Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/Helb0zNngCEkVIRIuBCHcyo134Y.roa
File: Helb0zNngCEkVIRIuBCHcyo134Y.roa (raw, json)
Hash identifier: WFqQpwDc1jPX80kTHxjgsJrdCSe2xBdz64Z7lrMo7PQ=
Subject key identifier: 1D:E9:5B:D3:33:67:80:21:24:54:84:48:B8:10:87:73:2A:35:DF:86
Certificate issuer: /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial: 03CCD1A1
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/Helb0zNngCEkVIRIuBCHcyo134Y.roa
Signing time: Sat 01 Jan 2022 14:08:23 +0000
ROA not before: Sat 01 Jan 2022 14:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44484
IP address blocks: 91.201.228.0/24 maxlen: 24
91.201.228.0/22 maxlen: 22
91.201.229.0/24 maxlen: 24
91.201.230.0/24 maxlen: 24
91.201.231.0/24 maxlen: 24
176.117.192.0/21 maxlen: 21
176.117.192.0/19 maxlen: 19
176.117.204.0/24 maxlen: 24
176.117.205.0/24 maxlen: 24
176.117.210.0/24 maxlen: 24
176.117.211.0/24 maxlen: 24
176.117.212.0/24 maxlen: 24
176.117.213.0/24 maxlen: 24
176.117.207.0/24 maxlen: 24
176.117.208.0/24 maxlen: 24
176.117.209.0/24 maxlen: 24
176.117.214.0/24 maxlen: 24
176.117.215.0/24 maxlen: 24
176.117.216.0/24 maxlen: 24
176.117.217.0/24 maxlen: 24
176.117.218.0/24 maxlen: 24
176.117.219.0/24 maxlen: 24
176.117.221.0/24 maxlen: 24
176.117.222.0/24 maxlen: 24
176.117.223.0/24 maxlen: 24
176.117.220.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63754657 (0x3ccd1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Validity
Not Before: Jan 1 14:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1de95bd33367802124548448b81087732a35df86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:15:4f:ac:c3:b6:fe:ca:30:cc:99:37:65:
72:aa:53:ba:cc:6d:4f:f7:97:31:62:8b:0e:12:1f:
09:d2:cb:5f:cf:3e:2e:9c:90:de:f1:70:df:aa:4f:
35:34:cc:04:80:8f:39:0a:76:65:29:f5:0b:f8:52:
95:d2:93:77:b6:79:6f:e3:a6:e5:49:81:0b:61:a8:
81:57:46:29:32:08:e8:ac:83:84:69:de:76:9e:ce:
fe:22:03:6c:b0:fe:6a:51:27:c0:19:e6:cd:20:2e:
76:36:b5:2c:91:3b:fe:10:66:2e:b9:22:d8:a6:1d:
9b:ac:74:94:52:b3:60:4e:c7:d1:f0:33:c9:a3:5d:
c4:8f:b8:da:fc:f3:48:59:4c:d5:27:c6:6a:85:b4:
1d:ba:b0:a1:72:96:10:c4:3d:54:5a:32:0e:d4:0c:
9a:57:87:d2:f3:49:dd:f2:b6:7f:16:ce:8c:01:60:
34:ba:68:47:08:1e:ad:09:b5:6e:17:fc:d3:14:23:
c3:f8:12:2f:fa:52:45:a0:0a:4f:37:ae:b5:b0:0e:
84:ff:d5:fd:a2:c6:fd:11:23:77:5b:3d:28:a6:2b:
d1:06:bb:f4:4c:99:52:66:9a:46:1a:4e:28:d8:0c:
a6:dd:94:4b:d1:35:c7:b5:d8:64:48:86:b9:95:80:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:5B:D3:33:67:80:21:24:54:84:48:B8:10:87:73:2A:35:DF:86
X509v3 Authority Key Identifier:
keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/Helb0zNngCEkVIRIuBCHcyo134Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.228.0/22
