Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/hlxZ3kwCvLQDBnbvTcBWX7l4JUc.roa
File: hlxZ3kwCvLQDBnbvTcBWX7l4JUc.roa (raw, json)
Hash identifier: DIkbrH0bRyqMauIyuuTvTzQ/70jN7n656HgkF8qefvA=
Subject key identifier: 86:5C:59:DE:4C:02:BC:B4:03:06:76:EF:4D:C0:56:5F:B9:78:25:47
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 0188C11477870203E30CE8CDCAF975828902
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/hlxZ3kwCvLQDBnbvTcBWX7l4JUc.roa
Signing time: Thu 15 Jun 2023 22:02:03 +0000
ROA not before: Thu 15 Jun 2023 22:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36218
IP address blocks: 208.88.4.0/22 maxlen: 22
199.103.56.0/23 maxlen: 23
199.103.59.0/24 maxlen: 24
199.103.60.0/22 maxlen: 22
208.69.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c1:14:77:87:02:03:e3:0c:e8:cd:ca:f9:75:82:89:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jun 15 22:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=865c59de4c02bcb4030676ef4dc0565fb9782547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:3e:79:7c:88:dc:8e:d6:7a:48:f8:41:66:
0e:cc:c6:73:d8:07:e9:3b:52:24:32:26:9a:b4:d9:
e9:f3:70:15:ac:ec:f9:ad:b2:be:2e:d5:3f:73:62:
21:7b:09:92:04:87:02:ea:9d:07:2f:82:47:ba:e3:
6d:0c:56:06:c7:8a:6c:a2:ec:c5:11:e3:49:77:15:
f7:25:97:cd:0a:65:ba:f7:c2:54:93:e6:2b:8b:6e:
d1:c4:de:a8:91:05:2b:88:96:33:85:d7:28:74:87:
6b:7e:fb:33:da:73:18:3d:14:d7:88:90:d2:9b:fb:
c0:c5:03:52:35:01:a3:13:81:12:2e:a4:8d:be:24:
f0:3c:b4:f9:d3:fc:c6:8a:4e:ab:c0:25:dc:3b:ac:
bd:05:1e:76:78:db:af:0c:58:19:c4:18:90:17:99:
29:14:49:2d:d5:d2:7c:b2:8f:d5:68:88:d9:a3:c5:
91:46:87:61:70:e9:98:6f:21:7b:e0:67:1b:5a:00:
28:64:b3:cd:56:49:8c:ac:45:c0:fe:c8:59:20:b1:
c4:b9:5a:09:24:4d:2a:e3:47:eb:03:b0:b5:ea:0b:
ea:f5:10:66:01:25:b8:94:49:a7:84:f8:fd:45:4d:
1f:85:43:d5:78:85:6e:ae:4f:ed:b7:58:43:f6:65:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5C:59:DE:4C:02:BC:B4:03:06:76:EF:4D:C0:56:5F:B9:78:25:47
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/hlxZ3kwCvLQDBnbvTcBWX7l4JUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.103.56.0/23
199.103.59.0-199.103.63.255
208.69.56.0/22
208.88.4.0/22
Signature Algorithm: sha256WithRSAEncryption
21:52:41:a8:dc:2a:38:cd:e2:40:c3:71:6e:52:85:d3:3d:f2:
a7:e7:02:9d:b4:ba:83:78:cf:d2:9f:02:48:e9:b2:ee:fe:09:
54:d3:8f:48:b9:b6:db:d8:bf:f5:ad:28:ab:b0:cb:71:4f:62:
0f:d2:86:66:2d:b6:e3:33:13:c5:9e:35:99:90:ee:72:fd:96:
1e:1c:6f:94:41:da:af:9b:37:81:51:5f:6d:6a:ec:43:79:46:
77:4b:c2:aa:39:15:6b:8f:48:13:75:eb:6c:8c:52:bf:aa:70:
13:80:c7:9a:25:88:1e:0f:71:1f:b2:7b:c5:f6:8b:01:5a:cc:
1d:96:c0:9e:7c:0f:48:e6:f0:1b:8e:a7:1d:f2:ed:3a:59:39:
18:0c:7a:d2:ab:c5:35:7d:0d:5a:81:a0:36:5b:65:2b:3f:ba:
79:e1:18:e0:40:09:d5:ee:bb:a8:50:a8:8a:f9:06:96:69:d7:
18:2a:95:9d:8d:e1:d4:b0:62:b4:cf:c8:83:5a:93:2a:69:86:
b1:c2:81:f8:4a:97:b2:98:24:6e:02:38:fb:34:96:8b:cc:35:
3c:19:de:00:9a:47:96:f2:6c:42:c8:7e:ba:99:fe:61:13:7e:
f7:84:46:a8:0b:e1:ae:54:ac:b2:d6:ab:43:c4:06:3c:72:05:
03:04:80:41
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYjBFHeHAgPjDOjNyvl1gokCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjMwNjE1MjIwMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjVjNTlkZTRjMDJiY2I0MDMwNjc2ZWY0ZGMwNTY1ZmI5NzgyNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKg+eXyI3I7Wekj4QWYOzMZz2Afp
O1IkMiaatNnp83AVrOz5rbK+LtU/c2IhewmSBIcC6p0HL4JHuuNtDFYGx4psouzF
EeNJdxX3JZfNCmW698JUk+Yri27RxN6okQUriJYzhdcodIdrfvsz2nMYPRTXiJDS
m/vAxQNSNQGjE4ESLqSNviTwPLT50/zGik6rwCXcO6y9BR52eNuvDFgZxBiQF5kp
FEkt1dJ8so/VaIjZo8WRRodhcOmYbyF74GcbWgAoZLPNVkmMrEXA/shZILHEuVoJ
JE0q40frA7C16gvq9RBmASW4lEmnhPj9RU0fhUPVeIVurk/tt1hD9mVe+QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFIZcWd5MAry0AwZ2703AVl+5eCVHMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvaGx4WjNrd0N2TFFEQm5idlRjQldYN2w0SlVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBx2c4MAwD
BADHZzsDBAbHZwADBALQRTgDBALQWAQwDQYJKoZIhvcNAQELBQADggEBACFSQajc
KjjN4kDDcW5ShdM98qfnAp20uoN4z9KfAkjpsu7+CVTTj0i5ttvYv/WtKKuwy3FP
Yg/ShmYttuMzE8WeNZmQ7nL9lh4cb5RB2q+bN4FRX21q7EN5RndLwqo5FWuPSBN1
62yMUr+qcBOAx5oliB4PcR+ye8X2iwFazB2WwJ58D0jm8BuOpx3y7TpZORgMetKr
xTV9DVqBoDZbZSs/unnhGOBACdXuu6hQqIr5BpZp1xgqlZ2N4dSwYrTPyINakypp
hrHCgfhKl7KYJG4COPs0lovMNTwZ3gCaR5bybELIfrqZ/mETfveERqgL4a5UrLLW
q0PEBjxyBQMEgEE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:23:44 2025 by rpki-client