Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FAV6-1bZKhYNoppJqtKcT5t-zWo.roa
File: FAV6-1bZKhYNoppJqtKcT5t-zWo.roa (raw, json)
Hash identifier: Ur4eL2EVGSByyyXVR4oC0QFbXSfLHIlOKdsuFKuHqDg=
Subject key identifier: 14:05:7A:FB:56:D9:2A:16:0D:A2:9A:49:AA:D2:9C:4F:9B:7E:CD:6A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F0241225C7AA4F37DBE1BFE97B47C44
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FAV6-1bZKhYNoppJqtKcT5t-zWo.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43188
IP address blocks: 85.254.156.0/23 maxlen: 23
85.254.156.0/24 maxlen: 24
85.254.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:41:22:5c:7a:a4:f3:7d:be:1b:fe:97:b4:7c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14057afb56d92a160da29a49aad29c4f9b7ecd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fd:d8:0a:59:96:31:cc:64:07:80:c2:c5:01:
3d:0c:f7:69:97:d0:81:e5:9d:a0:e2:4b:0c:45:e1:
83:c1:2d:82:71:85:13:91:f8:f6:bb:bb:c2:d2:e2:
30:69:64:3d:39:0f:4a:4c:7e:09:04:51:25:35:c4:
bc:75:99:46:52:fa:65:12:20:38:56:ef:dd:90:df:
b5:7e:b6:c8:bf:49:1a:b8:63:4f:4e:dc:b3:18:1c:
17:2a:ff:c3:d4:e7:31:6f:01:b8:ff:8e:56:ac:ca:
e3:47:f9:80:d0:61:1e:01:a2:83:5a:0c:e3:23:c9:
4f:40:05:cb:a3:35:85:82:42:72:c6:cb:96:e0:c7:
f2:bc:a7:58:ce:80:f7:30:75:4d:15:a7:b2:81:02:
62:77:b4:b8:bd:af:0a:46:49:75:6c:4b:9f:86:66:
41:75:3b:13:2c:d1:f6:df:ca:43:05:49:e3:03:07:
8f:e9:30:55:5a:82:01:7d:be:06:2c:06:6b:d8:09:
8c:21:e6:74:4e:91:2a:2f:b3:2f:84:fe:ad:37:58:
d3:4f:4b:a9:67:d7:4d:d2:9a:bd:a8:de:60:f1:e1:
f5:de:92:d2:64:23:e1:aa:ec:20:3c:b5:20:c0:f1:
99:9f:6e:43:8b:13:74:a9:68:f0:10:0c:32:e0:f8:
51:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:05:7A:FB:56:D9:2A:16:0D:A2:9A:49:AA:D2:9C:4F:9B:7E:CD:6A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/FAV6-1bZKhYNoppJqtKcT5t-zWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.156.0/23
Signature Algorithm: sha256WithRSAEncryption
78:0a:42:a5:3f:3b:74:94:f8:9b:16:f1:a8:6a:e7:60:b6:ce:
ba:21:79:c5:f2:75:c4:a3:6e:92:85:e5:e8:6d:7b:cb:19:b5:
d7:d7:bb:7c:78:e2:e1:61:d4:75:a6:13:a6:2a:61:95:95:e0:
8d:f6:e9:bf:5f:01:2e:a5:e9:c9:7d:17:64:af:52:dc:d9:5e:
24:13:28:22:ea:e9:a8:8e:b6:ec:c4:5a:e8:56:95:be:03:12:
42:95:bc:db:58:2b:ae:33:a3:c1:e7:64:d0:c9:c8:ed:9c:13:
7e:79:ce:47:0f:3f:1d:eb:ab:bd:29:3d:06:e2:fb:ab:a2:28:
60:d7:70:5b:2d:d3:52:fd:25:d6:bb:e4:e1:68:16:1b:67:3a:
f8:37:92:45:3f:39:c3:25:93:dd:b8:bd:05:9b:39:d6:56:f0:
bd:c1:83:9f:41:44:bc:92:d1:bb:54:e1:90:d9:59:0a:8c:66:
bf:af:a6:26:2b:84:cf:32:de:ba:88:77:f2:aa:70:34:12:b4:
9f:f4:16:eb:30:dc:bb:1c:93:6f:e4:ed:51:91:43:82:a0:50:
ae:46:b5:94:b1:2e:45:0b:86:7e:29:83:92:80:40:f5:a4:9c:
67:63:73:c7:20:ec:94:75:64:be:76:a7:5f:f9:0f:24:93:17:
02:0e:39:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAkEiXHqk832+G/6XtHxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTAxMjAyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDA1N2FmYjU2ZDkyYTE2MGRhMjlhNDlhYWQyOWM0ZjliN2VjZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/3YClmWMcxkB4DCxQE9DPdpl9CB
5Z2g4ksMReGDwS2CcYUTkfj2u7vC0uIwaWQ9OQ9KTH4JBFElNcS8dZlGUvplEiA4
Vu/dkN+1frbIv0kauGNPTtyzGBwXKv/D1OcxbwG4/45WrMrjR/mA0GEeAaKDWgzj
I8lPQAXLozWFgkJyxsuW4MfyvKdYzoD3MHVNFaeygQJid7S4va8KRkl1bEufhmZB
dTsTLNH238pDBUnjAweP6TBVWoIBfb4GLAZr2AmMIeZ0TpEqL7MvhP6tN1jTT0up
Z9dN0pq9qN5g8eH13pLSZCPhquwgPLUgwPGZn25DixN0qWjwEAwy4PhRuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBQFevtW2SoWDaKaSarSnE+bfs1qMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvRkFWNi0xYlpLaFlOb3BwSnF0S2NUNXQteldvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVf6cMA0G
CSqGSIb3DQEBCwUAA4IBAQB4CkKlPzt0lPibFvGoaudgts66IXnF8nXEo26SheXo
bXvLGbXX17t8eOLhYdR1phOmKmGVleCN9um/XwEupenJfRdkr1Lc2V4kEygi6umo
jrbsxFroVpW+AxJClbzbWCuuM6PB52TQycjtnBN+ec5HDz8d66u9KT0G4vuroihg
13BbLdNS/SXWu+ThaBYbZzr4N5JFPznDJZPduL0FmznWVvC9wYOfQUS8ktG7VOGQ
2VkKjGa/r6YmK4TPMt66iHfyqnA0ErSf9BbrMNy7HJNv5O1RkUOCoFCuRrWUsS5F
C4Z+KYOSgED1pJxnY3PHIOyUdWS+dqdf+Q8kkxcCDjmq
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:40 2025 by rpki-client