Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/mh_n5_fqci41vRTys2-HWlX5GZA.roa
File: mh_n5_fqci41vRTys2-HWlX5GZA.roa (raw, json)
Hash identifier: 69MkGgrJvXr+y30FbPIOpAsWJC7bFC8bjCbP4Gb9T6A=
Subject key identifier: 9A:1F:E7:E7:F7:EA:72:2E:35:BD:14:F2:B3:6F:87:5A:55:F9:19:90
Certificate issuer: /CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Certificate serial: 0184A429D6808EAE10CEB874FDA489200285
Authority key identifier: 30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/mh_n5_fqci41vRTys2-HWlX5GZA.roa
Signing time: Wed 23 Nov 2022 11:05:16 +0000
ROA not before: Wed 23 Nov 2022 11:05:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209044
IP address blocks: 185.254.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:29:d6:80:8e:ae:10:ce:b8:74:fd:a4:89:20:02:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=301a648725ee26a460cb9b1cbcd9c9c832c449af
Validity
Not Before: Nov 23 11:05:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a1fe7e7f7ea722e35bd14f2b36f875a55f91990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1d:c8:0b:34:c5:17:33:8c:12:80:86:2b:34:
e9:fb:a3:ea:92:bf:4d:aa:c9:91:83:41:1f:8c:81:
59:57:5e:da:58:45:14:3f:3a:c2:1e:40:c3:e4:b0:
f1:c3:56:32:38:87:e1:ee:9f:23:fc:b6:74:bb:74:
fa:5d:f1:2f:88:3e:64:30:f8:cf:04:fa:d2:07:34:
38:65:8d:a7:b5:04:c3:4d:85:41:64:73:cd:49:8c:
c6:79:6c:7b:e5:d9:bf:5e:af:8c:c3:42:cb:2e:3d:
17:b0:05:c7:a1:76:aa:29:76:ea:44:62:75:69:53:
84:42:d0:0a:d8:4b:98:5c:61:ba:48:6c:a2:47:a7:
89:ee:ce:9a:10:f3:14:e4:72:44:01:2a:4d:e2:12:
28:71:a2:b0:6d:08:06:23:d3:84:07:5f:14:37:3f:
c7:f6:39:7f:21:f8:c3:25:5c:e6:2d:15:65:52:19:
f4:d6:c6:58:8b:fa:cd:ca:68:a5:83:3a:3e:99:93:
b3:5f:78:0c:49:34:b8:c3:0f:78:63:b5:b2:22:35:
a9:15:ee:4e:cf:98:60:02:4c:a5:63:15:ef:c1:de:
5b:c2:46:33:e2:42:f7:c9:99:39:ef:47:79:1c:8c:
e1:2f:12:59:87:d5:1a:f3:dd:e2:36:a0:29:48:f8:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1F:E7:E7:F7:EA:72:2E:35:BD:14:F2:B3:6F:87:5A:55:F9:19:90
X509v3 Authority Key Identifier:
keyid:30:1A:64:87:25:EE:26:A4:60:CB:9B:1C:BC:D9:C9:C8:32:C4:49:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBpkhyXuJqRgy5scvNnJyDLESa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/mh_n5_fqci41vRTys2-HWlX5GZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/024f0f-20c5-4828-b332-a5b2d09e05cf/1/MBpkhyXuJqRgy5scvNnJyDLESa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:5e:d9:e6:ac:59:a3:fd:19:78:9c:00:f3:8b:d3:b5:5c:8b:
