Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Hhl4bmEEnAuksrpEm3V4wR7y19w.roa
File: Hhl4bmEEnAuksrpEm3V4wR7y19w.roa (raw, json)
Hash identifier: zGnxKzlq5vHoljzH2QSyO1zumjlOHm72Pc+WOuGlb78=
Subject key identifier: 1E:19:78:6E:61:04:9C:0B:A4:B2:BA:44:9B:75:78:C1:1E:F2:D7:DC
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 047D00A0
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Hhl4bmEEnAuksrpEm3V4wR7y19w.roa
Signing time: Sat 01 Jan 2022 05:52:33 +0000
ROA not before: Sat 01 Jan 2022 05:52:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36492
IP address blocks: 217.65.136.0/23 maxlen: 24
217.65.138.0/23 maxlen: 24
176.116.124.0/23 maxlen: 24
217.65.142.0/23 maxlen: 24
217.65.140.0/23 maxlen: 24
162.43.192.0/22 maxlen: 24
188.95.144.0/23 maxlen: 24
145.224.116.0/22 maxlen: 24
145.224.120.0/21 maxlen: 24
2a0d:3340::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75301024 (0x47d00a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Jan 1 05:52:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e19786e61049c0ba4b2ba449b7578c11ef2d7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:cd:32:b9:01:73:4d:93:b9:69:d5:83:a9:
69:8b:12:2b:f1:f5:44:30:fb:cb:9f:47:d7:9a:e5:
a4:5d:6b:f0:1a:57:9b:22:95:a2:76:7a:53:0f:19:
64:68:88:21:57:40:a0:59:40:50:80:f8:88:c3:07:
d0:02:e3:98:52:e7:ba:c0:ad:d4:fa:bf:28:b0:04:
cb:cd:3c:4d:00:07:b0:b8:18:28:df:6d:61:41:7e:
b7:29:17:b2:b8:84:d1:37:42:a6:23:3d:4f:4d:99:
35:aa:c5:9d:6f:8b:4d:6e:6f:0a:6a:a8:31:8b:27:
bf:4c:2b:c0:25:bf:72:70:61:d0:5a:67:4f:70:2c:
78:63:91:95:3b:43:b2:a3:5b:71:ed:31:4d:16:18:
44:19:0d:2a:84:95:41:62:79:0f:71:86:28:02:22:
59:64:b0:69:34:3a:c0:d9:59:28:8d:07:9f:15:75:
37:10:7c:b3:a5:0a:d7:a9:15:f2:d7:c3:a0:40:f2:
a4:2f:98:48:b3:95:0a:6a:f0:f4:a6:ec:d3:3b:09:
d2:f4:83:b5:d4:7e:65:5a:d6:e5:2b:b5:a1:c8:9a:
44:9b:2a:a1:14:8f:5a:d7:31:ed:dc:74:63:2d:e5:
bb:9b:27:77:47:e8:7f:9f:da:b6:df:c8:3d:6b:d8:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:19:78:6E:61:04:9C:0B:A4:B2:BA:44:9B:75:78:C1:1E:F2:D7:DC
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/Hhl4bmEEnAuksrpEm3V4wR7y19w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.116.0-145.224.127.255
162.43.192.0/22
176.116.124.0/23
188.95.144.0/23
217.65.136.0/21
IPv6:
2a0d:3340::/29
Signature Algorithm: sha256WithRSAEncryption
7a:20:ca:30:b9:e7:32:e5:88:0d:cf:f8:98:3e:65:8d:07:9d:
00:f6:5f:7f:69:35:ee:58:b2:53:e1:c3:1a:04:3e:bb:d9:cf:
