Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/HFYXmRy5atiybvjCmn8mq3ZSgX8.roa
File: HFYXmRy5atiybvjCmn8mq3ZSgX8.roa (raw, json)
Hash identifier: 305xl10JjKmMj5f1kOihxQlMk0ZMd1nBCKw0c/NJbXQ=
Subject key identifier: 1C:56:17:99:1C:B9:6A:D8:B2:6E:F8:C2:9A:7F:26:AB:76:52:81:7F
Certificate issuer: /CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Certificate serial: 1B2B5592
Authority key identifier: AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/HFYXmRy5atiybvjCmn8mq3ZSgX8.roa
Signing time: Sat 01 Jan 2022 03:00:05 +0000
ROA not before: Sat 01 Jan 2022 03:00:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60645
IP address blocks: 185.32.4.0/22 maxlen: 22
2a04:3dc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455824786 (0x1b2b5592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1a0b9cc5ce8bfd9ee26d09d7e91151a42d370d
Validity
Not Before: Jan 1 03:00:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c5617991cb96ad8b26ef8c29a7f26ab7652817f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a0:4a:46:86:59:d9:89:43:81:4c:37:56:0f:
92:4c:f8:19:68:c6:02:c9:5a:d5:19:6c:20:73:12:
7d:9d:3d:6d:17:20:b5:51:d8:73:5e:a6:87:2c:70:
7e:5d:58:26:34:6a:27:d3:09:8c:cc:84:08:6e:f5:
cc:54:cd:4a:c0:83:55:cf:12:79:9a:c4:c8:d8:ce:
dc:9d:e7:a3:cc:81:62:e5:81:ec:3a:4a:ec:74:b3:
73:5d:b6:d9:97:5c:97:4b:42:0a:8a:dc:d5:2b:7a:
1d:84:3a:b4:f8:86:2f:ab:5e:7b:e6:5c:20:f1:c5:
eb:05:a9:ab:76:b7:91:86:81:39:5d:35:af:c1:dd:
67:40:e7:73:78:ef:35:68:52:95:46:0d:2c:b2:b6:
3f:c8:78:02:02:8c:eb:a8:2e:72:a5:b6:10:4b:37:
03:f1:a3:ac:d6:28:60:c2:d4:50:cd:c9:17:06:ec:
79:02:93:20:dc:7f:9c:77:c9:74:c4:28:c9:50:0d:
f2:67:66:e8:bb:de:cc:94:08:d6:2f:dc:5d:b5:13:
e7:97:73:be:67:ed:f0:16:e6:4c:88:95:dd:1a:80:
4b:fb:bc:6d:d0:b0:dc:99:99:46:8d:bb:d8:ec:ac:
34:39:70:26:16:a4:0c:94:c4:a4:bf:5c:67:e6:ca:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:17:99:1C:B9:6A:D8:B2:6E:F8:C2:9A:7F:26:AB:76:52:81:7F
X509v3 Authority Key Identifier:
keyid:AC:1A:0B:9C:C5:CE:8B:FD:9E:E2:6D:09:D7:E9:11:51:A4:2D:37:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBoLnMXOi_2e4m0J1-kRUaQtNw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/HFYXmRy5atiybvjCmn8mq3ZSgX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32872-88a3-4e84-9f83-aa7353d4d98f/1/rBoLnMXOi_2e4m0J1-kRUaQtNw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.32.4.0/22
IPv6:
2a04:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
98:7d:37:96:9d:e0:1b:e1:58:24:2f:14:e3:73:6e:79:b8:ec:
