Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/hHsFku5_mGpE8ilsdyxzZ-LrxCc.roa
File: hHsFku5_mGpE8ilsdyxzZ-LrxCc.roa (raw, json)
Hash identifier: rPG0kJbN3Kgtn1UxnECZacMf01w/ko8kVzOEm+L+yx0=
Subject key identifier: 84:7B:05:92:EE:7F:98:6A:44:F2:29:6C:77:2C:73:67:E2:EB:C4:27
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 02A392AC
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/hHsFku5_mGpE8ilsdyxzZ-LrxCc.roa
Signing time: Thu 06 Jan 2022 15:40:10 +0000
ROA not before: Thu 06 Jan 2022 15:40:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 213.159.12.0/23 maxlen: 24
194.135.26.0/23 maxlen: 24
89.37.216.0/23 maxlen: 24
89.37.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44274348 (0x2a392ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 6 15:40:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=847b0592ee7f986a44f2296c772c7367e2ebc427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:2d:fd:b6:b4:22:15:64:2b:0f:af:d3:15:
90:42:ea:d9:8f:c2:4e:2b:a7:04:16:bd:9d:54:1a:
78:5b:d1:ad:b7:91:82:d8:e1:0c:7f:c5:92:48:31:
9d:79:76:26:d7:1c:06:71:1b:e9:98:0b:ca:ae:7f:
21:06:8b:d7:bb:51:5e:8b:2f:ad:87:94:c5:b0:bc:
1d:c2:e0:26:0b:2d:7d:e0:13:41:bf:06:1b:ea:33:
e8:54:95:4a:55:10:91:ba:75:a8:07:f4:eb:d3:c3:
a4:df:36:35:65:ad:00:4e:2b:49:d7:b0:6c:23:95:
69:24:ef:a7:b0:26:c0:1d:e0:91:f8:fe:c7:71:e1:
87:e8:07:87:af:e9:42:50:6f:67:d8:3e:e1:19:6d:
f3:e1:ad:8f:2f:29:d0:95:f9:a6:06:35:fd:23:42:
ae:92:2a:c8:e9:f6:04:9e:4d:d8:11:8f:80:2c:04:
5a:d0:1b:81:3b:f1:b8:73:b8:50:32:6e:06:ac:6f:
3c:fc:ce:d3:2b:d6:13:e0:08:1c:4c:62:00:9f:ef:
d8:f6:0f:db:0e:27:f1:54:23:2d:f9:1d:88:21:73:
46:fe:6d:8b:e2:37:f0:68:a3:77:c4:ad:90:6f:0a:
3f:d7:2d:2b:63:d3:be:66:e0:fa:d3:73:f0:4b:1c:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:05:92:EE:7F:98:6A:44:F2:29:6C:77:2C:73:67:E2:EB:C4:27
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/hHsFku5_mGpE8ilsdyxzZ-LrxCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.216.0/23
89.37.236.0/22
194.135.26.0/23
213.159.12.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:9a:26:1c:e8:a1:25:51:61:a2:80:40:2e:ab:81:72:16:31:
e8:7f:12:2b:3e:f1:de:e2:4d:2a:cd:3b:e4:7e:93:6c:cf:eb:
ec:9e:43:83:b3:cb:fc:3e:3c:97:d0:19:88:09:33:e0:41:15:
80:da:36:dc:8e:42:38:3a:a5:77:fe:b3:2a:24:99:37:f1:39:
41:fb:7a:6d:ea:b4:f2:8c:66:a3:c9:37:be:77:14:b3:60:96:
3f:60:45:7d:df:a6:91:b0:56:9f:60:41:9e:0a:d9:fe:f9:32:
0e:c3:a0:27:91:c9:41:b3:b8:95:a5:e0:b8:b6:8c:6a:f5:c2:
5b:e6:a0:1d:e8:e2:1b:5e:7c:dd:7c:cb:7b:f5:f0:be:28:27:
d5:d9:88:e4:fc:57:d9:1b:24:ed:1d:14:0d:14:a1:71:27:35:
37:b1:81:13:3c:cf:92:da:49:6f:9a:ce:30:bb:2b:8f:68:2e:
6a:55:91:e2:2d:ad:b0:fc:f4:ec:c5:07:0b:7f:df:fa:e0:a3:
4a:08:5d:cf:65:d4:5e:c7:6a:70:88:0b:60:20:a5:56:ab:e8:
5e:05:9f:5a:d5:f7:8d:d2:88:ba:c1:c2:58:9f:8d:99:a3:67:
b9:4f:1c:9d:b5:d3:39:78:1a:e7:94:99:31:0f:91:42:26:a8:
60:6f:7d:18
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEAqOSrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YTAwZTk4MTk1MzA2MTk3MmM4OTZiZDZkMjc3MzhkMDgzYWFkYjBlMB4XDTIyMDEw
NjE1NDAxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODQ3YjA1OTJlZTdm
OTg2YTQ0ZjIyOTZjNzcyYzczNjdlMmViYzQyNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKJWLf22tCIVZCsPr9MVkELq2Y/CTiunBBa9nVQaeFvRrbeR
gtjhDH/FkkgxnXl2JtccBnEb6ZgLyq5/IQaL17tRXosvrYeUxbC8HcLgJgstfeAT
Qb8GG+oz6FSVSlUQkbp1qAf069PDpN82NWWtAE4rSdewbCOVaSTvp7AmwB3gkfj+
x3Hhh+gHh6/pQlBvZ9g+4Rlt8+Gtjy8p0JX5pgY1/SNCrpIqyOn2BJ5N2BGPgCwE
WtAbgTvxuHO4UDJuBqxvPPzO0yvWE+AIHExiAJ/v2PYP2w4n8VQjLfkdiCFzRv5t
i+I38Gijd8StkG8KP9ctK2PTvmbg+tNz8EscxiECAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBSEewWS7n+YakTyKWx3LHNn4uvEJzAfBgNVHSMEGDAWgBTaAOmBlTBhlyyJ
a9bSdzjQg6rbDjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJnRHBnWlV3WVpjc2lXdlcwbmM0MElPcTJ3NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmYvODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8x
L2hIc0ZrdTVfbUdwRThpbHNkeXh6Wi1McnhDYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYv
ODJhN2Q2LTkyYTktNDIwNC05YWUwLTlhNDhlY2Y5ZTE1ZS8xLzJnRHBnWlV3WVpj
c2lXdlcwbmM0MElPcTJ3NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAVkl2AMEAlkl7AMEAcKHGgMEAdWf
DDANBgkqhkiG9w0BAQsFAAOCAQEAnJomHOihJVFhooBALquBchYx6H8SKz7x3uJN
Ks075H6TbM/r7J5Dg7PL/D48l9AZiAkz4EEVgNo23I5CODqld/6zKiSZN/E5Qft6
beq08oxmo8k3vncUs2CWP2BFfd+mkbBWn2BBngrZ/vkyDsOgJ5HJQbO4laXguLaM
avXCW+agHejiG1583XzLe/Xwvign1dmI5PxX2Rsk7R0UDRShcSc1N7GBEzzPktpJ
b5rOMLsrj2gualWR4i2tsPz07MUHC3/f+uCjSghdz2XUXsdqcIgLYCClVqvoXgWf
WtX3jdKIusHCWJ+NmaNnuU8cnbXTOXga55SZMQ+RQiaoYG99GA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org