Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/hgo9tekvFq7x8ZuU1xfjJYmGnPQ.roa
File: hgo9tekvFq7x8ZuU1xfjJYmGnPQ.roa (raw, json)
Hash identifier: 0z8QLwn+2Kg4L9/wntf+ABi0PK3RCMy8VThMBGsHuo8=
Subject key identifier: 86:0A:3D:B5:E9:2F:16:AE:F1:F1:9B:94:D7:17:E3:25:89:86:9C:F4
Certificate issuer: /CN=db239685409f64ba1c3a54a8ef141c924e71d892
Certificate serial: 3809BCCB
Authority key identifier: DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/hgo9tekvFq7x8ZuU1xfjJYmGnPQ.roa
Signing time: Sat 01 Jan 2022 05:53:25 +0000
ROA not before: Sat 01 Jan 2022 05:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47841
IP address blocks: 91.208.181.0/24 maxlen: 24
146.185.40.0/21 maxlen: 21
185.65.112.0/22 maxlen: 22
95.131.136.0/21 maxlen: 21
2a02:c70::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940162251 (0x3809bccb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db239685409f64ba1c3a54a8ef141c924e71d892
Validity
Not Before: Jan 1 05:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=860a3db5e92f16aef1f19b94d717e32589869cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:17:69:93:42:e0:72:17:b4:33:ba:85:fc:
7c:f7:a9:6c:6b:3b:af:8c:11:69:75:01:ed:0b:c9:
53:e2:03:80:df:fe:7e:00:bc:b1:dd:6d:d5:e7:6c:
c4:88:b7:46:1d:c2:a4:a4:cb:c1:93:64:97:30:e7:
a7:1f:2f:30:57:f2:e6:02:e9:fa:84:89:c5:dd:fc:
41:c7:25:5e:cc:68:30:e6:b4:ed:8d:d7:8b:85:76:
b9:c6:69:c4:2f:12:a5:bf:65:6e:64:46:f3:15:90:
ba:48:57:14:ad:51:47:c0:68:a4:b1:fb:d8:4b:6d:
7f:2d:14:ab:02:d8:28:2d:54:96:fb:b6:dc:8b:41:
b3:a4:7f:29:3b:fb:3b:40:c1:e4:86:87:a4:e8:e0:
f9:56:df:09:35:d9:8e:db:1b:c1:a0:d0:bc:bc:57:
4c:f7:1b:97:f6:db:5d:d7:9f:94:2a:c7:8c:94:1e:
b2:68:d5:69:00:51:c6:63:1f:4b:0f:f8:bf:f2:46:
e2:d7:ba:d6:b4:bc:8a:7b:c2:2e:12:db:9b:bc:47:
4c:a2:c7:2b:d4:b0:31:01:f1:5e:70:be:23:ac:8e:
e7:d0:6b:ff:dc:22:73:00:3b:f4:04:20:32:e7:06:
56:e5:dd:4d:98:39:3e:49:47:57:06:02:f2:7f:ca:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:3D:B5:E9:2F:16:AE:F1:F1:9B:94:D7:17:E3:25:89:86:9C:F4
X509v3 Authority Key Identifier:
keyid:DB:23:96:85:40:9F:64:BA:1C:3A:54:A8:EF:14:1C:92:4E:71:D8:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2yOWhUCfZLocOlSo7xQckk5x2JI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/hgo9tekvFq7x8ZuU1xfjJYmGnPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8d6fd7-1cb3-413c-a32b-2ef447e1b08c/1/2yOWhUCfZLocOlSo7xQckk5x2JI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.181.0/24
95.131.136.0/21
146.185.40.0/21
185.65.112.0/22
IPv6:
2a02:c70::/32
Signature Algorithm: sha256WithRSAEncryption
