Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/hrxfAEScTa6a7j0AcW0zowbjWyA.roa
File: hrxfAEScTa6a7j0AcW0zowbjWyA.roa (raw, json)
Hash identifier: OsLgRkbLpyoYFhmrISe4jryWRkUzqCVBMb85Z6wjL4w=
Subject key identifier: 86:BC:5F:00:44:9C:4D:AE:9A:EE:3D:00:71:6D:33:A3:06:E3:5B:20
Certificate issuer: /CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Certificate serial: 018476EE125E9BA827B37CCF5E4E6D69C92B
Authority key identifier: C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/hrxfAEScTa6a7j0AcW0zowbjWyA.roa
Signing time: Mon 14 Nov 2022 16:17:04 +0000
ROA not before: Mon 14 Nov 2022 16:17:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51661
IP address blocks: 185.160.20.0/24 maxlen: 24
185.160.23.0/24 maxlen: 24
185.160.21.0/24 maxlen: 24
2a02:1d0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:ee:12:5e:9b:a8:27:b3:7c:cf:5e:4e:6d:69:c9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87474ceb85af31122ede586d4d65b0f5b4d97f0
Validity
Not Before: Nov 14 16:17:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86bc5f00449c4dae9aee3d00716d33a306e35b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:7f:08:f1:e5:82:53:4a:cc:cf:ea:75:53:
4f:c1:3a:db:39:fd:a7:6a:c4:fc:40:8f:cf:fc:cd:
cb:8c:07:38:f8:16:06:a6:c4:66:2e:f4:9e:16:d0:
ec:46:95:94:31:0d:00:fa:30:f6:ac:7c:06:9b:6f:
49:c3:5a:ec:a6:e2:69:06:33:c9:81:1f:5b:56:fc:
a0:82:c4:88:32:12:8d:07:f0:73:e5:e8:c8:fa:d0:
03:7c:3d:18:22:4c:23:1b:0a:f6:9f:5d:a7:5e:3b:
0c:0a:5a:08:4d:9e:5d:be:b1:2e:93:36:17:cb:3b:
e2:f6:89:4c:62:19:90:41:55:21:a8:f3:48:a3:df:
26:2e:4f:f7:6a:42:31:41:0c:0b:6e:10:96:99:3f:
01:1c:65:cd:6f:dc:d5:1e:ef:22:b0:08:be:37:5b:
c7:52:5f:57:7f:86:20:d9:ff:55:a5:46:27:51:5f:
05:b7:7d:c3:5a:56:5d:ee:33:cc:be:96:43:ac:e1:
92:06:23:d7:78:7e:96:da:d5:db:85:f3:31:f9:f2:
7f:7c:f7:9c:f6:f5:20:89:70:51:a6:89:50:9a:a4:
06:92:ec:14:4a:42:10:17:4f:18:bb:73:07:00:bd:
f4:02:93:4c:fd:ef:69:c4:71:f1:97:28:cc:c6:77:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:5F:00:44:9C:4D:AE:9A:EE:3D:00:71:6D:33:A3:06:E3:5B:20
X509v3 Authority Key Identifier:
keyid:C8:74:74:CE:B8:5A:F3:11:22:ED:E5:86:D4:D6:5B:0F:5B:4D:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHR0zrha8xEi7eWG1NZbD1tNl_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/hrxfAEScTa6a7j0AcW0zowbjWyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/52d75c-e8a0-4ec8-b00f-03586523b133/1/yHR0zrha8xEi7eWG1NZbD1tNl_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.20.0/23
185.160.23.0/24
