Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/FmQLNhz3ra3Pz-9idabjOxmTYAM.roa
File: FmQLNhz3ra3Pz-9idabjOxmTYAM.roa (raw, json)
Hash identifier: P3jqsJyutHAHIFdvD88LQa93MEndR7LD7+RWAOh1cvo=
Subject key identifier: 16:64:0B:36:1C:F7:AD:AD:CF:CF:EF:62:75:A6:E3:3B:19:93:60:03
Certificate issuer: /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial: 0185727119BDCD2CB5557CD6A6A3627C31F7
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/FmQLNhz3ra3Pz-9idabjOxmTYAM.roa
Signing time: Mon 02 Jan 2023 12:24:52 +0000
ROA not before: Mon 02 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62319
IP address blocks: 193.104.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:19:bd:cd:2c:b5:55:7c:d6:a6:a3:62:7c:31:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Validity
Not Before: Jan 2 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16640b361cf7adadcfcfef6275a6e33b19936003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:13:1d:80:8f:3f:dc:c6:0a:f0:cf:9c:42:92:
cc:ad:b3:bc:1c:53:3e:c5:b8:b8:06:ef:a9:e3:36:
a9:88:1e:c8:21:9c:67:9c:0f:7c:2f:63:ec:e8:d4:
4a:d3:09:b9:c5:3f:c7:fa:4b:6d:e2:86:5b:6c:cf:
ea:b5:c2:f5:4f:76:53:9d:ca:69:d0:2d:05:b3:7b:
60:0a:15:62:49:9f:5d:1f:0b:49:82:44:75:04:8c:
6f:c9:03:f8:a5:bf:44:c1:ce:3e:56:7f:66:f2:ec:
8e:c4:6a:d5:b8:d2:d7:66:99:91:fa:e4:8d:63:20:
92:b0:7b:a2:09:49:6e:ff:85:a4:05:f9:b6:a8:eb:
6d:34:a4:56:34:80:80:6c:73:ba:f3:8c:c2:b4:96:
14:28:13:5a:2f:6c:6d:ae:ce:9d:77:86:c7:11:35:
26:47:b6:85:cd:db:8f:c8:4f:35:f7:5e:b2:34:4e:
ad:5d:f3:ef:c4:25:6c:bd:48:0d:6c:bb:dd:5b:dc:
f3:f7:7c:6d:fd:65:6b:24:57:83:59:ab:5c:f9:9b:
71:fb:d1:9f:57:62:0c:c9:90:39:4c:00:71:b1:bb:
a9:a1:5c:df:79:70:98:b1:3e:a0:db:41:8d:8c:c8:
17:1d:b5:69:e6:b1:6f:41:b2:fd:49:40:6d:af:5b:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:64:0B:36:1C:F7:AD:AD:CF:CF:EF:62:75:A6:E3:3B:19:93:60:03
X509v3 Authority Key Identifier:
keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/FmQLNhz3ra3Pz-9idabjOxmTYAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8a:ab:ae:63:97:fe:ac:5d:8d:08:fd:ac:2e:df:59:95:8e:
49:7a:51:6d:49:fe:d7:03:49:3d:be:8e:58:28:e3:52:cd:32:
f3:52:92:78:cf:3e:a7:40:5a:c4:3a:36:df:ce:1c:4c:51:90:
a3:43:c0:fb:78:b9:75:65:fb:0f:06:1d:9b:ce:b1:72:22:10:
35:c2:7a:e3:c4:e7:3d:74:56:f9:e3:8a:21:9f:8e:d2:b9:17:
a2:eb:09:44:73:16:2d:29:61:e5:ef:4e:02:d9:e7:9b:33:5f:
b9:1c:e8:06:13:63:92:b1:ca:43:1f:44:02:1f:1f:bd:c8:fa:
2a:21:92:86:ff:d5:b9:95:e6:c3:6f:c3:f7:76:c1:82:9a:c8:
e0:eb:d1:fb:c6:44:22:ef:01:1c:ce:9c:ab:02:9e:3e:e7:01:
e6:15:29:f7:68:e1:d3:74:2a:fb:b4:72:24:dd:20:03:1c:0f:
5b:62:36:57:a3:c5:0c:c0:8c:3b:5a:e7:02:70:e6:2b:dc:db:
4e:e1:fc:da:21:0a:90:89:44:52:ea:fa:b0:08:a6:e1:fd:f4:
55:43:f6:02:cb:2f:01:0b:a8:1c:09:0f:e8:0a:d3:42:9f:81:
28:83:03:e9:5d:4e:92:20:fe:84:cc:96:cf:fe:ea:46:18:a1:
eb:d5:13:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycRm9zSy1VXzWpqNifDH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNTNhNmI3MTkxOTdhNmU3NTE3NTc0ZDM5ODdmMzFlYjll
OWQ0YzkwHhcNMjMwMTAyMTIyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjY0MGIzNjFjZjdhZGFkY2ZjZmVmNjI3NWE2ZTMzYjE5OTM2MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRMdgI8/3MYK8M+cQpLMrbO8HFM+
xbi4Bu+p4zapiB7IIZxnnA98L2Ps6NRK0wm5xT/H+ktt4oZbbM/qtcL1T3ZTncpp
0C0Fs3tgChViSZ9dHwtJgkR1BIxvyQP4pb9Ewc4+Vn9m8uyOxGrVuNLXZpmR+uSN
YyCSsHuiCUlu/4WkBfm2qOttNKRWNICAbHO684zCtJYUKBNaL2xtrs6dd4bHETUm
R7aFzduPyE81916yNE6tXfPvxCVsvUgNbLvdW9zz93xt/WVrJFeDWatc+Ztx+9Gf
V2IMyZA5TABxsbupoVzfeXCYsT6g20GNjMgXHbVp5rFvQbL9SUBtr1tixwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZkCzYc962tz8/vYnWm4zsZk2ADMB8GA1UdIwQY
MBaAFN9TprcZGXpudRdXTTmH8x656dTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2Ut
ODUyMTJiOWQxNTliLzEvRm1RTE5oejNyYTNQei05aWRhYmpPeG1UWUFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZjM4YTYtYTk3ZS00ODYxLWFiM2UtODUyMTJiOWQxNTli
LzEvMzFPbXR4a1plbTUxRjFkTk9ZZnpIcm5wMU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWirMA0G
CSqGSIb3DQEBCwUAA4IBAQANiquuY5f+rF2NCP2sLt9ZlY5JelFtSf7XA0k9vo5Y
KONSzTLzUpJ4zz6nQFrEOjbfzhxMUZCjQ8D7eLl1ZfsPBh2bzrFyIhA1wnrjxOc9
dFb544ohn47SuRei6wlEcxYtKWHl704C2eebM1+5HOgGE2OSscpDH0QCHx+9yPoq
IZKG/9W5lebDb8P3dsGCmsjg69H7xkQi7wEczpyrAp4+5wHmFSn3aOHTdCr7tHIk
3SADHA9bYjZXo8UMwIw7WucCcOYr3NtO4fzaIQqQiURS6vqwCKbh/fRVQ/YCyy8B
C6gcCQ/oCtNCn4EogwPpXU6SIP6EzJbP/upGGKHr1RMj
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:31 2025 by rpki-client