Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/H1uRAyJFw-Uh0wj2jR1eWkjhgDs.roa
File: H1uRAyJFw-Uh0wj2jR1eWkjhgDs.roa (raw, json)
Hash identifier: 1NdwWlxOXXkW14px9FPtqbE4WQL1NIW+f1U4I6pU8aU=
Subject key identifier: 1F:5B:91:03:22:45:C3:E5:21:D3:08:F6:8D:1D:5E:5A:48:E1:80:3B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0316FB94
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/H1uRAyJFw-Uh0wj2jR1eWkjhgDs.roa
Signing time: Sat 01 Jan 2022 16:04:13 +0000
ROA not before: Sat 01 Jan 2022 16:04:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15440
IP address blocks: 91.103.255.0/24 maxlen: 24
176.118.198.0/24 maxlen: 24
185.40.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51837844 (0x316fb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f5b91032245c3e521d308f68d1d5e5a48e1803b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:39:98:6c:c5:c2:5f:2f:cf:b9:2c:1b:5b:
94:33:94:e8:77:41:0b:39:72:86:87:c1:c3:e8:12:
18:de:11:d6:4f:1a:2f:35:b6:9b:7f:90:e5:37:67:
c8:b1:d7:8c:62:0e:88:01:7c:1a:5a:a3:3a:56:15:
a7:09:a0:95:45:ee:da:6f:81:1e:ad:bf:1d:66:4d:
90:d9:df:29:09:94:53:18:86:8c:b1:b0:5f:1f:45:
4c:32:a3:f9:40:15:0c:03:72:97:6c:c8:6a:e1:d5:
34:02:65:e6:04:50:9a:55:6e:f2:58:21:9c:96:25:
d9:1f:ad:79:8a:a9:35:df:0e:4b:05:88:70:43:24:
0f:d9:8b:e5:13:cc:97:e0:0b:09:40:d5:2e:85:69:
a1:e3:8d:01:20:02:90:b9:cf:1d:27:9a:3c:67:60:
cb:8b:2b:40:a4:7b:0c:fa:d2:66:19:5c:65:45:d2:
cd:27:02:13:73:66:54:68:60:79:7e:9f:1e:d0:a9:
e8:9a:3a:ac:e6:29:fc:82:2c:f9:2f:5f:dd:0a:6a:
6c:53:3b:63:25:47:26:cf:db:44:c9:c6:1d:89:5f:
e9:57:e1:6d:a4:94:69:4e:35:e7:75:64:50:9f:79:
c1:50:43:b7:76:5e:26:c2:a4:87:55:d5:44:bf:bb:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:5B:91:03:22:45:C3:E5:21:D3:08:F6:8D:1D:5E:5A:48:E1:80:3B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/H1uRAyJFw-Uh0wj2jR1eWkjhgDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.255.0/24
176.118.198.0/24
185.40.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:38:46:33:7b:8a:27:e1:63:91:a7:15:dd:68:4e:5f:09:e8:
b7:0f:b4:f2:be:02:81:2b:ff:ee:05:14:15:2a:07:e8:67:71:
1c:06:87:66:3f:b7:13:36:1f:41:34:ec:d4:b4:9d:1a:27:5d:
9f:3c:f6:c5:bd:e5:dc:20:c7:80:86:52:b1:fb:67:c8:e9:a9:
6c:cd:b3:d6:9a:cf:90:0d:1f:4d:57:b0:0e:bc:0b:ec:f2:f9:
bf:08:34:ee:5b:8e:3f:28:0d:de:44:a0:c1:59:64:6f:c1:e4:
31:bf:73:d4:bd:2d:c7:fd:ef:95:51:be:9c:ce:20:27:62:f5:
6f:20:c1:5d:c5:7f:63:7e:98:14:09:cb:ad:c5:71:16:14:68:
9d:57:ac:f5:ae:c7:aa:f0:24:7a:c6:b2:9c:0b:db:90:f4:cb:
d4:5a:8a:7c:78:47:b1:ac:83:a1:81:1c:03:a0:27:e9:b3:c5:
06:66:9c:f7:11:3b:5e:28:a7:a6:73:62:7c:19:9e:98:b7:33:
8a:54:fd:22:37:af:0b:df:1e:c5:6c:b0:7c:c2:c6:d3:fb:4a:
90:fc:35:39:51:40:7f:d7:30:c4:11:9e:11:45:1c:fa:69:e1:
bd:5a:a7:24:50:6c:28:2f:d5:7d:7c:97:d1:01:11:59:18:ef:
87:2d:39:7e
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEAxb7lDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NGY5NjM0NWQzZjIyZWRiMzk1ZDI0N2Y3Yjg2ZDJkNzNlNGEwMDkxMB4XDTIyMDEw
MTE2MDQxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWY1YjkxMDMyMjQ1
YzNlNTIxZDMwOGY2OGQxZDVlNWE0OGUxODAzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8rOZhsxcJfL8+5LBtblDOU6HdBCzlyhofBw+gSGN4R1k8a
LzW2m3+Q5TdnyLHXjGIOiAF8GlqjOlYVpwmglUXu2m+BHq2/HWZNkNnfKQmUUxiG
jLGwXx9FTDKj+UAVDANyl2zIauHVNAJl5gRQmlVu8lghnJYl2R+teYqpNd8OSwWI
cEMkD9mL5RPMl+ALCUDVLoVpoeONASACkLnPHSeaPGdgy4srQKR7DPrSZhlcZUXS
zScCE3NmVGhgeX6fHtCp6Jo6rOYp/IIs+S9f3QpqbFM7YyVHJs/bRMnGHYlf6Vfh
baSUaU4153VkUJ95wVBDt3ZeJsKkh1XVRL+7VBMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQfW5EDIkXD5SHTCPaNHV5aSOGAOzAfBgNVHSMEGDAWgBS0+WNF0/Iu2zld
JH97htLXPkoAkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3RQbGpSZFB5THRzNVhTUl9lNGJTMXo1S0FKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzUvOGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8x
L0gxdVJBeUpGdy1VaDB3ajJqUjFlV2tqaGdEcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUv
OGUxMjFkLTczYjMtNDM4YS04M2M0LTZmYzM0M2Q3N2NkMi8xL3RQbGpSZFB5THRz
NVhTUl9lNGJTMXo1S0FKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFtn/wMEALB2xgMEALkoBjANBgkq
hkiG9w0BAQsFAAOCAQEAnThGM3uKJ+FjkacV3WhOXwnotw+08r4CgSv/7gUUFSoH
6GdxHAaHZj+3EzYfQTTs1LSdGiddnzz2xb3l3CDHgIZSsftnyOmpbM2z1prPkA0f
TVewDrwL7PL5vwg07luOPygN3kSgwVlkb8HkMb9z1L0tx/3vlVG+nM4gJ2L1byDB
XcV/Y36YFAnLrcVxFhRonVes9a7HqvAkesaynAvbkPTL1FqKfHhHsayDoYEcA6An
6bPFBmac9xE7XiinpnNifBmemLczilT9IjevC98exWywfMLG0/tKkPw1OVFAf9cw
xBGeEUUc+mnhvVqnJFBsKC/VfXyX0QERWRjvhy05fg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:09 2024 by rpki-client on console-ams.rpki-client.org