IPv6:
2a02:1d0::/32
Signature Algorithm: sha256WithRSAEncryption
8e:1b:43:9a:b8:6b:cd:aa:8f:d3:5e:f7:fd:ed:5b:5e:6b:bf:
8b:90:94:7b:e5:85:58:a4:95:de:1e:ec:e8:32:5a:53:00:cd:
f5:a6:53:41:69:29:e8:f5:12:54:0d:c7:16:32:e3:04:ee:7d:
ed:22:2c:c8:9f:4a:53:8e:df:e7:b0:a6:99:61:90:c5:5c:94:
53:ff:a1:bd:2d:d3:15:9b:4f:78:f7:85:6b:46:3a:0a:24:0e:
18:e2:4c:39:f0:00:08:a7:9e:cb:12:5e:2d:20:d8:25:d4:86:
72:ed:cc:5a:56:e4:cb:c5:36:2a:8e:bc:d8:f5:60:d2:9a:93:
e1:1d:89:af:40:69:5f:86:2c:21:d2:12:4e:51:1e:04:30:ea:
1d:de:42:b8:70:5c:3d:e8:87:55:29:45:f6:71:98:14:1d:0e:
0c:d5:66:c3:4c:b3:d9:49:4b:1f:ee:4f:45:9f:32:8a:d3:c4:
bf:29:6d:c7:34:ab:a6:39:d5:32:c2:bf:55:1c:9e:57:2b:0e:
9b:7a:2a:27:e2:4d:3e:bc:4f:7b:f8:98:2d:ec:88:b7:28:e4:
57:6b:3d:9f:fe:3f:d9:c8:90:d0:85:ad:a1:dc:3b:ff:5b:4e:
e3:a5:03:7f:a2:c9:3d:1d:72:82:4e:ad:62:f1:dd:bd:1f:f6:
80:a3:2e:f6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYR27hJem6gns3zPXk5tackrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NzQ3NGNlYjg1YWYzMTEyMmVkZTU4NmQ0ZDY1YjBmNWI0
ZDk3ZjAwHhcNMjIxMTE0MTYxNzA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmJjNWYwMDQ0OWM0ZGFlOWFlZTNkMDA3MTZkMzNhMzA2ZTM1YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixZ/CPHlglNKzM/qdVNPwTrbOf2n
asT8QI/P/M3LjAc4+BYGpsRmLvSeFtDsRpWUMQ0A+jD2rHwGm29Jw1rspuJpBjPJ
gR9bVvyggsSIMhKNB/Bz5ejI+tADfD0YIkwjGwr2n12nXjsMCloITZ5dvrEukzYX
yzvi9olMYhmQQVUhqPNIo98mLk/3akIxQQwLbhCWmT8BHGXNb9zVHu8isAi+N1vH
Ul9Xf4Yg2f9VpUYnUV8Ft33DWlZd7jPMvpZDrOGSBiPXeH6W2tXbhfMx+fJ/fPec
9vUgiXBRpolQmqQGkuwUSkIQF08Yu3MHAL30ApNM/e9pxHHxlyjMxnctZQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIa8XwBEnE2umu49AHFtM6MG41sgMB8GA1UdIwQY
MBaAFMh0dM64WvMRIu3lhtTWWw9bTZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYt
MDM1ODY1MjNiMTMzLzEvaHJ4ZkFFU2NUYTZhN2owQWNXMHpvd2JqV3lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi81MmQ3NWMtZThhMC00ZWM4LWIwMGYtMDM1ODY1MjNiMTMz
LzEveUhSMHpyaGE4eEVpN2VXRzFOWmJEMXRObF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBuaAUAwQA
uaAXMA0EAgACMAcDBQAqAgHQMA0GCSqGSIb3DQEBCwUAA4IBAQCOG0OauGvNqo/T
Xvf97Vtea7+LkJR75YVYpJXeHuzoMlpTAM31plNBaSno9RJUDccWMuME7n3tIizI
n0pTjt/nsKaZYZDFXJRT/6G9LdMVm09494VrRjoKJA4Y4kw58AAIp57LEl4tINgl
1IZy7cxaVuTLxTYqjrzY9WDSmpPhHYmvQGlfhiwh0hJOUR4EMOod3kK4cFw96IdV
KUX2cZgUHQ4M1WbDTLPZSUsf7k9FnzKK08S/KW3HNKumOdUywr9VHJ5XKw6beion
4k0+vE97+Jgt7Ii3KORXaz2f/j/ZyJDQha2h3Dv/W07jpQN/osk9HXKCTq1i8d29
H/aAoy72
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:11:47 2025 by rpki-client