66:8b:39:07:76:66:c6:b0:79:55:94:27:e7:f0:08:2f:bf:9d:
7c:5f:10:db:b6:a2:3e:cb:e8:a6:39:84:4a:da:5a:95:4d:89:
22:91:87:ba:62:88:84:08:0b:62:eb:a9:d7:8c:0e:27:f8:b7:
94:8f:69:12:2d:44:4a:fa:02:36:e9:0a:f8:d9:87:05:b2:b6:
3e:1a:33:d7:0e:b0:96:d1:c4:93:d6:82:b0:3c:23:34:0e:fc:
d3:2c:ab:d2:ce:04:3c:32:2e:73:f2:5c:af:71:1b:1c:f0:33:
96:fb:fb:0e:80:06:e3:52:9b:61:78:64:3c:3c:1c:8c:ad:82:
b0:54:4c:1a:30:5e:28:a9:82:f9:53:bb:88:60:79:13:f6:f3:
2b:1d:e9:3d:82:3c:0f:33:75:3c:60:29:9b:59:58:a1:24:6a:
29:e6:e6:74:c7:14:15:cb:55:ed:d8:d2:6d:72:40:be:f9:08:
4d:eb:80:a0:d4:ba:f5:62:25:6b:41:0e:2a:b0:08:91:1b:a3:
b2:20:9b:f4:cb:34:93:bb:ff:0a:74:85:fd:29:7b:fb:c3:43:
b0:0c:e2:2e:9a:b4:ba:e7:68:10:72:43:46:85:9b:d9:07:6c:
2b:4d:7e:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSkKdaAjq4Qzrh0/aSJIAKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMWE2NDg3MjVlZTI2YTQ2MGNiOWIxY2JjZDljOWM4MzJj
NDQ5YWYwHhcNMjIxMTIzMTEwNTE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTFmZTdlN2Y3ZWE3MjJlMzViZDE0ZjJiMzZmODc1YTU1ZjkxOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR3ICzTFFzOMEoCGKzTp+6Pqkr9N
qsmRg0EfjIFZV17aWEUUPzrCHkDD5LDxw1YyOIfh7p8j/LZ0u3T6XfEviD5kMPjP
BPrSBzQ4ZY2ntQTDTYVBZHPNSYzGeWx75dm/Xq+Mw0LLLj0XsAXHoXaqKXbqRGJ1
aVOEQtAK2EuYXGG6SGyiR6eJ7s6aEPMU5HJEASpN4hIocaKwbQgGI9OEB18UNz/H
9jl/IfjDJVzmLRVlUhn01sZYi/rNymilgzo+mZOzX3gMSTS4ww94Y7WyIjWpFe5O
z5hgAkylYxXvwd5bwkYz4kL3yZk570d5HIzhLxJZh9Ua893iNqApSPif4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJof5+f36nIuNb0U8rNvh1pV+RmQMB8GA1UdIwQY
MBaAFDAaZIcl7iakYMubHLzZycgyxEmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzIt
YTViMmQwOWUwNWNmLzEvbWhfbjVfZnFjaTQxdlJUeXMyLUhXbFg1R1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wMjRmMGYtMjBjNS00ODI4LWIzMzItYTViMmQwOWUwNWNm
LzEvTUJwa2h5WHVKcVJneTVzY3ZObkp5RExFU2E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4BMA0G
CSqGSIb3DQEBCwUAA4IBAQCNXtnmrFmj/Rl4nADzi9O1XItmizkHdmbGsHlVlCfn
8Agvv518XxDbtqI+y+imOYRK2lqVTYkikYe6YoiECAti66nXjA4n+LeUj2kSLURK
+gI26Qr42YcFsrY+GjPXDrCW0cST1oKwPCM0DvzTLKvSzgQ8Mi5z8lyvcRsc8DOW
+/sOgAbjUptheGQ8PByMrYKwVEwaMF4oqYL5U7uIYHkT9vMrHek9gjwPM3U8YCmb
WVihJGop5uZ0xxQVy1Xt2NJtckC++QhN64Cg1Lr1YiVrQQ4qsAiRG6OyIJv0yzST
u/8KdIX9KXv7w0OwDOIumrS652gQckNGhZvZB2wrTX6X
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:22 2023 by rpki-client on console.sobornost.net