24:80:f2:a4:14:08:e0:32:6d:a9:14:ed:5d:3c:41:37:bd:b0:
59:d5:e8:43:59:b6:49:8c:03:a7:ef:5c:0c:f2:fa:f9:16:29:
2a:38:fb:47:ac:d0:b9:f3:fd:39:aa:f9:8b:40:42:8c:20:0e:
5b:0f:5f:a8:ab:be:a2:98:23:06:a6:43:d2:1d:1a:85:a4:d3:
1c:1e:09:ba:78:20:9c:02:3c:b6:38:4c:f4:6c:48:16:f5:70:
a8:56:47:e8:c6:b1:d7:74:62:f5:1d:ab:4f:9f:2f:48:a5:ca:
24:f1:c6:2f:3b:00:e0:5c:c5:d2:aa:4d:c7:99:6d:b7:07:7b:
8c:57:19:f0:c8:90:c2:11:a1:26:e9:0e:7a:ba:1b:4e:31:41:
ec:c3:aa:d9:7e:43:93:18:26:d7:db:4c:9a:be:03:a3:60:65:
c0:72:e6:4c:78:9c:8d:33:8a:26:d5:d1:46:69:a0:39:04:38:
8e:ce:09:74:e5:3c:e5:83:80:70:ce:95:7e:e2:0d:a4:e0:13:
13:4e:a5:72:7d:db:ab:d6:0e:70:27:be:12:f0:6e:fd:67:ac:
9e:df:d9:9e:06:1c:c9:d9:45:16:fd:d9:35:1c:a9:b1:96:70:
ec:fe:fc:7a:de:cc:df:4a:b6:31:34:3d:a5:77:07:83:07:89:
e4:0c:fd:b2
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEOAm8yzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YjIzOTY4NTQwOWY2NGJhMWMzYTU0YThlZjE0MWM5MjRlNzFkODkyMB4XDTIyMDEw
MTA1NTMyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODYwYTNkYjVlOTJm
MTZhZWYxZjE5Yjk0ZDcxN2UzMjU4OTg2OWNmNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALrUF2mTQuByF7QzuoX8fPepbGs7r4wRaXUB7QvJU+IDgN/+
fgC8sd1t1edsxIi3Rh3CpKTLwZNklzDnpx8vMFfy5gLp+oSJxd38QcclXsxoMOa0
7Y3Xi4V2ucZpxC8Spb9lbmRG8xWQukhXFK1RR8BopLH72Ettfy0UqwLYKC1Ulvu2
3ItBs6R/KTv7O0DB5IaHpOjg+VbfCTXZjtsbwaDQvLxXTPcbl/bbXdeflCrHjJQe
smjVaQBRxmMfSw/4v/JG4te61rS8invCLhLbm7xHTKLHK9SwMQHxXnC+I6yO59Br
/9wicwA79AQgMucGVuXdTZg5PklHVwYC8n/KqGMCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBSGCj216S8WrvHxm5TXF+MliYac9DAfBgNVHSMEGDAWgBTbI5aFQJ9kuhw6
VKjvFBySTnHYkjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJ5T1doVUNmWkxvY09sU283eFFja2s1eDJKSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvOGQ2ZmQ3LTFjYjMtNDEzYy1hMzJiLTJlZjQ0N2UxYjA4Yy8x
L2hnbzl0ZWt2RnE3eDhadVUxeGZqSlltR25QUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
OGQ2ZmQ3LTFjYjMtNDEzYy1hMzJiLTJlZjQ0N2UxYjA4Yy8xLzJ5T1doVUNmWkxv
Y09sU283eFFja2s1eDJKSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAFvQtQMEA1+DiAMEA5K5KAMEArlB
cDANBAIAAjAHAwUAKgIMcDANBgkqhkiG9w0BAQsFAAOCAQEAJIDypBQI4DJtqRTt
XTxBN72wWdXoQ1m2SYwDp+9cDPL6+RYpKjj7R6zQufP9Oar5i0BCjCAOWw9fqKu+
opgjBqZD0h0ahaTTHB4JunggnAI8tjhM9GxIFvVwqFZH6Max13Ri9R2rT58vSKXK
JPHGLzsA4FzF0qpNx5lttwd7jFcZ8MiQwhGhJukOerobTjFB7MOq2X5Dkxgm19tM
mr4Do2BlwHLmTHicjTOKJtXRRmmgOQQ4js4JdOU85YOAcM6VfuINpOATE06lcn3b
q9YOcCe+EvBu/Wesnt/ZngYcydlFFv3ZNRypsZZw7P78et7M30q2MTQ9pXcHgweJ
5Az9sg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:44 2025 by rpki-client