176.117.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:ea:cf:9d:83:12:80:6a:e8:9e:eb:44:60:6d:e1:72:0c:26:
f1:90:eb:6e:26:3f:95:49:a0:6a:e5:4e:4e:b2:38:91:8c:20:
79:14:0e:84:4e:25:15:db:21:95:04:b7:92:78:9b:d7:e3:97:
f5:0d:8d:b8:60:33:9c:ba:a3:fe:78:26:ef:93:82:87:6d:11:
44:c0:7b:fb:c0:97:bf:f6:6b:13:0d:11:d2:77:0c:ee:f2:9f:
de:3e:dc:c5:a1:04:fa:47:9b:6d:f4:83:85:36:96:cd:4d:62:
2d:f1:b3:f4:87:73:a5:dc:66:08:67:ea:e1:fe:43:03:8c:af:
41:17:a8:83:35:37:93:9d:0d:3a:23:5c:11:e4:14:40:2b:80:
7e:f7:7e:16:28:2a:56:1c:53:47:37:64:02:d5:d7:d5:34:37:
cf:60:76:ae:07:67:75:38:bf:13:96:b2:7d:bf:8f:16:75:1f:
86:96:1e:a6:42:0d:a7:b3:38:7d:95:4b:5c:9c:88:8b:ac:f1:
f0:ba:86:32:b4:60:59:a2:6c:54:6d:ff:bc:62:44:c2:c6:c6:
73:b0:c9:e0:f8:09:d1:d6:ca:fd:52:af:26:f7:2f:79:94:a4:
df:42:3f:f4:03:8f:e7:f2:57:f3:61:47:9f:56:03:c9:f9:37:
e6:69:92:1a
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA8zRoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzgwNWUxY2ZmYzEzOTJlN2QxNzY4ZjhmMDU1NGExYzdmNjM0NGFkMB4XDTIyMDEw
MTE0MDgyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWRlOTViZDMzMzY3
ODAyMTI0NTQ4NDQ4YjgxMDg3NzMyYTM1ZGY4NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALWyFU+sw7b+yjDMmTdlcqpTusxtT/eXMWKLDhIfCdLLX88+
LpyQ3vFw36pPNTTMBICPOQp2ZSn1C/hSldKTd7Z5b+Om5UmBC2GogVdGKTII6KyD
hGnedp7O/iIDbLD+alEnwBnmzSAudja1LJE7/hBmLrki2KYdm6x0lFKzYE7H0fAz
yaNdxI+42vzzSFlM1SfGaoW0HbqwoXKWEMQ9VFoyDtQMmleH0vNJ3fK2fxbOjAFg
NLpoRwgerQm1bhf80xQjw/gSL/pSRaAKTzeutbAOhP/V/aLG/REjd1s9KKYr0Qa7
9EyZUmaaRhpOKNgMpt2US9E1x7XYZEiGuZWA8lkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQd6VvTM2eAISRUhEi4EIdzKjXfhjAfBgNVHSMEGDAWgBTXgF4c/8E5Ln0X
aPjwVUocf2NErTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzE0QmVIUF9CT1M1OUYyajQ4RlZLSEg5alJLMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzQvNGEzZDhhLTUyOWQtNGQ5MS05ZjI1LTIyNTRiYzJjYTZjMC8x
L0hlbGIwek5uZ0NFa1ZJUkl1QkNIY3lvMTM0WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQv
NGEzZDhhLTUyOWQtNGQ5MS05ZjI1LTIyNTRiYzJjYTZjMC8xLzE0QmVIUF9CT1M1
OUYyajQ4RlZLSEg5alJLMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAlvJ5AMEBbB1wDANBgkqhkiG9w0B
AQsFAAOCAQEAXOrPnYMSgGronutEYG3hcgwm8ZDrbiY/lUmgauVOTrI4kYwgeRQO
hE4lFdshlQS3knib1+OX9Q2NuGAznLqj/ngm75OCh20RRMB7+8CXv/ZrEw0R0ncM
7vKf3j7cxaEE+kebbfSDhTaWzU1iLfGz9IdzpdxmCGfq4f5DA4yvQReogzU3k50N
OiNcEeQUQCuAfvd+FigqVhxTRzdkAtXX1TQ3z2B2rgdndTi/E5ayfb+PFnUfhpYe
pkINp7M4fZVLXJyIi6zx8LqGMrRgWaJsVG3/vGJEwsbGc7DJ4PgJ0dbK/VKvJvcv
eZSk30I/9AOP5/JX82FHn1YDyfk35mmSGg==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-fra.rpki-client.org