Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/K-HZBDq6EvHjJb_G4qWWuY8tfHc.roa
File: K-HZBDq6EvHjJb_G4qWWuY8tfHc.roa (raw, json)
Hash identifier: tOBhrhtklWPXRZKcDxi+9gLxJ/hzkmunH4/idTZZaa4=
Subject key identifier: 2B:E1:D9:04:3A:BA:12:F1:E3:25:BF:C6:E2:A5:96:B9:8F:2D:7C:77
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01838DD017DBABF1E514D568EA19067958F4
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/K-HZBDq6EvHjJb_G4qWWuY8tfHc.roa
Signing time: Fri 30 Sep 2022 09:52:48 +0000
ROA not before: Fri 30 Sep 2022 09:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 996
IP address blocks: 93.152.211.0/24 maxlen: 24
93.152.208.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:d0:17:db:ab:f1:e5:14:d5:68:ea:19:06:79:58:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 30 09:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2be1d9043aba12f1e325bfc6e2a596b98f2d7c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:1a:02:28:df:df:1f:b1:94:11:e3:4c:16:
ef:fe:7f:55:f1:33:b2:84:11:e2:c4:11:79:e1:69:
c8:49:b8:36:94:77:e4:4e:7a:cc:eb:67:db:4d:20:
a4:32:b9:a7:3f:5f:73:22:3f:d0:a5:4d:15:60:af:
42:9c:1f:aa:44:d0:1c:41:c0:ce:88:14:fd:12:21:
41:a4:6a:6e:17:dc:5b:ac:13:cf:ce:53:92:4b:ad:
cd:e0:ec:b6:1f:9d:9e:2c:64:15:d9:c7:23:ff:41:
bf:6a:ad:51:cb:4b:27:12:67:fe:b2:bc:58:95:7f:
f6:e1:0d:a4:42:bf:56:15:2c:a6:cc:3e:e5:3a:44:
df:9c:6c:d3:fa:dc:23:f4:95:c5:37:71:8f:a0:67:
45:34:79:e6:e3:71:dc:25:87:89:65:ec:31:69:b4:
58:e4:07:10:fa:7d:6f:b8:88:27:74:2a:19:98:cf:
0d:ae:8a:67:05:5c:e5:c0:e4:dd:c6:4d:3b:55:74:
60:8e:6f:e5:66:6f:79:b8:f5:41:0e:31:b9:e6:24:
b1:5f:59:f0:24:20:80:32:9e:fb:c5:f1:30:f0:d8:
fb:5c:4a:2c:0e:78:d9:a4:c6:e2:5b:cc:76:eb:2f:
2d:8f:ce:22:75:46:a4:f9:ba:66:a9:2e:7a:54:fe:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:D9:04:3A:BA:12:F1:E3:25:BF:C6:E2:A5:96:B9:8F:2D:7C:77
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/K-HZBDq6EvHjJb_G4qWWuY8tfHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.235.0/24
93.152.208.0/24
93.152.211.0/24
93.152.216.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7c:b0:47:7d:7f:49:47:89:45:4a:31:d5:fc:35:5e:fd:ae:
db:61:4a:9c:85:e6:0e:ff:d7:07:e0:b6:2d:ea:ee:72:5c:a2:
9b:5b:72:d8:cd:e0:1f:6a:09:18:53:24:59:48:5e:28:ba:cc:
ff:8a:4e:23:fb:fe:eb:41:8b:30:4f:54:80:12:ff:bd:d5:02:
4a:91:e5:44:16:5c:a9:37:8b:31:e6:a3:eb:a6:c2:4c:52:e1:
a2:c0:a3:38:6f:33:72:4b:0b:4f:f4:66:ba:8f:41:5d:28:51:
60:8e:28:81:07:bb:e3:47:ed:f4:c5:4a:d9:46:c0:e8:cc:13:
a7:1d:9d:75:c1:fe:9f:f9:71:65:9e:09:f2:88:b9:8a:b7:f8:
dc:c5:23:37:16:f9:70:6e:f8:77:22:a6:d8:e5:f5:fc:37:c0:
9c:62:5e:29:a6:f4:66:b1:8c:56:e3:83:dd:3e:f1:30:7d:86:
65:bd:e1:87:dd:9e:ff:a6:6b:b4:31:e0:dd:f3:1a:b2:59:98:
86:69:cf:57:59:af:fc:aa:b0:9f:26:67:06:8a:fc:08:d9:7f:
35:bd:c1:56:e4:a2:65:63:59:48:e8:53:38:77:21:b5:41:e8:
14:bc:a4:19:95:db:00:42:2e:59:ee:e0:23:ff:93:f0:cd:18:
d1:11:fd:b2
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYON0Bfbq/HlFNVo6hkGeVj0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjIwOTMwMDk1MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmUxZDkwNDNhYmExMmYxZTMyNWJmYzZlMmE1OTZiOThmMmQ3Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BAaAijf3x+xlBHjTBbv/n9V8TOy
hBHixBF54WnISbg2lHfkTnrM62fbTSCkMrmnP19zIj/QpU0VYK9CnB+qRNAcQcDO
iBT9EiFBpGpuF9xbrBPPzlOSS63N4Oy2H52eLGQV2ccj/0G/aq1Ry0snEmf+srxY
lX/24Q2kQr9WFSymzD7lOkTfnGzT+twj9JXFN3GPoGdFNHnm43HcJYeJZewxabRY
5AcQ+n1vuIgndCoZmM8NropnBVzlwOTdxk07VXRgjm/lZm95uPVBDjG55iSxX1nw
JCCAMp77xfEw8Nj7XEosDnjZpMbiW8x26y8tj84idUak+bpmqS56VP5r9QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCvh2QQ6uhLx4yW/xuKllrmPLXx3MB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvSy1IWkJEcTZFdkhqSmJfRzRxV1d1WTh0ZkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALY3rAwQA
XZjQAwQAXZjTAwQAXZjYAwQAXZjmMA0GCSqGSIb3DQEBCwUAA4IBAQCifLBHfX9J
R4lFSjHV/DVe/a7bYUqcheYO/9cH4LYt6u5yXKKbW3LYzeAfagkYUyRZSF4ousz/
ik4j+/7rQYswT1SAEv+91QJKkeVEFlypN4sx5qPrpsJMUuGiwKM4bzNySwtP9Ga6
j0FdKFFgjiiBB7vjR+30xUrZRsDozBOnHZ11wf6f+XFlngnyiLmKt/jcxSM3Fvlw
bvh3IqbY5fX8N8CcYl4ppvRmsYxW44PdPvEwfYZlveGH3Z7/pmu0MeDd8xqyWZiG
ac9XWa/8qrCfJmcGivwI2X81vcFW5KJlY1lI6FM4dyG1QegUvKQZldsAQi5Z7uAj
/5PwzRjREf2y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-ams.rpki-client.org