Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/hijIOU5orPTqu5P0iUcLuHT4m8I.roa
File: hijIOU5orPTqu5P0iUcLuHT4m8I.roa (raw, json)
Hash identifier: NJiMD9zCG4e5TAn6jT8lfcvAlGULwgxnslkDvUXpXO4=
Subject key identifier: 86:28:C8:39:4E:68:AC:F4:EA:BB:93:F4:89:47:0B:B8:74:F8:9B:C2
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 04118D36
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/hijIOU5orPTqu5P0iUcLuHT4m8I.roa
Signing time: Tue 10 May 2022 10:35:02 +0000
ROA not before: Tue 10 May 2022 10:35:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 185.148.107.0/24 maxlen: 24
185.148.106.0/24 maxlen: 24
185.176.26.0/24 maxlen: 24
185.148.104.0/24 maxlen: 24
185.148.105.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68259126 (0x4118d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: May 10 10:35:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8628c8394e68acf4eabb93f489470bb874f89bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:2c:92:1e:36:30:0b:d2:66:4f:49:99:27:
c0:e7:71:ab:26:2d:7a:57:1f:cd:98:5f:d0:ac:08:
34:b4:3f:df:2c:f7:5c:68:48:05:48:85:4d:a8:4e:
62:76:14:1d:40:67:a7:27:67:b8:59:84:ce:59:d2:
f3:0f:05:d2:c3:f6:15:34:3b:9c:fe:e5:fa:ac:10:
c6:f6:d9:48:a2:aa:6c:31:53:1e:5b:c5:c9:a6:4c:
56:fa:40:f5:52:5a:1c:09:f7:d8:5a:02:f1:bc:04:
4f:b3:6f:bd:dc:d4:f9:62:f3:7b:16:4c:c7:a7:76:
fb:6e:e5:f9:13:a1:15:11:8f:5d:c4:fa:a6:4a:88:
5a:c5:99:49:bd:4d:a4:60:cf:fb:89:7d:70:88:a0:
f9:6e:aa:c5:40:d7:0b:2d:ed:66:9e:97:04:af:7b:
e2:f0:db:50:8d:91:73:98:f3:96:bf:53:08:8e:4c:
14:15:76:73:c6:f0:cd:6c:14:f4:19:7d:9f:d0:36:
67:70:d8:b4:db:f3:23:b3:da:0b:99:8d:a8:22:40:
1f:42:b3:1b:19:95:37:a7:9b:82:0a:2c:11:a4:9a:
d1:44:09:e4:7b:5a:59:2b:dd:b1:b4:6a:bb:b8:d6:
2d:94:9a:e4:c1:0a:db:09:9c:b5:98:28:0a:70:01:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:28:C8:39:4E:68:AC:F4:EA:BB:93:F4:89:47:0B:B8:74:F8:9B:C2
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/hijIOU5orPTqu5P0iUcLuHT4m8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.104.0/22
185.176.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:cc:20:07:20:87:a5:98:4f:c6:1a:ce:80:92:c0:c7:cc:67:
65:67:6a:e5:95:01:6b:d5:1e:9d:20:5e:15:88:4b:66:36:9f:
0a:7e:15:ff:9b:e7:e6:e3:13:d5:05:a2:69:57:20:b1:22:a1:
c2:4a:0d:16:60:e8:7a:c0:6b:60:55:5f:fe:3a:17:8f:78:74:
0a:a2:78:49:18:fa:1c:f5:64:ef:7b:59:db:43:96:49:28:e7:
4d:be:f5:68:32:9d:e4:85:33:1a:3a:fd:96:ba:53:22:24:fc:
d9:aa:80:ad:1d:f5:0a:ed:3d:ac:ee:f2:7f:4e:33:05:db:22:
8f:a2:bf:61:27:b5:a0:bf:49:2a:bf:ff:56:18:70:3e:49:a7:
9e:07:2d:33:5b:59:f2:30:2a:06:ee:37:c2:29:b7:58:4e:cf:
4b:17:7f:75:73:c1:93:51:a7:6e:d9:1a:d2:5f:56:0f:c2:90:
c0:6c:de:ca:2a:c6:96:04:7d:05:22:4b:c0:79:72:8f:f4:04:
c3:30:b0:0b:8c:0f:29:57:44:cc:34:9d:65:35:8a:6b:2d:4c:
28:b3:36:18:13:fa:36:25:4a:ad:e8:ed:91:d1:23:1f:d7:65:
f8:e5:93:c3:04:ba:a2:7e:22:c1:a7:0d:51:ac:f4:ae:de:97:
ec:b9:51:05
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBBGNNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MWFmMTJmNWNhNzVjOTIyYTRhYTVkYWNiNDljMDRhOTMyMzdmNGVkMB4XDTIyMDUx
MDEwMzUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODYyOGM4Mzk0ZTY4
YWNmNGVhYmI5M2Y0ODk0NzBiYjg3NGY4OWJjMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+VLJIeNjAL0mZPSZknwOdxqyYtelcfzZhf0KwINLQ/3yz3
XGhIBUiFTahOYnYUHUBnpydnuFmEzlnS8w8F0sP2FTQ7nP7l+qwQxvbZSKKqbDFT
HlvFyaZMVvpA9VJaHAn32FoC8bwET7NvvdzU+WLzexZMx6d2+27l+ROhFRGPXcT6
pkqIWsWZSb1NpGDP+4l9cIig+W6qxUDXCy3tZp6XBK974vDbUI2Rc5jzlr9TCI5M
FBV2c8bwzWwU9Bl9n9A2Z3DYtNvzI7PaC5mNqCJAH0KzGxmVN6ebggosEaSa0UQJ
5HtaWSvdsbRqu7jWLZSa5MEK2wmctZgoCnAB60kCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSGKMg5Tmis9Oq7k/SJRwu4dPibwjAfBgNVHSMEGDAWgBSxrxL1ynXJIqSq
Xay0nASpMjf07TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3NhOFM5Y3AxeVNLa3FsMnN0SndFcVRJMzlPMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmQvY2JjZjY4LTdjYmYtNDdmMC04MmVlLTU3NjBlZmJjYzY1NC8x
L2hpaklPVTVvclBUcXU1UDBpVWNMdUhUNG04SS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
Y2JjZjY4LTdjYmYtNDdmMC04MmVlLTU3NjBlZmJjYzY1NC8xL3NhOFM5Y3AxeVNL
a3FsMnN0SndFcVRJMzlPMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEArmUaAMEALmwGjANBgkqhkiG9w0B
AQsFAAOCAQEAncwgByCHpZhPxhrOgJLAx8xnZWdq5ZUBa9UenSBeFYhLZjafCn4V
/5vn5uMT1QWiaVcgsSKhwkoNFmDoesBrYFVf/joXj3h0CqJ4SRj6HPVk73tZ20OW
SSjnTb71aDKd5IUzGjr9lrpTIiT82aqArR31Cu09rO7yf04zBdsij6K/YSe1oL9J
Kr//VhhwPkmnngctM1tZ8jAqBu43wim3WE7PSxd/dXPBk1Gnbtka0l9WD8KQwGze
yirGlgR9BSJLwHlyj/QEwzCwC4wPKVdEzDSdZTWKay1MKLM2GBP6NiVKrejtkdEj
H9dl+OWTwwS6on4iwacNUaz0rt6X7LlRBQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:58 2024 by rpki-client on console-fra.rpki-client.org