Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/tH0YhlPQOP-OrLi3KgbDCfJ7Bn4.roa
File: tH0YhlPQOP-OrLi3KgbDCfJ7Bn4.roa (raw, json)
Hash identifier: zbuvx4nkRTB/SyktGWTRyUBYqGt002OmrMASkt5xTUA=
Subject key identifier: B4:7D:18:86:53:D0:38:FF:8E:AC:B8:B7:2A:06:C3:09:F2:7B:06:7E
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 15D23FA4
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/tH0YhlPQOP-OrLi3KgbDCfJ7Bn4.roa
Signing time: Fri 17 Jun 2022 05:51:44 +0000
ROA not before: Fri 17 Jun 2022 05:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39347
IP address blocks: 185.122.221.0/24 maxlen: 24
185.122.222.0/24 maxlen: 24
89.33.88.0/21 maxlen: 21
93.119.176.0/23 maxlen: 23
93.119.182.0/23 maxlen: 23
2a06:a880::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366100388 (0x15d23fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Jun 17 05:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b47d188653d038ff8eacb8b72a06c309f27b067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b5:3f:72:89:df:7a:62:ee:0d:f2:41:9e:f9:
85:06:5c:4e:8a:f9:23:f5:a1:e4:15:0b:6c:80:aa:
1a:df:36:3b:20:df:fb:ef:75:d1:03:5e:b1:3a:af:
bf:37:e2:ee:70:db:3a:ee:1e:5e:ea:6e:d9:42:2f:
c8:eb:79:6e:1e:34:83:3e:14:ff:68:00:48:1c:21:
87:00:b3:24:b8:bf:b7:9e:f1:91:c8:b6:3a:5e:5b:
26:89:99:a2:55:b9:72:f1:19:83:cf:51:d2:ee:b3:
70:9e:47:98:21:13:d6:37:81:58:62:a9:e3:f5:54:
9e:39:74:0a:66:e1:48:9c:57:2c:4e:d2:5e:e4:a8:
77:40:03:0c:6b:88:0d:2a:65:a9:f2:f4:f0:00:e5:
a6:1a:47:1b:19:61:ca:1f:62:ac:c6:e3:f8:b1:6e:
f4:34:2e:d3:65:9d:bf:ad:b1:a3:33:e3:62:be:62:
88:08:5b:ca:11:30:1f:04:f3:8c:48:d8:d1:db:0e:
f8:ee:97:0c:6a:8d:d9:a1:b2:d7:3b:38:68:65:67:
fe:ea:aa:26:58:79:18:4c:f3:7f:83:99:13:e7:43:
a2:4f:0b:f4:2a:43:82:f0:67:87:59:72:f5:86:b0:
cb:6f:e0:21:35:05:b8:27:87:57:5f:37:af:1f:c0:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7D:18:86:53:D0:38:FF:8E:AC:B8:B7:2A:06:C3:09:F2:7B:06:7E
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/tH0YhlPQOP-OrLi3KgbDCfJ7Bn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.88.0/21
93.119.176.0/23
93.119.182.0/23
185.122.221.0-185.122.222.255
IPv6:
2a06:a880::/48
Signature Algorithm: sha256WithRSAEncryption
04:83:4b:b3:ec:1d:83:1f:0c:1a:9f:81:44:b1:be:c9:12:78:
ca:a9:d6:ea:5e:ba:74:86:ff:c4:78:df:5a:fa:64:65:49:df:
3f:41:16:48:68:d8:41:ee:14:22:65:1a:f8:dd:44:1b:c3:f8:
