Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/THfhc9IhIweyISD8sJkvdaWQjOU.roa
File: THfhc9IhIweyISD8sJkvdaWQjOU.roa (raw, json)
Hash identifier: LNJ3GJVu7Zdn8b5C+tfWZsYTyk11umM8+k/3MGbgh/c=
Subject key identifier: 4C:77:E1:73:D2:21:23:07:B2:21:20:FC:B0:99:2F:75:A5:90:8C:E5
Certificate issuer: /CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Certificate serial: C0CE25
Authority key identifier: 1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/THfhc9IhIweyISD8sJkvdaWQjOU.roa
Signing time: Sat 01 Jan 2022 01:58:08 +0000
ROA not before: Sat 01 Jan 2022 01:58:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211715
IP address blocks: 91.206.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12635685 (0xc0ce25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c5196ded5ba5d686e7095c6d5c638c6b8f8bada
Validity
Not Before: Jan 1 01:58:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c77e173d2212307b22120fcb0992f75a5908ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d6:14:f7:7e:44:76:1d:6b:78:f1:d7:f3:83:
5c:53:67:b8:cd:ee:4c:56:7e:32:fe:bb:0f:f9:36:
9f:fb:8f:73:d1:ff:ed:86:43:08:e2:88:13:c5:51:
7b:da:22:94:b2:d4:50:63:d1:61:5e:ff:93:1c:a3:
a0:ee:25:b0:a6:46:02:c4:a8:d8:d5:05:98:08:2f:
11:28:67:d9:3b:68:39:c0:ca:85:e5:f7:de:f6:cd:
30:fc:86:1e:93:6e:a0:01:42:e2:65:6e:cb:c5:ef:
82:53:78:9e:d5:19:54:c6:db:0a:32:d4:c5:f3:10:
99:db:b2:ef:1e:fa:87:51:ba:21:58:86:b4:03:f8:
80:9e:bc:86:fd:f3:c1:0f:0a:e8:ad:5f:5f:12:d4:
2c:0d:11:73:02:97:7f:85:aa:c3:a9:94:67:e3:e9:
f6:a0:4f:f0:34:11:8d:2e:08:8d:42:04:44:4c:1f:
b7:a9:2d:3c:25:4b:41:ab:8d:6c:31:c1:bf:d2:6e:
51:87:af:aa:21:fc:c6:80:1b:48:25:33:de:5d:69:
a2:ae:83:d4:15:65:2d:77:2b:37:c4:d8:59:2b:6b:
ea:b5:c3:46:16:64:23:7f:1e:9c:27:8e:1f:4a:8b:
1d:7f:c4:03:55:32:87:87:d6:da:54:33:44:14:b7:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:77:E1:73:D2:21:23:07:B2:21:20:FC:B0:99:2F:75:A5:90:8C:E5
X509v3 Authority Key Identifier:
keyid:1C:51:96:DE:D5:BA:5D:68:6E:70:95:C6:D5:C6:38:C6:B8:F8:BA:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFGW3tW6XWhucJXG1cY4xrj4uto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/THfhc9IhIweyISD8sJkvdaWQjOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/159fa3-316e-4f5e-8b61-20bf275fd0e7/1/HFGW3tW6XWhucJXG1cY4xrj4uto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e4:90:c5:85:ff:32:31:77:b4:b5:45:8f:2d:e4:5d:e1:72:
