Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/FMS4a9XZYRHoUXslXj7SP4MEtpQ.roa
File: FMS4a9XZYRHoUXslXj7SP4MEtpQ.roa (raw, json)
Hash identifier: BEMgsZDVI+MX8uS3L/oqt7iw3Do0GA/2ZF5aMx5H+5w=
Subject key identifier: 14:C4:B8:6B:D5:D9:61:11:E8:51:7B:25:5E:3E:D2:3F:83:04:B6:94
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 0F21F76E
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/FMS4a9XZYRHoUXslXj7SP4MEtpQ.roa
Signing time: Thu 24 Feb 2022 19:33:40 +0000
ROA not before: Thu 24 Feb 2022 19:33:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198116
IP address blocks: 87.110.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253884270 (0xf21f76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Feb 24 19:33:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14c4b86bd5d96111e8517b255e3ed23f8304b694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:cd:d4:fd:0d:4b:80:3f:f9:e2:1c:80:69:
1c:5e:39:b1:28:12:4e:c7:ea:4e:1a:5d:eb:6b:6e:
04:47:b7:91:3b:59:33:a0:b6:db:e2:93:3d:d4:4e:
d0:c5:6e:54:35:5b:42:98:68:f3:19:68:c3:f0:3d:
79:81:c9:78:d7:dc:56:aa:c1:c4:4a:9f:cd:bf:25:
95:87:fa:96:7a:95:71:11:dd:f4:32:f0:3c:46:de:
2a:eb:be:7f:14:8f:20:52:5f:01:79:1e:d6:ef:8a:
59:8c:d1:1d:1b:2a:fc:60:f3:d2:75:df:1e:29:2a:
34:03:c7:ac:3a:74:09:8c:c3:66:b7:59:22:bc:fe:
8c:aa:4d:6b:76:72:f7:80:1d:47:ef:96:7a:66:e3:
f7:14:d4:67:e2:e5:90:45:29:f8:d3:fd:a5:6f:af:
9c:11:bd:fc:87:c1:12:ce:43:9f:26:db:32:62:cf:
a2:65:9a:06:9b:58:b6:24:f4:a9:04:dc:ec:fd:59:
30:1d:88:9f:e3:25:13:7c:ef:ec:52:70:cd:d9:7a:
61:8c:6b:2e:bb:6a:fa:5f:a3:0e:8a:64:13:d4:c7:
06:55:89:9e:e2:aa:10:d3:0c:f5:b1:dd:52:f5:47:
3f:87:56:7c:b8:58:64:03:3a:28:84:bb:d6:d2:00:
8b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:B8:6B:D5:D9:61:11:E8:51:7B:25:5E:3E:D2:3F:83:04:B6:94
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/FMS4a9XZYRHoUXslXj7SP4MEtpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.110.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:00:c4:5c:74:d7:14:50:86:c4:da:00:18:84:ae:7f:74:ee:
32:4c:e6:68:54:94:57:4b:d8:61:f3:de:de:78:47:00:bf:9b:
37:2e:d0:3c:ec:c1:43:19:ed:0b:3d:8a:1b:c8:98:74:3b:35:
02:2b:bc:a6:35:fa:46:76:39:1d:26:a1:ff:fa:ea:60:a8:ae:
13:9b:94:59:1c:52:95:d3:17:73:a3:48:71:98:d1:4f:d9:d1:
a5:d4:96:65:d6:65:82:ea:3b:3d:ac:9c:1d:f1:31:7d:19:9f:
ad:e1:31:d6:23:63:24:2b:56:cb:e2:4d:63:0a:fc:69:b2:b0:
ea:4a:34:e1:38:75:92:28:32:0f:52:14:86:ae:f7:b2:21:43:
0d:99:69:e6:a5:24:5d:f5:09:07:5e:24:8f:f9:7d:81:9b:42:
31:ee:a6:ab:39:6d:e2:43:1c:5f:46:91:8c:62:a4:2e:96:2d:
2a:ed:59:52:e6:0b:b4:c6:d9:91:7c:10:64:6c:1b:b2:96:6a:
f7:6f:af:0e:2f:4d:72:a8:55:5c:c7:db:aa:3e:f9:8a:ca:91:
5a:38:79:d5:f7:3d:ae:4c:66:11:f3:22:14:c8:0c:95:90:b1:
08:4e:e5:f3:d8:61:a6:c2:a6:1a:c1:22:4b:2a:4f:40:b8:5e:
e6:5d:50:ed
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDyH3bjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
M2JlMDdjYjFmZDRmMWUzYzkyMjMwM2I2NzBhODgxYjgyZTYxNDkxMB4XDTIyMDIy
NDE5MzM0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTRjNGI4NmJkNWQ5
NjExMWU4NTE3YjI1NWUzZWQyM2Y4MzA0YjY5NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK3+zdT9DUuAP/niHIBpHF45sSgSTsfqThpd62tuBEe3kTtZ
M6C22+KTPdRO0MVuVDVbQpho8xlow/A9eYHJeNfcVqrBxEqfzb8llYf6lnqVcRHd
9DLwPEbeKuu+fxSPIFJfAXke1u+KWYzRHRsq/GDz0nXfHikqNAPHrDp0CYzDZrdZ
Irz+jKpNa3Zy94AdR++Wembj9xTUZ+LlkEUp+NP9pW+vnBG9/IfBEs5DnybbMmLP
omWaBptYtiT0qQTc7P1ZMB2In+MlE3zv7FJwzdl6YYxrLrtq+l+jDopkE9THBlWJ
nuKqENMM9bHdUvVHP4dWfLhYZAM6KIS71tIAizkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUxLhr1dlhEehReyVePtI/gwS2lDAfBgNVHSMEGDAWgBTjvgfLH9Tx48ki
MDtnCogbguYUkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzQ3NEh5eF9VOGVQSklqQTdad3FJRzRMbUZKRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmEvOGY1ZmFlLWRhOTAtNDMxNC1iZmZjLWQ0ZWUxZDM4OWUwZC8x
L0ZNUzRhOVhaWVJIb1VYc2xYajdTUDRNRXRwUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEv
OGY1ZmFlLWRhOTAtNDMxNC1iZmZjLWQ0ZWUxZDM4OWUwZC8xLzQ3NEh5eF9VOGVQ
SklqQTdad3FJRzRMbUZKRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFduzDANBgkqhkiG9w0BAQsFAAOC
AQEASgDEXHTXFFCGxNoAGISuf3TuMkzmaFSUV0vYYfPe3nhHAL+bNy7QPOzBQxnt
Cz2KG8iYdDs1Aiu8pjX6RnY5HSah//rqYKiuE5uUWRxSldMXc6NIcZjRT9nRpdSW
ZdZlguo7PaycHfExfRmfreEx1iNjJCtWy+JNYwr8abKw6ko04Th1kigyD1IUhq73
siFDDZlp5qUkXfUJB14kj/l9gZtCMe6mqzlt4kMcX0aRjGKkLpYtKu1ZUuYLtMbZ
kXwQZGwbspZq92+vDi9NcqhVXMfbqj75isqRWjh51fc9rkxmEfMiFMgMlZCxCE7l
89hhpsKmGsEiSypPQLhe5l1Q7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org