39:48:f3:4d:7b:31:94:28:3c:4a:b8:9b:30:8c:c5:e5:5d:88:
ce:13:07:89:34:96:6c:08:b7:70:2d:34:88:e0:46:04:ec:40:
cc:26:c8:98:b2:11:d1:bc:68:1a:64:6b:c0:80:28:25:af:3d:
c2:1b:09:28:ed:94:d2:19:b1:c4:39:a4:74:27:b9:18:07:7c:
03:d1:5e:b8:1d:98:16:21:02:e5:7d:b8:db:15:c0:a1:10:22:
d6:38:3d:ca:a1:73:29:0f:4d:ca:18:3d:27:b8:6c:13:db:75:
68:a5:29:4f:de:8a:d6:95:3d:ec:72:f4:94:cf:b7:79:e7:7f:
22:56:5a:f3:b3:2e:77:99:ee:d3:5d:b2:85:3a:37:01:6a:21:
35:3b:ef:68:a1:a9:73:22:ac:71:68:ac:e5:67:f8:71:71:73:
4c:ba:5a:3d:7f:d7:74:e0:4a:4d:b6:f6:31:7b:70:d0:89:e1:
2e:20:31:23:3e:22:e4:54:b2:a7:03:d7:97:ae:40:c6:26:0e:
2b:c3:16:a2:c7:df:17:f1:49:61:a3:36:86:cf:74:28:49:c2:
58:3a:ab:af
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIEBH0AoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Nzk5YjMyN2RkNmNkYTFhZDM3YmMxYzIyNGE0NTRiMDJkZWEyYWZjMB4XDTIyMDEw
MTA1NTIzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWUxOTc4NmU2MTA0
OWMwYmE0YjJiYTQ0OWI3NTc4YzExZWYyZDdkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMFTzTK5AXNNk7lp1YOpaYsSK/H1RDD7y59H15rlpF1r8BpX
myKVonZ6Uw8ZZGiIIVdAoFlAUID4iMMH0ALjmFLnusCt1Pq/KLAEy808TQAHsLgY
KN9tYUF+tykXsriE0TdCpiM9T02ZNarFnW+LTW5vCmqoMYsnv0wrwCW/cnBh0Fpn
T3AseGORlTtDsqNbce0xTRYYRBkNKoSVQWJ5D3GGKAIiWWSwaTQ6wNlZKI0HnxV1
NxB8s6UK16kV8tfDoEDypC+YSLOVCmrw9Kbs0zsJ0vSDtdR+ZVrW5Su1ociaRJsq
oRSPWtcx7dx0Yy3lu5snd0fof5/att/IPWvY+RsCAwEAAaOCAjgwggI0MB0GA1Ud
DgQWBBQeGXhuYQScC6SyukSbdXjBHvLX3DAfBgNVHSMEGDAWgBRXmbMn3WzaGtN7
wcIkpFSwLeoq/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1Y1bXpKOTFzMmhyVGU4SENKS1JVc0MzcUt2dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvOGMyYWU5LTBhNzctNDllYi1hZDNhLWVhMTUwZTc2MzhjZS8x
L0hobDRibUVFbkF1a3NycEVtM1Y0d1I3eTE5dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
OGMyYWU5LTBhNzctNDllYi1hZDNhLWVhMTUwZTc2MzhjZS8xL1Y1bXpKOTFzMmhy
VGU4SENKS1JVc0MzcUt2dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBO
BggrBgEFBQcBBwEB/wQ/MD0wLAQCAAEwJjAMAwQCkeB0AwQHkeAAAwQCoivAAwQB
sHR8AwQBvF+QAwQD2UGIMA0EAgACMAcDBQMqDTNAMA0GCSqGSIb3DQEBCwUAA4IB
AQB6IMowuecy5YgNz/iYPmWNB50A9l9/aTXuWLJT4cMaBD672c85SPNNezGUKDxK
uJswjMXlXYjOEweJNJZsCLdwLTSI4EYE7EDMJsiYshHRvGgaZGvAgCglrz3CGwko
7ZTSGbHEOaR0J7kYB3wD0V64HZgWIQLlfbjbFcChECLWOD3KoXMpD03KGD0nuGwT
23VopSlP3orWlT3scvSUz7d5538iVlrzsy53me7TXbKFOjcBaiE1O+9ooalzIqxx
aKzlZ/hxcXNMulo9f9d04EpNtvYxe3DQieEuIDEjPiLkVLKnA9eXrkDGJg4rwxai
x98X8UlhozaGz3QoScJYOquv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org