Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/HbBJ_JbHQwjJy4-gMIAUhxH3ikw.roa
File: HbBJ_JbHQwjJy4-gMIAUhxH3ikw.roa (raw, json)
Hash identifier: 9CI+CQkgEzWx/c7PK38JH6rcvjbbAEGWat1PKHUSll0=
Subject key identifier: 1D:B0:49:FC:96:C7:43:08:C9:CB:8F:A0:30:80:14:87:11:F7:8A:4C
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 3886A51E
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/HbBJ_JbHQwjJy4-gMIAUhxH3ikw.roa
Signing time: Wed 01 Jun 2022 09:44:20 +0000
ROA not before: Wed 01 Jun 2022 09:44:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198949
IP address blocks: 80.82.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948348190 (0x3886a51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jun 1 09:44:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1db049fc96c74308c9cb8fa03080148711f78a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:98:fe:4a:3d:3e:86:8f:d7:9b:31:3d:64:
f1:b8:d1:81:62:9f:da:2f:1a:8c:e7:96:6b:73:00:
3f:54:26:f3:4b:3b:03:ac:15:4f:35:77:6d:35:46:
40:42:35:ea:d8:8f:02:ff:31:29:ab:f0:ea:91:9a:
b8:74:db:e8:0f:80:da:00:5a:c4:2e:3c:29:19:a2:
ef:8f:ed:01:70:d8:80:0b:b4:2a:cb:7d:e3:c9:e7:
62:70:2d:b4:32:90:24:0f:b3:16:62:d7:60:68:69:
e1:74:2e:7a:ec:d6:dc:83:35:6b:c9:f4:e5:bf:da:
b1:c5:93:ea:fc:92:cb:90:ac:04:91:ec:da:de:e4:
19:38:fe:71:8d:9a:ec:eb:94:0a:d8:7a:33:b8:05:
bb:01:02:8d:07:42:b4:ea:3e:1b:cf:69:a9:90:ec:
c2:d1:a7:39:9f:89:3b:e8:b4:7f:35:6a:18:38:33:
11:fa:21:53:2d:a9:83:a9:6c:fc:15:f0:cf:9b:f3:
01:47:63:12:d2:a5:7b:fc:04:46:73:d5:7b:c1:f0:
29:b7:b4:df:3f:4b:69:53:77:1a:49:2f:65:05:57:
4f:32:2b:f0:99:ae:76:28:3a:c7:54:1f:f3:c2:39:
3e:c5:36:b4:8a:a0:30:ba:f9:1d:6c:d5:6a:be:0c:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:49:FC:96:C7:43:08:C9:CB:8F:A0:30:80:14:87:11:F7:8A:4C
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/HbBJ_JbHQwjJy4-gMIAUhxH3ikw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.82.14.0/24
Signature Algorithm: sha256WithRSAEncryption
70:4c:aa:07:80:6b:c1:17:40:ed:c1:10:59:ec:8f:c2:7d:97:
0e:4c:5e:40:6f:53:4f:d7:4f:f2:a3:17:d7:ae:d6:57:e4:2c:
6d:70:f7:98:f8:d5:72:d8:4f:ba:34:80:52:e7:e1:56:50:a5:
b1:0e:26:5e:ee:84:85:3a:6a:bf:4c:ea:df:e8:6e:28:22:d0:
34:4d:49:62:cf:e8:4d:73:c1:13:9d:0e:ea:92:00:64:4b:62:
bb:48:65:7d:17:47:f1:bd:b1:bb:39:05:63:80:72:51:0a:b0:
04:f2:bd:31:7d:0e:24:da:35:36:63:b1:09:59:59:f9:8d:37:
b8:16:64:f4:84:13:7b:49:7c:a3:fd:e0:c2:7c:ed:17:31:30:
93:38:03:6e:af:a8:b3:75:a0:9b:06:30:bf:b9:19:a2:ab:94:
3d:55:b4:bd:04:0f:4a:e0:4f:da:62:9b:96:1e:b3:7c:be:20:
1e:17:2e:5b:df:2a:6d:be:c6:8e:f5:77:c9:8a:26:a8:85:00:
3a:32:07:39:90:1f:ff:74:b2:31:82:85:68:c7:60:da:fe:07:
a0:55:a5:92:99:9c:9e:a7:b2:bf:37:22:7e:c9:0e:27:0e:ba:
c3:76:4c:b3:d3:95:a1:92:1a:9a:cf:91:72:eb:9b:fe:86:be:
98:7a:f8:0f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOIalHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MGE2ZDZiMDg3NDYxZmRlYzZhNWI5ZDUyZDI5ODMyZDhmMjk5Yzg3MB4XDTIyMDYw
MTA5NDQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWRiMDQ5ZmM5NmM3
NDMwOGM5Y2I4ZmEwMzA4MDE0ODcxMWY3OGE0YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8tmP5KPT6Gj9ebMT1k8bjRgWKf2i8ajOeWa3MAP1Qm80s7
A6wVTzV3bTVGQEI16tiPAv8xKavw6pGauHTb6A+A2gBaxC48KRmi74/tAXDYgAu0
Kst948nnYnAttDKQJA+zFmLXYGhp4XQueuzW3IM1a8n05b/ascWT6vySy5CsBJHs
2t7kGTj+cY2a7OuUCth6M7gFuwECjQdCtOo+G89pqZDswtGnOZ+JO+i0fzVqGDgz
EfohUy2pg6ls/BXwz5vzAUdjEtKle/wERnPVe8HwKbe03z9LaVN3GkkvZQVXTzIr
8Jmudig6x1Qf88I5PsU2tIqgMLr5HWzVar4MS/8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQdsEn8lsdDCMnLj6AwgBSHEfeKTDAfBgNVHSMEGDAWgBSgptawh0Yf3sal
udUtKYMtjymchzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29LYldzSWRHSDk3R3BiblZMU21ETFk4cG5JYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvMmQ3NjA5LTIxNDItNGEwMy1iMTFlLTExNDhmZGU3YWVmNy8x
L0hiQkpfSmJIUXdqSnk0LWdNSUFVaHhIM2lrdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
MmQ3NjA5LTIxNDItNGEwMy1iMTFlLTExNDhmZGU3YWVmNy8xL29LYldzSWRHSDk3
R3BiblZMU21ETFk4cG5JYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBSDjANBgkqhkiG9w0BAQsFAAOC
AQEAcEyqB4BrwRdA7cEQWeyPwn2XDkxeQG9TT9dP8qMX167WV+QsbXD3mPjVcthP
ujSAUufhVlClsQ4mXu6EhTpqv0zq3+huKCLQNE1JYs/oTXPBE50O6pIAZEtiu0hl
fRdH8b2xuzkFY4ByUQqwBPK9MX0OJNo1NmOxCVlZ+Y03uBZk9IQTe0l8o/3gwnzt
FzEwkzgDbq+os3WgmwYwv7kZoquUPVW0vQQPSuBP2mKblh6zfL4gHhcuW98qbb7G
jvV3yYomqIUAOjIHOZAf/3SyMYKFaMdg2v4HoFWlkpmcnqeyvzcifskOJw66w3ZM
s9OVoZIams+Rcuub/oa+mHr4Dw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-fra.rpki-client.org