Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/heZtkTOZ9kNu7YlLmFhLgGKCFpQ.roa
File: heZtkTOZ9kNu7YlLmFhLgGKCFpQ.roa (raw, json)
Hash identifier: k4yrQzf0JpQ6J7E9Rx3NnLSE+ysvUQueuPQC8Fy0tfM=
Subject key identifier: 85:E6:6D:91:33:99:F6:43:6E:ED:89:4B:98:58:4B:80:62:82:16:94
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 18F86319
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/heZtkTOZ9kNu7YlLmFhLgGKCFpQ.roa
Signing time: Tue 01 Mar 2022 23:14:05 +0000
ROA not before: Tue 01 Mar 2022 23:14:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 185.185.251.0/24 maxlen: 24
185.119.252.0/24 maxlen: 24
185.122.36.0/24 maxlen: 24
79.143.58.0/24 maxlen: 32
79.143.56.0/24 maxlen: 24
185.249.218.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 418931481 (0x18f86319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 1 23:14:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85e66d913399f6436eed894b98584b8062821694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:ca:77:c6:08:67:3a:a7:0c:69:61:25:2a:
35:b2:5d:39:87:e2:d8:70:ef:73:e1:c1:96:51:8b:
6b:85:9f:ed:c8:9d:2e:f3:b8:ad:80:8b:39:ad:f4:
22:99:c2:55:a8:c5:0d:6d:d8:e5:71:5d:93:e6:24:
b6:6a:23:2b:fd:e5:0c:2d:b7:3d:34:56:0b:c1:8e:
27:e4:be:32:64:e0:d0:83:91:88:7d:ac:ef:52:90:
6a:6e:98:d0:f0:55:d2:32:6a:fc:c8:0b:3c:68:bd:
83:fb:c5:b8:3a:b7:60:e0:b5:e1:77:8c:1d:78:ff:
d1:a2:ba:b6:53:a8:f1:42:dd:28:b2:5a:fd:45:7a:
8d:db:ca:59:bd:df:30:22:9a:14:95:c4:39:e6:dd:
24:0f:9e:07:e2:ba:7e:6a:a0:bf:ba:eb:02:98:d7:
de:dd:5e:61:38:9c:77:ad:f6:98:7b:79:83:f5:92:
64:3f:9c:e8:d4:b3:19:b4:b9:69:e4:b8:62:66:2a:
c7:26:9b:3c:6f:53:f3:08:f9:83:cf:13:8b:17:d5:
f5:70:bf:52:6f:2e:54:a3:b8:56:7e:3f:d7:9d:68:
fd:1e:c7:19:1b:42:11:d8:2b:73:ac:4e:b4:11:b0:
61:9a:ac:e7:2b:bd:26:33:02:d4:92:79:a0:6d:18:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:6D:91:33:99:F6:43:6E:ED:89:4B:98:58:4B:80:62:82:16:94
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/heZtkTOZ9kNu7YlLmFhLgGKCFpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.56.0/24
79.143.58.0/24
185.119.252.0/24
185.122.36.0/24
185.185.251.0/24
185.249.218.0/24
Signature Algorithm: sha256WithRSAEncryption
03:70:47:61:ea:b2:a5:52:17:13:92:44:f4:8e:13:0a:cf:a1:
76:a8:32:86:e3:06:81:c9:12:d0:4d:14:db:2f:30:45:8e:77:
fb:02:3a:7d:14:fe:8e:9c:c4:44:1d:74:b2:22:5c:0a:b5:b3:
eb:c3:b3:c4:8e:8b:6f:ba:8c:98:a0:42:f6:67:e4:b2:88:5a:
1c:b2:54:bc:8a:3d:83:83:ce:0a:65:4f:9f:4c:13:67:a6:9f:
a2:63:04:c3:d6:74:f8:ef:bf:f9:b8:31:44:54:61:c1:53:0b:
7e:ef:69:9f:9d:89:5f:be:a4:7d:34:6f:15:08:34:1f:ee:97:
c4:93:e0:a4:cd:1e:87:2a:e9:6e:8a:c2:e7:f1:fd:ef:72:5f:
e9:38:11:d9:bb:d4:7c:3a:f3:ee:65:69:0a:b3:8f:ef:f7:23:
5e:ca:bb:ce:63:51:3c:79:51:0f:34:8a:76:82:7b:e4:45:cb:
72:ac:94:e7:91:bb:2b:5f:15:88:51:74:5d:24:d1:14:24:8b:
4d:f3:fb:bc:99:ef:50:fe:a3:88:94:52:a2:50:e2:03:5f:1b:
af:93:0c:e9:45:98:38:b1:c0:1b:e4:1c:a0:ac:f2:63:ca:85:
fd:73:96:bd:d3:d8:34:5b:69:11:7e:19:6a:67:73:40:98:62:
f7:fd:16:84
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIEGPhjGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDMw
MTIzMTQwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODVlNjZkOTEzMzk5
ZjY0MzZlZWQ4OTRiOTg1ODRiODA2MjgyMTY5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJddynfGCGc6pwxpYSUqNbJdOYfi2HDvc+HBllGLa4Wf7cid
LvO4rYCLOa30IpnCVajFDW3Y5XFdk+YktmojK/3lDC23PTRWC8GOJ+S+MmTg0IOR
iH2s71KQam6Y0PBV0jJq/MgLPGi9g/vFuDq3YOC14XeMHXj/0aK6tlOo8ULdKLJa
/UV6jdvKWb3fMCKaFJXEOebdJA+eB+K6fmqgv7rrApjX3t1eYTicd632mHt5g/WS
ZD+c6NSzGbS5aeS4YmYqxyabPG9T8wj5g88TixfV9XC/Um8uVKO4Vn4/151o/R7H
GRtCEdgrc6xOtBGwYZqs5yu9JjMC1JJ5oG0Y/VcCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBSF5m2RM5n2Q27tiUuYWEuAYoIWlDAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L2hlWnRrVE9aOWtOdTdZbExtRmhMZ0dLQ0ZwUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAE+POAMEAE+POgMEALl3/AMEALl6
JAMEALm5+wMEALn52jANBgkqhkiG9w0BAQsFAAOCAQEAA3BHYeqypVIXE5JE9I4T
Cs+hdqgyhuMGgckS0E0U2y8wRY53+wI6fRT+jpzERB10siJcCrWz68OzxI6Lb7qM
mKBC9mfksohaHLJUvIo9g4POCmVPn0wTZ6afomMEw9Z0+O+/+bgxRFRhwVMLfu9p
n52JX76kfTRvFQg0H+6XxJPgpM0ehyrpborC5/H973Jf6TgR2bvUfDrz7mVpCrOP
7/cjXsq7zmNRPHlRDzSKdoJ75EXLcqyU55G7K18ViFF0XSTRFCSLTfP7vJnvUP6j
iJRSolDiA18br5MM6UWYOLHAG+QcoKzyY8qF/XOWvdPYNFtpEX4ZamdzQJhi9/0W
hA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org