ef:21:04:33:8c:99:60:de:a0:7f:0d:c3:fd:58:d7:0f:94:48:
41:e2:31:bb:54:4a:08:79:3a:87:64:1d:f7:d6:51:07:9f:95:
a8:5e:3f:f0:89:b4:6f:ce:0b:d1:15:9a:b3:2b:3b:5f:45:72:
45:2f:02:ff:87:a3:b0:b5:33:af:de:0b:c9:97:8d:f5:19:29:
ad:b3:8a:c1:32:b4:40:4b:03:23:a2:d1:06:81:ad:73:ba:57:
2c:9d:30:98:32:5f:ec:8d:67:06:0a:9a:55:3a:23:59:5d:c5:
9c:37:05:8d:32:49:93:7a:e7:7b:66:47:e9:62:a7:43:5e:c8:
c2:48:f1:50:ab:db:b7:9d:68:5b:33:44:5d:00:38:e6:a0:45:
5d:71:38:c8:de:c9:6c:cd:19:d2:7e:70:8d:c1:d2:29:ba:5c:
fb:24:9f:f3:c6:87:37:cc:29:c1:ab:7d:be:71:6e:e1:e9:28:
0c:42:55:af:b1:86:80:0e:97:8a:8b:06:c0:c4:67:7f:66:ea:
5f:40:52:17:08:0e:c7:34:b5:54:d3:d1:88:51:14:39:f1:b3:
1c:c8:2a:a2:67:38:ed:e4:e3:3f:6e:2f:00:4a:04:e4:a4:92:
33:af:40:ee
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAMDOJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YzUxOTZkZWQ1YmE1ZDY4NmU3MDk1YzZkNWM2MzhjNmI4ZjhiYWRhMB4XDTIyMDEw
MTAxNTgwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGM3N2UxNzNkMjIx
MjMwN2IyMjEyMGZjYjA5OTJmNzVhNTkwOGNlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPDWFPd+RHYda3jx1/ODXFNnuM3uTFZ+Mv67D/k2n/uPc9H/
7YZDCOKIE8VRe9oilLLUUGPRYV7/kxyjoO4lsKZGAsSo2NUFmAgvEShn2TtoOcDK
heX33vbNMPyGHpNuoAFC4mVuy8XvglN4ntUZVMbbCjLUxfMQmduy7x76h1G6IViG
tAP4gJ68hv3zwQ8K6K1fXxLULA0RcwKXf4Wqw6mUZ+Pp9qBP8DQRjS4IjUIEREwf
t6ktPCVLQauNbDHBv9JuUYevqiH8xoAbSCUz3l1poq6D1BVlLXcrN8TYWStr6rXD
RhZkI38enCeOH0qLHX/EA1Uyh4fW2lQzRBS3tFECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRMd+Fz0iEjB7IhIPywmS91pZCM5TAfBgNVHSMEGDAWgBQcUZbe1bpdaG5w
lcbVxjjGuPi62jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hGR1czdFc2WFdodWNKWEcxY1k0eHJqNHV0by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTkvMTU5ZmEzLTMxNmUtNGY1ZS04YjYxLTIwYmYyNzVmZDBlNy8x
L1RIZmhjOUloSXdleUlTRDhzSmt2ZGFXUWpPVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkv
MTU5ZmEzLTMxNmUtNGY1ZS04YjYxLTIwYmYyNzVmZDBlNy8xL0hGR1czdFc2WFdo
dWNKWEcxY1k0eHJqNHV0by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvO0DANBgkqhkiG9w0BAQsFAAOC
AQEAXOSQxYX/MjF3tLVFjy3kXeFy7yEEM4yZYN6gfw3D/VjXD5RIQeIxu1RKCHk6
h2Qd99ZRB5+VqF4/8Im0b84L0RWasys7X0VyRS8C/4ejsLUzr94LyZeN9RkprbOK
wTK0QEsDI6LRBoGtc7pXLJ0wmDJf7I1nBgqaVTojWV3FnDcFjTJJk3rne2ZH6WKn
Q17IwkjxUKvbt51oWzNEXQA45qBFXXE4yN7JbM0Z0n5wjcHSKbpc+ySf88aHN8wp
wat9vnFu4ekoDEJVr7GGgA6XiosGwMRnf2bqX0BSFwgOxzS1VNPRiFEUOfGzHMgq
omc47eTjP24vAEoE5KSSM69A7g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:58 2025 by rpki-client