Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Fr-RpAYd5RT8bINFk7ZHv-TVSIs.roa
File: Fr-RpAYd5RT8bINFk7ZHv-TVSIs.roa (raw, json)
Hash identifier: j98bol7HJP8jLNhMd8LjVQ5gJrONfsaCt/CYJJyx0TI=
Subject key identifier: 16:BF:91:A4:06:1D:E5:14:FC:6C:83:45:93:B6:47:BF:E4:D5:48:8B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 09E07BA0
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Fr-RpAYd5RT8bINFk7ZHv-TVSIs.roa
Signing time: Tue 22 Feb 2022 14:12:16 +0000
ROA not before: Tue 22 Feb 2022 14:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
185.117.1.0/24 maxlen: 24
185.117.2.0/24 maxlen: 24
45.91.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165706656 (0x9e07ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 22 14:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16bf91a4061de514fc6c834593b647bfe4d5488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4c:a5:42:e5:70:95:58:f0:27:d4:50:8d:62:
3c:a2:d6:e3:d4:cb:8f:b5:79:42:68:f1:31:fd:53:
17:7c:57:c3:3f:81:54:3f:88:f3:3d:8d:7d:cd:39:
66:87:c9:c3:41:9f:43:7e:56:78:e5:9a:80:87:0b:
04:9a:3d:00:0f:92:54:31:67:22:40:dd:3d:27:e1:
61:e3:a0:4b:dc:ac:b9:86:26:f5:39:41:f4:e5:0e:
de:41:e2:73:b0:19:00:6a:9a:96:c4:0e:82:aa:69:
6a:33:54:28:8b:54:fa:17:1f:ee:c3:f5:70:9f:f8:
cf:6f:7e:07:56:23:f9:a8:d7:5c:83:23:e9:72:fa:
80:0b:4c:68:58:39:50:5c:9f:50:57:60:d9:43:72:
82:ae:8b:98:27:57:1c:99:2a:a8:c1:c9:08:84:34:
48:5a:e9:27:ef:c9:83:c1:e4:e9:d6:7f:f5:9f:92:
a0:97:c1:af:cd:d0:c2:5a:00:84:c7:8c:22:95:b4:
2f:22:44:b2:90:dd:d1:21:4e:90:be:56:c5:e1:92:
6d:3e:05:f6:1a:24:be:e3:59:02:34:4a:b7:cc:b2:
e5:5b:df:d0:92:bb:71:a8:7f:dc:37:a2:50:9f:c9:
ba:b6:c2:bd:ea:7d:ec:66:15:e9:32:49:9c:1e:63:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BF:91:A4:06:1D:E5:14:FC:6C:83:45:93:B6:47:BF:E4:D5:48:8B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Fr-RpAYd5RT8bINFk7ZHv-TVSIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.124.0/22
45.91.250.0/24
185.117.1.0-185.117.2.255
Signature Algorithm: sha256WithRSAEncryption
21:31:1c:6e:e1:6d:ed:1b:15:d8:ff:da:96:d7:d9:44:0d:7c:
00:4f:4b:37:21:a0:44:11:89:d1:7e:41:39:51:9c:93:21:32:
6a:91:c4:e0:44:20:c7:e6:68:57:4a:71:99:a6:74:15:3b:f7:
00:0b:6a:f8:57:38:8b:16:df:fc:a3:aa:4a:06:82:d1:8a:5e:
d3:b6:ed:fb:89:15:87:63:34:84:a1:0e:a9:5d:7f:fb:af:42:
3f:e0:e2:e3:a3:b0:ef:91:00:07:8a:89:fe:c0:b8:dd:b0:47:
c6:8d:9c:d2:24:92:7a:9e:3c:08:13:5a:f7:5c:8a:29:20:3b:
b0:29:b5:ce:7e:8d:2d:c0:11:4d:ea:29:ae:3b:2a:47:91:87:
3c:ac:cc:dc:8e:ca:88:c7:77:2f:cd:d7:74:27:79:ea:4e:e8:
64:24:01:60:2b:f4:df:a6:29:24:fd:dc:29:ab:f0:6d:c6:08:
64:ac:c2:94:01:ed:e1:84:fd:c0:eb:97:f9:37:a8:77:ed:91:
15:96:0f:19:31:5d:5d:64:73:e7:a9:84:6b:64:d3:9b:24:55:
e2:2b:51:95:36:4c:11:d4:35:d3:c5:e1:82:29:e7:64:0f:73:
2f:1a:94:92:f6:d4:51:62:26:62:4e:53:dd:6c:6a:03:eb:84:
f4:f8:41:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIECeB7oDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDIy
MjE0MTIxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZiZjkxYTQwNjFk
ZTUxNGZjNmM4MzQ1OTNiNjQ3YmZlNGQ1NDg4YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK1MpULlcJVY8CfUUI1iPKLW49TLj7V5QmjxMf1TF3xXwz+B
VD+I8z2Nfc05ZofJw0GfQ35WeOWagIcLBJo9AA+SVDFnIkDdPSfhYeOgS9ysuYYm
9TlB9OUO3kHic7AZAGqalsQOgqppajNUKItU+hcf7sP1cJ/4z29+B1Yj+ajXXIMj
6XL6gAtMaFg5UFyfUFdg2UNygq6LmCdXHJkqqMHJCIQ0SFrpJ+/Jg8Hk6dZ/9Z+S
oJfBr83QwloAhMeMIpW0LyJEspDd0SFOkL5WxeGSbT4F9hokvuNZAjRKt8yy5Vvf
0JK7cah/3DeiUJ/JurbCvep97GYV6TJJnB5jlcUCAwEAAaOCAh0wggIZMB0GA1Ud
DgQWBBQWv5GkBh3lFPxsg0WTtke/5NVIizAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L0ZyLVJwQVlkNVJUOGJJTkZrN1pIdi1UVlNJcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAz
BggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAi1ZfAMEAC1b+jAMAwQAuXUBAwQA
uXUCMA0GCSqGSIb3DQEBCwUAA4IBAQAhMRxu4W3tGxXY/9qW19lEDXwAT0s3IaBE
EYnRfkE5UZyTITJqkcTgRCDH5mhXSnGZpnQVO/cAC2r4VziLFt/8o6pKBoLRil7T
tu37iRWHYzSEoQ6pXX/7r0I/4OLjo7DvkQAHion+wLjdsEfGjZzSJJJ6njwIE1r3
XIopIDuwKbXOfo0twBFN6imuOypHkYc8rMzcjsqIx3cvzdd0J3nqTuhkJAFgK/Tf
pikk/dwpq/BtxghkrMKUAe3hhP3A65f5N6h37ZEVlg8ZMV1dZHPnqYRrZNObJFXi
K1GVNkwR1DXTxeGCKedkD3MvGpSS9tRRYiZiTlPdbGoD64T0+EG/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org