Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/HZaVikHghdKDrv66fXXf9sRsOTM.roa
File: HZaVikHghdKDrv66fXXf9sRsOTM.roa (raw, json)
Hash identifier: LOMr/EdmvyW8dQ52AlN6waG/sIqbGjGCRg9S7Rtaxng=
Subject key identifier: 1D:96:95:8A:41:E0:85:D2:83:AE:FE:BA:7D:75:DF:F6:C4:6C:39:33
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 0183ACC2570B3C18089CCD56F42E99711F68
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/HZaVikHghdKDrv66fXXf9sRsOTM.roa
Signing time: Thu 06 Oct 2022 10:06:00 +0000
ROA not before: Thu 06 Oct 2022 10:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
193.178.112.0/23 maxlen: 23
185.108.168.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
185.205.172.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:c2:57:0b:3c:18:08:9c:cd:56:f4:2e:99:71:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Oct 6 10:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d96958a41e085d283aefeba7d75dff6c46c3933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:81:9b:3e:bd:8b:ba:b6:b4:4b:0b:57:c4:
94:ec:04:d8:16:3e:a8:7b:f7:6a:e2:2c:db:3f:3f:
b3:26:89:d4:7b:fe:f4:79:fe:b4:f7:0c:c9:8f:f7:
21:d5:3b:f4:c5:88:9c:85:fe:6d:b4:80:7b:03:e7:
73:3e:d5:08:5e:8d:00:e4:e8:c8:d5:b5:99:3c:79:
be:f5:a9:da:b7:99:ca:2c:5e:46:58:b9:3d:db:1f:
61:ca:8d:7a:b0:50:d1:6b:59:a2:3f:74:e6:45:d4:
02:28:38:76:1a:85:a1:ac:1f:27:2e:d1:b4:96:63:
21:ac:98:f8:4b:fc:b4:26:86:9a:e2:ff:ab:90:50:
47:a8:e9:30:01:26:35:79:83:97:83:d8:b2:ab:a9:
76:b8:ac:92:2d:da:69:47:0e:a4:76:27:23:a4:db:
63:b4:29:e6:73:17:71:3d:c9:8d:64:cf:42:5e:46:
2c:4e:b3:22:e5:54:89:54:e7:f2:fc:65:e8:98:0f:
88:51:8e:32:ba:11:f7:c2:76:a5:c6:db:69:e8:e6:
78:2f:cf:39:f1:82:74:b7:b8:f1:61:42:1d:3d:bd:
31:d1:aa:15:6d:ae:e0:d0:91:95:43:0a:88:87:7b:
6b:4b:a8:85:e6:68:1d:5d:77:bb:44:0d:2e:d8:1f:
2e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:95:8A:41:E0:85:D2:83:AE:FE:BA:7D:75:DF:F6:C4:6C:39:33
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/HZaVikHghdKDrv66fXXf9sRsOTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
75:e1:3d:f3:a5:92:8a:d9:1f:c7:e7:e2:7b:ea:33:7b:94:85:
43:a1:3e:62:ec:7f:09:50:38:9b:74:7f:7c:9f:87:0b:5a:50:
6d:96:1f:b8:49:31:78:93:a0:b2:e3:d8:83:f9:76:7f:41:70:
46:55:19:52:ed:82:84:94:c7:85:bf:d2:d7:3e:90:8c:75:a4:
4a:b9:ab:50:7f:86:4a:15:dc:f9:f6:46:d9:dd:35:18:97:02:
84:d4:55:7c:75:63:96:81:78:41:12:8e:6f:b7:92:ec:f6:0e:
63:49:a5:1d:01:79:d0:49:17:f5:bb:b9:0c:15:41:66:00:8a:
f4:f7:08:56:d6:78:39:d0:3d:97:17:b7:d2:bc:aa:5b:50:41:
d5:44:9b:7e:7c:70:29:b6:27:55:45:80:a6:e5:ea:1e:95:26:
e1:b8:71:f3:be:5b:c4:3f:41:6f:f0:03:5e:12:a6:e4:9e:43:
e9:8f:fe:04:b2:7a:4f:f2:48:a6:fc:e8:d3:e4:ff:45:28:c5:
5b:d5:b5:ff:6c:80:5e:81:56:ee:53:10:25:ba:4e:45:cc:cd:
81:4b:0f:73:76:a6:1a:b2:1f:41:71:29:57:2c:a8:94:5f:5a:
ee:18:a4:af:fb:95:60:8c:a2:11:4b:8b:13:90:6a:fe:b4:e1:
e2:0f:cb:77
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYOswlcLPBgInM1W9C6ZcR9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YzBmZGJiNjVjYTQ5MWNiODNjYzA4NWE0M2UwMzQwNTk2
YWU4NzMwHhcNMjIxMDA2MTAwNjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDk2OTU4YTQxZTA4NWQyODNhZWZlYmE3ZDc1ZGZmNmM0NmMzOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VGBmz69i7q2tEsLV8SU7ATYFj6o
e/dq4izbPz+zJonUe/70ef609wzJj/ch1Tv0xYichf5ttIB7A+dzPtUIXo0A5OjI
1bWZPHm+9anat5nKLF5GWLk92x9hyo16sFDRa1miP3TmRdQCKDh2GoWhrB8nLtG0
lmMhrJj4S/y0Joaa4v+rkFBHqOkwASY1eYOXg9iyq6l2uKySLdppRw6kdicjpNtj
tCnmcxdxPcmNZM9CXkYsTrMi5VSJVOfy/GXomA+IUY4yuhH3wnalxttp6OZ4L885
8YJ0t7jxYUIdPb0x0aoVba7g0JGVQwqIh3trS6iF5mgdXXe7RA0u2B8uHQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFB2WlYpB4IXSg67+un113/bEbDkzMB8GA1UdIwQY
MBaAFMbA/btlykkcuDzAhaQ+A0BZauhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQt
NDlhNjU0NTc4NmU2LzEvSFphVmlrSGdoZEtEcnY2NmZYWGY5c1JzT1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NjY5YmItMWY2Mi00MmEzLTllOGQtNDlhNjU0NTc4NmU2
LzEveHNEOXUyWEtTUnk0UE1DRnBENERRRmxxNkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCLZaMAwQC
uWyoAwQCuc2sAwQBwbI2AwQBwbJwMA0EAgACMAcDBQMqBg5AMA0GCSqGSIb3DQEB
CwUAA4IBAQB14T3zpZKK2R/H5+J76jN7lIVDoT5i7H8JUDibdH98n4cLWlBtlh+4
STF4k6Cy49iD+XZ/QXBGVRlS7YKElMeFv9LXPpCMdaRKuatQf4ZKFdz59kbZ3TUY
lwKE1FV8dWOWgXhBEo5vt5Ls9g5jSaUdAXnQSRf1u7kMFUFmAIr09whW1ng50D2X
F7fSvKpbUEHVRJt+fHAptidVRYCm5eoelSbhuHHzvlvEP0Fv8ANeEqbknkPpj/4E
snpP8kim/OjT5P9FKMVb1bX/bIBegVbuUxAluk5FzM2BSw9zdqYash9BcSlXLKiU
X1ruGKSv+5VgjKIRS4sTkGr+tOHiD8t3
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org