 2022 21:11:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43930
IP address blocks: 185.108.34.0/24 maxlen: 24
185.108.33.0/24 maxlen: 24
185.194.165.0/24 maxlen: 24
185.194.164.0/24 maxlen: 24
2a02:c800::/32 maxlen: 32
2a02:c800:42::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20273499 (0x135595b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf39e6eb3131ecf3cddcd0c9e378c352da41fc2
Validity
Not Before: Feb 1 21:11:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=853b351c4e8e6ba0a16a542c8d1247b4dd1cf888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:29:0a:b0:04:e9:63:92:69:4f:a1:7e:a7:
8e:b6:95:1a:4b:e8:10:2a:c8:7e:68:d5:82:ab:d6:
de:35:84:4e:f0:45:66:29:ce:e6:61:df:c9:a7:34:
9a:ea:2a:d9:00:c8:49:6c:d3:ca:90:c3:06:4f:43:
57:05:2b:e4:d7:9c:72:15:f8:44:15:a0:38:04:97:
79:9a:d6:1e:8d:f5:ca:64:8a:cf:de:1a:c5:60:51:
33:a6:01:dd:ba:e0:c5:6b:93:ba:61:b7:d1:b6:53:
b6:98:98:b4:b0:ac:ee:bd:6b:51:8a:44:0b:02:df:
ae:39:6b:e1:92:13:9d:16:c6:c1:1c:65:1b:07:cc:
58:78:7d:6e:fe:fe:61:48:09:aa:ca:eb:8f:11:44:
f1:5c:89:c5:1e:1a:90:25:3f:b9:6b:a8:b3:c8:e6:
ce:24:75:e5:9b:20:50:f8:35:b6:a5:a3:98:b5:b3:
2d:e6:b3:ed:c3:7e:df:0d:a3:c9:95:8b:f3:30:bf:
bf:b6:2c:50:fd:03:a6:b2:e6:d0:d6:d5:ad:95:4e:
46:e8:7b:17:d8:0d:cc:c8:7b:6b:2d:03:0c:e0:33:
db:b8:dd:7b:e4:7e:02:b7:ec:5b:34:94:28:9d:a2:
30:0e:50:93:78:4f:0c:e5:49:a8:18:22:ad:5b:1b:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3B:35:1C:4E:8E:6B:A0:A1:6A:54:2C:8D:12:47:B4:DD:1C:F8:88
X509v3 Authority Key Identifier:
keyid:7B:F3:9E:6E:B3:13:1E:CF:3C:DD:CD:0C:9E:37:8C:35:2D:A4:1F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_OebrMTHs883c0MnjeMNS2kH8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/hTs1HE6Oa6ChalQsjRJHtN0c-Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a214a5-4449-44af-87ff-c967c9db5752/1/e_OebrMTHs883c0MnjeMNS2kH8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.33.0-185.108.34.255
185.194.164.0/23
IPv6:
2a02:c800::/32
Signature Algorithm: sha256WithRSAEncryption
2b:3d:96:bc:8f:b4:da:c5:a1:b9:ce:f7:5e:36:7a:e3:e2:fc:
40:3d:3a:96:21:3d:18:fc:e2:e5:21:03:25:fa:e7:94:1e:1c:
7a:8b:aa:91:cc:b4:91:e2:a5:63:55:05:c3:9a:6b:32:8d:38:
71:fa:bd:1a:58:5d:8c:28:2d:4e:69:9f:42:80:7d:f9:46:68:
b7:c5:92:a4:32:87:96:e6:7f:5a:c6:52:57:06:ac:fb:bc:28:
76:3b:26:d7:77:ac:62:fa:2b:64:bd:c6:f8:c8:11:01:b3:1b:
1d:f1:7a:8f:12:47:30:7d:7f:73:78:42:ce:c4:8a:50:43:7c:
96:08:d4:c5:81:ba:89:47:97:67:e1:18:e0:36:27:70:cc:c4:
65:99:a2:a4:82:78:af:2d:d5:e7:99:0f:88:44:83:6a:45:f8:
38:5c:05:fc:54:2d:cd:e9:33:3c:7f:36:45:57:2b:82:ac:dd:
c3:4b:4f:6d:74:4c:cb:be:00:8b:d8:ba:62:59:13:6a:8c:57:
52:3e:e1:4c:7e:ab:c7:f5:8a:3b:f5:0a:aa:a6:84:e7:5e:0b:
fd:2f:98:03:fc:aa:05:db:a8:40:65:41:58:d2:cf:6e:f9:0e:
6f:3c:87:ff:8b:4a:a4:ff:83:59:3d:93:c7:d3:e0:1d:53:34:
b2:85:8e:12
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEATVZWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
YmYzOWU2ZWIzMTMxZWNmM2NkZGNkMGM5ZTM3OGMzNTJkYTQxZmMyMB4XDTIyMDIw
MTIxMTE0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUzYjM1MWM0ZThl
NmJhMGExNmE1NDJjOGQxMjQ3YjRkZDFjZjg4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALCXKQqwBOljkmlPoX6njraVGkvoECrIfmjVgqvW3jWETvBF
ZinO5mHfyac0muoq2QDISWzTypDDBk9DVwUr5NecchX4RBWgOASXeZrWHo31ymSK
z94axWBRM6YB3brgxWuTumG30bZTtpiYtLCs7r1rUYpECwLfrjlr4ZITnRbGwRxl
GwfMWHh9bv7+YUgJqsrrjxFE8VyJxR4akCU/uWuos8jmziR15ZsgUPg1tqWjmLWz
Leaz7cN+3w2jyZWL8zC/v7YsUP0DprLm0NbVrZVORuh7F9gNzMh7ay0DDOAz27jd
e+R+ArfsWzSUKJ2iMA5Qk3hPDOVJqBgirVsbdosCAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBSFOzUcTo5roKFqVCyNEke03Rz4iDAfBgNVHSMEGDAWgBR7855usxMezzzd
zQyeN4w1LaQfwjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VfT2Vick1USHM4ODNjME1uamVNTlMya0g4SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvYTIxNGE1LTQ0NDktNDRhZi04N2ZmLWM5NjdjOWRiNTc1Mi8x
L2hUczFIRTZPYTZDaGFsUXNqUkpIdE4wYy1JZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
YTIxNGE1LTQ0NDktNDRhZi04N2ZmLWM5NjdjOWRiNTc1Mi8xL2VfT2Vick1USHM4
ODNjME1uamVNTlMya0g4SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFDAMAwQAuWwhAwQAuWwiAwQBucKkMA0E
AgACMAcDBQAqAsgAMA0GCSqGSIb3DQEBCwUAA4IBAQArPZa8j7TaxaG5zvdeNnrj
4vxAPTqWIT0Y/OLlIQMl+ueUHhx6i6qRzLSR4qVjVQXDmmsyjThx+r0aWF2MKC1O
aZ9CgH35Rmi3xZKkMoeW5n9axlJXBqz7vCh2OybXd6xi+itkvcb4yBEBsxsd8XqP
EkcwfX9zeELOxIpQQ3yWCNTFgbqJR5dn4RjgNidwzMRlmaKkgnivLdXnmQ+IRINq
Rfg4XAX8VC3N6TM8fzZFVyuCrN3DS09tdEzLvgCL2LpiWRNqjFdSPuFMfqvH9Yo7
9QqqpoTnXgv9L5gD/KoF26hAZUFY0s9u+Q5vPIf/i0qk/4NZPZPH0+AdUzSyhY4S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:06 2024 by rpki-client on console-ams.rpki-client.org