Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hVXI0mO_U7p5iQ0NGnGP_5BJYKQ.roa
File: hVXI0mO_U7p5iQ0NGnGP_5BJYKQ.roa (raw, json)
Hash identifier: gRCIX4aOVgNdtXG4Lt0SW6dMlcu9UoOVgkmRNqYUbCI=
Subject key identifier: 85:55:C8:D2:63:BF:53:BA:79:89:0D:0D:1A:71:8F:FF:90:49:60:A4
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 08812E01
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hVXI0mO_U7p5iQ0NGnGP_5BJYKQ.roa
Signing time: Tue 22 Feb 2022 11:13:46 +0000
ROA not before: Tue 22 Feb 2022 11:13:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 91.186.220.0/22 maxlen: 24
178.253.12.0/23 maxlen: 24
94.241.176.0/21 maxlen: 24
178.253.32.0/24 maxlen: 24
178.253.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142683649 (0x8812e01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 22 11:13:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8555c8d263bf53ba79890d0d1a718fff904960a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:e0:f5:ec:48:c7:5e:27:ba:88:a7:9f:1c:
72:bf:61:6d:4d:1c:d2:1d:49:ed:50:0b:04:71:6c:
0a:10:d4:7f:9e:92:47:3f:bf:76:b6:03:fa:da:0f:
96:10:0c:20:2f:07:ab:c5:f4:ce:bf:a6:db:10:a7:
5e:6f:07:9f:05:9d:9c:f5:20:e5:32:f2:a4:f3:26:
4c:41:ab:f6:d1:69:d0:13:24:22:b4:d4:d4:17:57:
94:40:a0:a3:14:64:d0:4e:a6:7c:19:08:e7:e2:79:
1d:6f:44:3b:57:e5:d6:f0:7c:2f:ef:94:66:d0:4d:
c8:b1:f8:c5:ff:75:28:8d:52:50:43:31:1e:53:2b:
93:c6:ca:2e:cc:29:3d:68:5e:c1:40:ac:50:97:24:
9d:06:a9:dd:3c:1b:85:dd:41:94:ac:f6:f4:69:59:
b9:6d:a7:35:6f:92:ee:c0:ad:d3:7d:a6:a9:fc:7a:
d1:d4:bd:ad:db:6b:3a:88:2e:6c:98:5c:b8:b6:56:
ab:26:87:5c:19:1e:4f:63:50:22:fe:87:49:a4:cc:
e0:41:5f:4a:4d:54:25:cb:7c:c8:06:45:0e:47:0b:
e7:7a:c3:1e:21:86:7f:9e:fa:23:a8:ed:05:3d:f5:
f7:85:35:3d:fa:a8:88:3a:b2:45:b4:df:f7:cd:0c:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:C8:D2:63:BF:53:BA:79:89:0D:0D:1A:71:8F:FF:90:49:60:A4
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/hVXI0mO_U7p5iQ0NGnGP_5BJYKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.186.220.0/22
94.241.176.0/21
178.253.12.0/23
178.253.32.0/23
Signature Algorithm: sha256WithRSAEncryption
90:3e:bf:8d:6f:8c:25:fe:6b:8f:dd:b3:af:9e:c7:c9:b3:02:
e5:f0:c4:64:0f:2a:84:a7:14:a9:93:3a:aa:4e:ad:b8:38:ea:
3f:00:e9:8b:8e:bf:18:d8:d3:cd:16:e1:b9:49:ae:87:7c:49:
af:4c:8a:9b:9e:5e:77:39:ea:e9:f1:3e:51:2c:06:77:4b:ef:
15:18:79:4b:bd:0e:c4:87:93:33:9e:8d:95:3a:5a:44:7f:ca:
a8:68:36:65:7e:6f:79:4f:fc:b6:03:f1:3f:02:37:f7:1b:e2:
c4:ad:0e:02:5e:49:2b:7c:f1:21:04:c7:ed:ce:a0:06:ed:e6:
85:05:d7:2f:ca:f6:1e:46:25:cc:48:d9:75:06:ed:92:28:1f:
fa:5e:cb:69:be:ad:5d:6f:8f:89:9d:72:4e:b3:f6:a6:1f:2c:
9b:66:0f:57:44:6e:a7:d2:18:cd:b2:fc:c9:f7:c5:18:c7:a4:
8e:24:c2:2c:a5:a1:15:81:e6:a7:6f:7d:26:ab:c4:e5:d2:8a:
dd:31:70:f0:6e:5b:b4:a1:8d:96:83:37:29:7a:81:b2:c8:cf:
16:f5:49:b0:76:aa:c6:c7:8b:0e:6f:9b:dd:ae:a2:3a:7e:da:
bd:aa:ed:ea:34:24:5b:9f:6f:46:77:6e:0b:e7:7a:c1:76:e9:
53:ce:f5:5f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIECIEuATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
Mjc3OGRlMmE5YmU5ODAyMTIwMzgyZTc1MGQxNTllOTU4NzJjMmFlMB4XDTIyMDIy
MjExMTM0NloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODU1NWM4ZDI2M2Jm
NTNiYTc5ODkwZDBkMWE3MThmZmY5MDQ5NjBhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVd4PXsSMdeJ7qIp58ccr9hbU0c0h1J7VALBHFsChDUf56S
Rz+/drYD+toPlhAMIC8Hq8X0zr+m2xCnXm8HnwWdnPUg5TLypPMmTEGr9tFp0BMk
IrTU1BdXlECgoxRk0E6mfBkI5+J5HW9EO1fl1vB8L++UZtBNyLH4xf91KI1SUEMx
HlMrk8bKLswpPWhewUCsUJcknQap3Twbhd1BlKz29GlZuW2nNW+S7sCt032mqfx6
0dS9rdtrOogubJhcuLZWqyaHXBkeT2NQIv6HSaTM4EFfSk1UJct8yAZFDkcL53rD
HiGGf576I6jtBT3194U1PfqoiDqyRbTf980MIikCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSFVcjSY79TunmJDQ0acY//kElgpDAfBgNVHSMEGDAWgBTCd43iqb6YAhID
gudQ0VnpWHLCrjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8x
L2hWWEkwbU9fVTdwNWlRME5HbkdQXzVCSllLUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgv
NDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQzNC8xL3duZU40cW0tbUFJ
U0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAlu63AMEA17xsAMEAbL9DAMEAbL9
IDANBgkqhkiG9w0BAQsFAAOCAQEAkD6/jW+MJf5rj92zr57HybMC5fDEZA8qhKcU
qZM6qk6tuDjqPwDpi46/GNjTzRbhuUmuh3xJr0yKm55edznq6fE+USwGd0vvFRh5
S70OxIeTM56NlTpaRH/KqGg2ZX5veU/8tgPxPwI39xvixK0OAl5JK3zxIQTH7c6g
Bu3mhQXXL8r2HkYlzEjZdQbtkigf+l7Lab6tXW+PiZ1yTrP2ph8sm2YPV0Rup9IY
zbL8yffFGMekjiTCLKWhFYHmp299JqvE5dKK3TFw8G5btKGNloM3KXqBssjPFvVJ
sHaqxseLDm+b3a6iOn7avart6jQkW59vRnduC+d6wXbpU871Xw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:38 2023 by rpki-client on console-ams.rpki-client.org