5e:b8:6a:f7:dc:ed:7f:7b:77:22:c3:d6:72:01:1d:98:e5:39:
d7:8b:70:19:d6:0c:2b:6e:5a:f0:0b:eb:52:23:b1:d9:7d:12:
04:c4:8c:ce:20:25:a2:1f:1d:7f:8a:c3:2c:c6:f2:83:04:22:
cf:2e:d3:6f:8d:ae:27:03:c7:41:db:74:2c:71:51:1d:36:6c:
bd:e1:21:ac:77:f1:79:d9:49:34:b4:4f:b5:ad:c6:08:2a:6a:
92:2d:fd:6c:ee:37:22:bb:80:f8:0c:af:3f:83:db:ac:03:b3:
7a:df:7d:c9:02:98:17:64:20:fe:b9:e6:d4:1d:f0:ab:53:2e:
d3:3d:6d:ff:01:ac:b7:23:7b:f2:dd:2f:aa:df:85:be:54:5c:
8c:0b:53:42:90:8e:1a:99:3f:e6:57:aa:15:58:19:4f:12:37:
72:18:6e:50:2c:88:c4:33:33:5c:c1:be:9b:48:c4:65:36:2f:
8d:b6:d9:2c:2f:38:e4:89:52:f9:f3:5a:78:9f:3a:b9:38:18:
9d:4a:b4:60:fc:b3:5b:b4:8d:90:fe:32:bb:60:17:83:ba:43:
61:ca:a0:58:c2:67:32:23:17:32:a5:25:30:8f:14:08:7a:6c:
80:11:76:29
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGytVkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YzFhMGI5Y2M1Y2U4YmZkOWVlMjZkMDlkN2U5MTE1MWE0MmQzNzBkMB4XDTIyMDEw
MTAzMDAwNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWM1NjE3OTkxY2I5
NmFkOGIyNmVmOGMyOWE3ZjI2YWI3NjUyODE3ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO6gSkaGWdmJQ4FMN1YPkkz4GWjGAsla1RlsIHMSfZ09bRcg
tVHYc16mhyxwfl1YJjRqJ9MJjMyECG71zFTNSsCDVc8SeZrEyNjO3J3no8yBYuWB
7DpK7HSzc1222Zdcl0tCCorc1St6HYQ6tPiGL6tee+ZcIPHF6wWpq3a3kYaBOV01
r8HdZ0Dnc3jvNWhSlUYNLLK2P8h4AgKM66gucqW2EEs3A/GjrNYoYMLUUM3JFwbs
eQKTINx/nHfJdMQoyVAN8mdm6LvezJQI1i/cXbUT55dzvmft8BbmTIiV3RqAS/u8
bdCw3JmZRo272OysNDlwJhakDJTEpL9cZ+bK7WUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQcVheZHLlq2LJu+MKafyardlKBfzAfBgNVHSMEGDAWgBSsGgucxc6L/Z7i
bQnX6RFRpC03DTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JCb0xuTVhPaV8yZTRtMEoxLWtSVWFRdE53MC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvYTMyODcyLTg4YTMtNGU4NC05ZjgzLWFhNzM1M2Q0ZDk4Zi8x
L0hGWVhtUnk1YXRpeWJ2akNtbjhtcTNaU2dYOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
YTMyODcyLTg4YTMtNGU4NC05ZjgzLWFhNzM1M2Q0ZDk4Zi8xL3JCb0xuTVhPaV8y
ZTRtMEoxLWtSVWFRdE53MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkgBDANBAIAAjAHAwUDKgQ9wDAN
BgkqhkiG9w0BAQsFAAOCAQEAmH03lp3gG+FYJC8U43NuebjsXrhq99ztf3t3IsPW
cgEdmOU514twGdYMK25a8AvrUiOx2X0SBMSMziAloh8df4rDLMbygwQizy7Tb42u
JwPHQdt0LHFRHTZsveEhrHfxedlJNLRPta3GCCpqki39bO43IruA+AyvP4PbrAOz
et99yQKYF2Qg/rnm1B3wq1Mu0z1t/wGstyN78t0vqt+FvlRcjAtTQpCOGpk/5leq
FVgZTxI3chhuUCyIxDMzXMG+m0jEZTYvjbbZLC845IlS+fNaeJ86uTgYnUq0YPyz
W7SNkP4yu2AXg7pDYcqgWMJnMiMXMqUlMI8UCHpsgBF2KQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:48 2024 by rpki-client on console-fra.rpki-client.org