Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/UU5pDJ63td1hizfMjv_QEWc8sC8.roa
File: UU5pDJ63td1hizfMjv_QEWc8sC8.roa (raw, json)
Hash identifier: 921Ng5FlHjvRPkgKcf2ZWt7b9OVhdGvaYtfgCB6/vUc=
Subject key identifier: 51:4E:69:0C:9E:B7:B5:DD:61:8B:37:CC:8E:FF:D0:11:67:3C:B0:2F
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 06ED7432
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/UU5pDJ63td1hizfMjv_QEWc8sC8.roa
Signing time: Fri 27 May 2022 11:42:14 +0000
ROA not before: Fri 27 May 2022 11:42:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213396
IP address blocks: 194.50.176.0/24 maxlen: 24
2a0a:4540:3000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116225074 (0x6ed7432)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: May 27 11:42:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=514e690c9eb7b5dd618b37cc8effd011673cb02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:2f:08:b9:2e:56:e7:47:93:12:07:74:1d:
db:a7:dd:e3:b0:e5:29:17:5c:db:ec:9e:8d:62:02:
f4:f6:bd:2b:38:44:04:66:c2:5f:ff:29:ac:04:79:
59:8a:5b:66:9a:62:79:d6:7a:df:97:98:a4:56:a9:
a8:9a:e3:ef:07:ea:78:be:0a:de:56:4d:74:bd:0b:
2c:87:43:9b:73:e1:d7:5f:6b:8e:32:48:bb:ae:ed:
7a:3b:85:c0:e6:89:c3:23:85:0b:a7:34:7b:98:bd:
89:58:df:0f:56:a6:d0:69:3e:f7:ac:58:bc:93:9e:
2b:dd:73:e3:8c:e2:77:16:c4:ec:bf:95:7d:d0:5b:
db:72:06:63:d6:0c:6a:33:11:3d:26:a9:e4:98:11:
ac:ac:38:9e:b3:b7:37:fa:52:16:9f:3b:46:86:3c:
c8:3a:be:30:6b:cf:a1:a5:d9:6d:d5:fb:23:15:7f:
63:79:f7:08:e7:29:03:d7:c2:08:4a:22:d6:b0:2d:
f9:1b:3e:24:4d:3a:b0:c1:eb:8d:c1:e8:85:21:bf:
62:54:96:82:48:90:bb:10:3d:8f:10:7e:6e:b9:00:
ca:c3:2f:d8:bc:3d:4a:61:38:0c:08:53:b1:fa:80:
a5:98:0d:79:8f:c0:3a:cc:be:8f:6f:81:30:c6:44:
8f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4E:69:0C:9E:B7:B5:DD:61:8B:37:CC:8E:FF:D0:11:67:3C:B0:2F
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/UU5pDJ63td1hizfMjv_QEWc8sC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.176.0/24
IPv6:
2a0a:4540:3000::/48
Signature Algorithm: sha256WithRSAEncryption
08:c3:eb:d7:25:dd:bd:6f:d5:d9:e0:9d:7c:3d:f0:34:05:52:
75:68:99:17:b0:0d:dd:15:19:fb:13:99:7c:b0:c7:a1:1e:e9:
85:96:a2:c9:d4:e2:42:41:df:f9:28:4f:b4:84:4c:73:7e:8c:
b5:9b:14:94:cf:e9:d4:9b:bb:dd:e3:a5:8f:dd:34:c4:3c:a5:
85:19:e8:9b:d8:1e:30:bc:ab:95:a2:54:44:d4:83:87:38:82:
24:aa:7f:ae:75:7a:94:78:16:09:a5:68:04:20:e7:50:c6:3d:
3f:e4:53:5e:9b:c3:b2:42:a1:4f:fa:97:44:26:d6:21:09:ad:
02:7a:92:ee:a6:52:e3:79:fb:6b:ac:8f:cb:2b:ef:e0:a4:ae:
68:43:a2:1b:96:39:8f:aa:e4:24:40:53:7c:08:33:78:fa:3a:
3d:dc:95:b3:53:44:3b:4a:13:72:41:d4:69:da:df:56:c0:05:
2a:e1:38:2f:68:96:a8:4d:50:79:a8:d6:4d:05:5c:89:a3:4e:
2a:70:1b:ec:ca:92:c9:29:50:9d:75:4d:8e:94:29:0e:dc:e6:
b7:e0:8a:44:71:26:e4:cb:42:ae:de:4d:ec:67:01:70:14:4e:
b6:dd:43:54:7a:59:5b:be:a1:87:50:74:12:71:11:7d:dc:7c:
a4:a7:43:0c
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIEBu10MjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmFjNTBmMTlkOTkzMGFlZWMwOWNkMjdmNTA4ZmM1MDJlYTE0ZDFmMB4XDTIyMDUy
NzExNDIxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTE0ZTY5MGM5ZWI3
YjVkZDYxOGIzN2NjOGVmZmQwMTE2NzNjYjAyZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrlLwi5LlbnR5MSB3Qd26fd47DlKRdc2+yejWIC9Pa9KzhE
BGbCX/8prAR5WYpbZppiedZ635eYpFapqJrj7wfqeL4K3lZNdL0LLIdDm3Ph119r
jjJIu67tejuFwOaJwyOFC6c0e5i9iVjfD1am0Gk+96xYvJOeK91z44zidxbE7L+V
fdBb23IGY9YMajMRPSap5JgRrKw4nrO3N/pSFp87RoY8yDq+MGvPoaXZbdX7IxV/
Y3n3COcpA9fCCEoi1rAt+Rs+JE06sMHrjcHohSG/YlSWgkiQuxA9jxB+brkAysMv
2Lw9SmE4DAhTsfqApZgNeY/AOsy+j2+BMMZEj5kCAwEAAaOCAhwwggIYMB0GA1Ud
DgQWBBRRTmkMnre13WGLN8yO/9ARZzywLzAfBgNVHSMEGDAWgBT7rFDxnZkwruwJ
zSf1CPxQLqFNHzAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjguY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzRlLzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYzN2Yv
MS9VVTVwREo2M3RkMWhpemZNanZfUUVXYzhzQzgucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRl
LzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYzN2YvMS8xLTZ4UThaMlpN
SzdzQ2MwbjlRajhVQzZoVFI4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjKwMA8EAgACMAkDBwAqCkVA
MAAwDQYJKoZIhvcNAQELBQADggEBAAjD69cl3b1v1dngnXw98DQFUnVomRewDd0V
GfsTmXywx6Ee6YWWosnU4kJB3/koT7SETHN+jLWbFJTP6dSbu93jpY/dNMQ8pYUZ
6JvYHjC8q5WiVETUg4c4giSqf651epR4FgmlaAQg51DGPT/kU16bw7JCoU/6l0Qm
1iEJrQJ6ku6mUuN5+2usj8sr7+CkrmhDohuWOY+q5CRAU3wIM3j6Oj3clbNTRDtK
E3JB1Gna31bABSrhOC9olqhNUHmo1k0FXImjTipwG+zKkskpUJ11TY6UKQ7c5rfg
ikRxJuTLQq7eTexnAXAUTrbdQ1R6WVu+oYdQdBJxEX3cfKSnQww=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org