Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/FlsStOebSFT17e0enJ1VeKbVuBs.roa
File: FlsStOebSFT17e0enJ1VeKbVuBs.roa (raw, json)
Hash identifier: XlgMtUITjtyDJVh3iQiySL3FMlZlztQBG+I6y3wbSZM=
Subject key identifier: 16:5B:12:B4:E7:9B:48:54:F5:ED:ED:1E:9C:9D:55:78:A6:D5:B8:1B
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 458BCA7D
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/FlsStOebSFT17e0enJ1VeKbVuBs.roa
Signing time: Fri 25 Mar 2022 08:03:55 +0000
ROA not before: Fri 25 Mar 2022 08:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4755
IP address blocks: 194.2.86.0/24 maxlen: 24
194.250.98.0/24 maxlen: 24
90.115.209.0/24 maxlen: 24
90.115.208.0/24 maxlen: 24
194.3.4.0/24 maxlen: 24
81.255.178.0/24 maxlen: 24
194.2.56.0/24 maxlen: 24
194.2.57.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1166789245 (0x458bca7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Mar 25 08:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=165b12b4e79b4854f5eded1e9c9d5578a6d5b81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:a0:3d:ca:64:bb:ce:90:d1:84:5d:1d:3c:
26:d2:91:ab:0e:75:cf:7c:00:ce:54:68:2f:94:46:
0f:15:d0:66:02:cb:13:91:b5:04:eb:44:41:b1:39:
e3:b5:2b:6c:9c:49:53:7c:b0:35:59:94:43:3f:92:
ad:80:16:ff:63:32:27:4b:11:04:54:02:4e:3c:87:
db:b2:bc:64:b9:cb:0c:b6:fd:b2:40:c7:80:2e:63:
83:78:39:f9:62:68:0a:48:e7:78:53:5f:bf:fd:8f:
a4:14:eb:ea:a6:69:77:05:d5:83:56:c2:a3:e2:98:
ba:04:6e:8c:04:28:ce:c1:95:dd:ec:20:9e:0f:63:
bc:a3:95:49:fc:b7:dc:20:46:81:b3:a8:9f:06:96:
d9:85:7a:37:ad:02:10:95:cf:22:fa:57:15:ef:6e:
22:cf:6f:40:76:7a:33:ef:5e:ed:04:0c:54:2d:1b:
61:49:9b:7e:06:5f:35:06:e8:bb:78:ab:5f:32:ae:
1c:1e:dc:f1:c7:69:f1:bc:20:03:d7:53:15:c2:c8:
d7:77:1c:0c:a9:40:9c:22:d6:fe:31:84:ab:17:b8:
8e:31:6b:d4:d4:9a:17:09:be:22:33:91:24:cf:91:
8c:1a:c5:08:ff:9b:8a:5d:32:db:3c:22:0e:7e:5f:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5B:12:B4:E7:9B:48:54:F5:ED:ED:1E:9C:9D:55:78:A6:D5:B8:1B
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/FlsStOebSFT17e0enJ1VeKbVuBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.178.0/24
90.115.208.0/23
194.2.56.0/23
194.2.86.0/24
194.3.4.0/24
194.250.98.0/24
Signature Algorithm: sha256WithRSAEncryption
85:60:16:0e:0a:57:19:ae:f0:7d:a3:f1:d3:17:c8:09:88:39:
3a:54:bd:5e:c6:52:1d:26:c4:ce:0d:9c:75:b4:ac:75:35:f5:
1e:4d:f7:9b:aa:37:83:1d:e3:ea:66:06:57:d5:8b:a4:87:1a:
6c:81:03:46:60:a0:2a:c8:17:99:e7:2d:d3:58:0b:fe:08:35:
10:f9:fb:6b:cd:46:51:45:b2:02:06:08:56:4f:14:87:a3:4a:
e8:99:1d:82:b7:95:7e:76:fa:3f:9e:f1:3d:6c:3e:99:bd:34:
a7:9a:2c:82:c4:e4:e4:b8:6c:c5:18:5c:c1:f0:e9:62:ec:e4:
00:d2:94:e3:33:35:b0:da:1c:7c:2a:26:74:e4:08:2c:b2:4d:
e3:21:d2:6a:32:6f:9c:cc:42:77:74:58:86:01:d2:f2:ce:a6:
62:df:a1:c8:d2:08:1e:50:7f:b1:92:ef:10:8b:f6:7a:90:09:
51:30:a0:ed:1b:d9:81:23:0b:20:00:8e:35:b2:a7:36:60:3d:
0f:e9:27:f6:d0:9d:9f:9b:12:73:34:e2:e6:41:76:45:f1:d6:
3b:01:27:12:30:83:8b:22:67:8d:44:f5:5a:69:eb:01:2a:c7:
34:55:1c:5a:a1:a4:e9:ed:6f:b5:11:68:fb:ad:be:dd:0a:e6:
43:d8:7f:bd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIERYvKfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YWYwOWJhMzNiNWFlNTgxYjBkMjkzMjMyNDkzMTRmNzZhYTEwNTExMB4XDTIyMDMy
NTA4MDM1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTY1YjEyYjRlNzli
NDg1NGY1ZWRlZDFlOWM5ZDU1NzhhNmQ1YjgxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYRoD3KZLvOkNGEXR08JtKRqw51z3wAzlRoL5RGDxXQZgLL
E5G1BOtEQbE547UrbJxJU3ywNVmUQz+SrYAW/2MyJ0sRBFQCTjyH27K8ZLnLDLb9
skDHgC5jg3g5+WJoCkjneFNfv/2PpBTr6qZpdwXVg1bCo+KYugRujAQozsGV3ewg
ng9jvKOVSfy33CBGgbOonwaW2YV6N60CEJXPIvpXFe9uIs9vQHZ6M+9e7QQMVC0b
YUmbfgZfNQbou3irXzKuHB7c8cdp8bwgA9dTFcLI13ccDKlAnCLW/jGEqxe4jjFr
1NSaFwm+IjORJM+RjBrFCP+bil0y2zwiDn5fXwUCAwEAAaOCAicwggIjMB0GA1Ud
DgQWBBQWWxK055tIVPXt7R6cnVV4ptW4GzAfBgNVHSMEGDAWgBQ68JujO1rlgbDS
kyMkkxT3aqEFETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L092Q2JvenRhNVlHdzBwTWpKSk1VOTJxaEJSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvMzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8x
L0Zsc1N0T2ViU0ZUMTdlMGVuSjFWZUtiVnVCcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
MzNkNWQxLWM0NTAtNDEzYi1hZmU0LTQ1OTM1ZjUwNmExMi8xL092Q2JvenRhNVlH
dzBwTWpKSk1VOTJxaEJSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9
BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFH/sgMEAVpz0AMEAcICOAMEAMIC
VgMEAMIDBAMEAML6YjANBgkqhkiG9w0BAQsFAAOCAQEAhWAWDgpXGa7wfaPx0xfI
CYg5OlS9XsZSHSbEzg2cdbSsdTX1Hk33m6o3gx3j6mYGV9WLpIcabIEDRmCgKsgX
mect01gL/gg1EPn7a81GUUWyAgYIVk8Uh6NK6JkdgreVfnb6P57xPWw+mb00p5os
gsTk5LhsxRhcwfDpYuzkANKU4zM1sNocfComdOQILLJN4yHSajJvnMxCd3RYhgHS
8s6mYt+hyNIIHlB/sZLvEIv2epAJUTCg7RvZgSMLIACONbKnNmA9D+kn9tCdn5sS
czTi5kF2RfHWOwEnEjCDiyJnjUT1WmnrASrHNFUcWqGk6e1vtRFo+62+3QrmQ9h/
vQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org