c7:45:a0:fe:ad:17:e9:b1:8d:37:80:2f:ea:77:69:7d:1e:17:
5a:eb:3b:3f:b1:c1:af:8e:52:cf:50:6d:eb:7a:44:d0:64:8e:
33:ad:13:d8:fe:e3:d4:16:08:26:1f:c8:dc:dd:53:c3:5d:04:
f0:88:b4:01:78:bf:f3:52:49:84:81:a9:33:df:e3:64:3e:1a:
23:6c:a2:ad:94:10:53:d8:00:27:1f:a6:6c:bb:2a:0a:b9:13:
ff:a8:45:d2:06:c9:10:f3:48:d4:68:ca:ca:b4:a9:b0:6e:e0:
35:81:f3:b1:91:fe:77:b2:12:8d:0d:3f:89:15:b8:f0:51:92:
1b:4f:50:81:30:0f:d6:fb:e9:3f:64:9c:44:ea:79:68:16:b0:
91:75:38:06:d7:c3:e0:20:f1:6e:b6:6f:ae:1c:fd:5a:c7:fb:
08:7b:2c:a0:4f:d1:1f:ed:1d:5c:6d:bb:0a:5e:4c:6f:06:63:
d3:ea:d5:7b:77:c8:4a:d5:54:b8:a4:35:8d:c2:74:c3:ba:5d:
0c:6e:b3:d0
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgIEFdI/pDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
M2MwNTkxZTJlYjQ5ZDA1NTllNmZjZTdlZTJhYTgxZjBmNTliYTZmMB4XDTIyMDYx
NzA1NTE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjQ3ZDE4ODY1M2Qw
MzhmZjhlYWNiOGI3MmEwNmMzMDlmMjdiMDY3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPi1P3KJ33pi7g3yQZ75hQZcTor5I/Wh5BULbICqGt82OyDf
++910QNesTqvvzfi7nDbOu4eXupu2UIvyOt5bh40gz4U/2gASBwhhwCzJLi/t57x
kci2Ol5bJomZolW5cvEZg89R0u6zcJ5HmCET1jeBWGKp4/VUnjl0CmbhSJxXLE7S
XuSod0ADDGuIDSplqfL08ADlphpHGxlhyh9irMbj+LFu9DQu02Wdv62xozPjYr5i
iAhbyhEwHwTzjEjY0dsO+O6XDGqN2aGy1zs4aGVn/uqqJlh5GEzzf4OZE+dDok8L
9CpDgvBnh1ly9Yawy2/gITUFuCeHV183rx/AJiUCAwEAAaOCAjQwggIwMB0GA1Ud
DgQWBBS0fRiGU9A4/46suLcqBsMJ8nsGfjAfBgNVHSMEGDAWgBTDwFkeLrSdBVnm
/OfuKqgfD1m6bzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3c4QlpIaTYwblFWWjV2em43aXFvSHc5WnVtOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvNGI4YWFiLTIwOTktNDNhZi1iNDFkLWUzNDA3MTc0NjYzYi8x
L3RIMFlobFBRT1AtT3JMaTNLZ2JEQ2ZKN0JuNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
NGI4YWFiLTIwOTktNDNhZi1iNDFkLWUzNDA3MTc0NjYzYi8xL3c4QlpIaTYwblFW
WjV2em43aXFvSHc5WnVtOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBK
BggrBgEFBQcBBwEB/wQ7MDkwJgQCAAEwIAMEA1khWAMEAV13sAMEAV13tjAMAwQA
uXrdAwQAuXreMA8EAgACMAkDBwAqBqiAAAAwDQYJKoZIhvcNAQELBQADggEBAASD
S7PsHYMfDBqfgUSxvskSeMqp1upeunSG/8R431r6ZGVJ3z9BFkho2EHuFCJlGvjd
RBvD+MdFoP6tF+mxjTeAL+p3aX0eF1rrOz+xwa+OUs9Qbet6RNBkjjOtE9j+49QW
CCYfyNzdU8NdBPCItAF4v/NSSYSBqTPf42Q+GiNsoq2UEFPYACcfpmy7Kgq5E/+o
RdIGyRDzSNRoysq0qbBu4DWB87GR/neyEo0NP4kVuPBRkhtPUIEwD9b76T9knETq
eWgWsJF1OAbXw+Ag8W62b64c/VrH+wh7LKBP0R/tHVxtuwpeTG8GY9Pq1Xt3yErV
VLikNY3CdMO6XQxus9A=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net