Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/hjmh9jZzE1Q6pNYr6C2hXxbP4R0.roa
File: hjmh9jZzE1Q6pNYr6C2hXxbP4R0.roa (raw, json)
Hash identifier: lB1jjH31OstLsw5U0OLNK4ANvXkSzDzbjDELzwaxO28=
Subject key identifier: 86:39:A1:F6:36:73:13:54:3A:A4:D6:2B:E8:2D:A1:5F:16:CF:E1:1D
Certificate issuer: /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial: 01847E60315E84CEF031E38414A46D9BF8A2
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/hjmh9jZzE1Q6pNYr6C2hXxbP4R0.roa
Signing time: Wed 16 Nov 2022 02:59:04 +0000
ROA not before: Wed 16 Nov 2022 02:59:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 178.236.235.0/24 maxlen: 24
185.2.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:60:31:5e:84:ce:f0:31:e3:84:14:a4:6d:9b:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Validity
Not Before: Nov 16 02:59:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8639a1f6367313543aa4d62be82da15f16cfe11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:2f:43:6c:e4:cc:41:b0:87:0f:54:a4:78:
89:91:a3:87:c7:16:d8:61:6a:af:96:36:a9:08:b2:
c8:64:de:3e:08:04:70:eb:8e:f9:32:bc:56:88:88:
ac:46:78:dc:bd:8f:7d:12:f4:a3:8d:9c:b2:df:d4:
1e:f0:02:c5:3a:47:1d:7e:ff:af:67:59:cd:f2:3f:
f6:3d:9d:b1:62:e6:bf:6c:1c:5c:a5:20:6c:11:97:
28:66:86:85:6c:f3:8c:ed:0a:0f:4f:a9:cf:ab:0f:
4b:9f:4c:ac:84:20:fb:d8:dd:da:79:08:15:b9:64:
97:00:82:62:9d:80:c2:b8:17:47:16:5a:3b:63:24:
07:d5:1a:24:0a:16:ce:5b:47:b4:c8:34:7e:58:a5:
64:3a:22:d1:cb:8e:fa:13:26:b4:72:9a:54:07:29:
55:62:9e:e7:b8:a3:b3:a3:3f:60:c1:5e:73:96:98:
1b:ab:c7:7c:f4:4e:bd:97:56:19:30:12:bc:d9:73:
7c:8b:d2:91:32:6d:82:ed:e3:51:14:99:d7:56:1d:
83:e4:ad:fe:eb:5a:30:80:2e:fe:a7:ef:73:c3:a6:
3e:3b:11:4c:5d:c4:28:de:0b:63:28:9e:59:a8:b6:
d3:0e:24:da:14:64:c4:5d:a2:ce:d1:9b:41:68:e3:
f3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:A1:F6:36:73:13:54:3A:A4:D6:2B:E8:2D:A1:5F:16:CF:E1:1D
X509v3 Authority Key Identifier:
keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/hjmh9jZzE1Q6pNYr6C2hXxbP4R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.236.235.0/24
185.2.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:75:73:8b:7c:f8:99:f0:13:be:f7:fd:d7:f2:d9:29:70:2e:
e8:1d:da:a2:86:4f:fa:f9:88:40:a4:35:38:d8:22:ea:db:21:
9b:dc:04:27:fe:f6:cb:eb:14:42:ad:2c:17:44:9a:3f:07:34:
1c:68:52:59:f2:a5:8f:8b:0e:98:56:81:ce:d7:99:56:21:b8:
21:5f:f8:5d:5f:3b:80:66:47:33:5e:50:61:3d:e3:50:7f:62:
b4:70:7c:da:06:a9:11:32:16:41:20:f7:17:9b:91:cf:49:01:
ff:cf:58:b8:37:c9:48:dc:d4:36:1f:7e:6e:d9:ad:91:dd:2b:
fd:83:98:bd:9b:cc:87:2c:f9:38:99:0d:15:cd:e7:5a:4a:e3:
4d:46:08:bc:09:3a:8a:dc:3e:99:8b:08:b8:00:1d:1b:93:44:
78:fb:2a:ab:23:21:fa:a5:60:27:37:fe:d8:33:21:9e:38:dc:
b0:17:63:7b:e3:c1:3e:a7:53:0c:aa:9d:df:82:6d:10:c4:48:
3c:fd:8c:24:cb:fb:1d:fd:de:97:07:eb:a5:8a:cc:85:40:f4:
c8:6b:61:08:27:10:bf:5d:a9:ac:b2:09:58:8b:58:3c:44:ba:
bc:b4:97:be:f0:90:eb:f4:54:25:8c:b9:a0:d0:ab:87:0b:b3:
12:a9:57:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYR+YDFehM7wMeOEFKRtm/iiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OTRhZmRiNWU2YTE4ODU3ODA5MjBhNTRmZmE4MjQwOGVh
ODViYTEwHhcNMjIxMTE2MDI1OTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjM5YTFmNjM2NzMxMzU0M2FhNGQ2MmJlODJkYTE1ZjE2Y2ZlMTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHkvQ2zkzEGwhw9UpHiJkaOHxxbY
YWqvljapCLLIZN4+CARw6475MrxWiIisRnjcvY99EvSjjZyy39Qe8ALFOkcdfv+v
Z1nN8j/2PZ2xYua/bBxcpSBsEZcoZoaFbPOM7QoPT6nPqw9Ln0yshCD72N3aeQgV
uWSXAIJinYDCuBdHFlo7YyQH1RokChbOW0e0yDR+WKVkOiLRy476Eya0cppUBylV
Yp7nuKOzoz9gwV5zlpgbq8d89E69l1YZMBK82XN8i9KRMm2C7eNRFJnXVh2D5K3+
61owgC7+p+9zw6Y+OxFMXcQo3gtjKJ5ZqLbTDiTaFGTEXaLO0ZtBaOPz1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIY5ofY2cxNUOqTWK+gtoV8Wz+EdMB8GA1UdIwQY
MBaAFFeUr9teahiFeAkgpU/6gkCOqFuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQt
NDdkODJhNDFhOGYzLzEvaGptaDlqWnpFMVE2cE5ZcjZDMmhYeGJQNFIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kZGNlNGQtOTkxMi00ODdkLWI1NWQtNDdkODJhNDFhOGYz
LzEvVjVTdjIxNXFHSVY0Q1NDbFRfcUNRSTZvVzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuzrAwQA
uQIwMA0GCSqGSIb3DQEBCwUAA4IBAQBvdXOLfPiZ8BO+9/3X8tkpcC7oHdqihk/6
+YhApDU42CLq2yGb3AQn/vbL6xRCrSwXRJo/BzQcaFJZ8qWPiw6YVoHO15lWIbgh
X/hdXzuAZkczXlBhPeNQf2K0cHzaBqkRMhZBIPcXm5HPSQH/z1i4N8lI3NQ2H35u
2a2R3Sv9g5i9m8yHLPk4mQ0VzedaSuNNRgi8CTqK3D6Ziwi4AB0bk0R4+yqrIyH6
pWAnN/7YMyGeONywF2N748E+p1MMqp3fgm0QxEg8/Ywky/sd/d6XB+ulisyFQPTI
a2EIJxC/XamssglYi1g8RLq8tJe+8JDr9FQljLmg0KuHC7MSqVcu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org