Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/_eTfAZO0tmN6o3sQUySudibI9sg.roa
File: _eTfAZO0tmN6o3sQUySudibI9sg.roa (raw, json)
Hash identifier: ZYFXxDa2YgOyWFnjNj+n2KDHrACIt9POKIQvCxBT8/A=
Subject key identifier: FD:E4:DF:01:93:B4:B6:63:7A:A3:7B:10:53:24:AE:76:26:C8:F6:C8
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 06E98D36
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/_eTfAZO0tmN6o3sQUySudibI9sg.roa
Signing time: Sat 01 Jan 2022 10:56:26 +0000
ROA not before: Sat 01 Jan 2022 10:56:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201928
IP address blocks: 185.115.41.0/24 maxlen: 24
185.59.44.0/24 maxlen: 24
185.115.40.0/24 maxlen: 24
185.115.43.0/24 maxlen: 24
185.115.42.0/24 maxlen: 24
185.59.47.0/24 maxlen: 24
185.59.46.0/24 maxlen: 24
185.59.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115969334 (0x6e98d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Jan 1 10:56:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fde4df0193b4b6637aa37b105324ae7626c8f6c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:58:9d:76:89:4d:fa:cd:7d:f2:20:a9:4a:
72:f0:ca:b1:ed:6b:5d:d0:23:6e:58:20:76:82:7c:
7a:c1:93:20:6d:12:67:ab:07:53:b2:87:96:48:ec:
1d:b7:93:a6:53:5c:c4:cd:52:ec:6b:29:54:f9:95:
6a:dc:5a:b1:be:85:0e:00:64:38:4a:58:70:02:a8:
45:e3:b6:dd:cb:f1:f6:fb:b4:d9:54:bc:df:24:74:
92:b8:22:8e:27:f8:3a:9c:cc:14:58:4e:71:8b:98:
dc:46:06:55:96:2e:9c:38:29:c8:47:ea:d8:8b:36:
2f:ba:66:98:f1:65:32:a1:48:ef:fb:0e:68:ad:80:
a5:a6:21:0e:1d:14:86:50:9f:10:44:13:ca:b7:1c:
5d:d3:3d:75:de:ab:6f:ac:8c:48:f0:9a:90:0c:bb:
07:14:80:42:b4:b8:d8:21:6f:18:60:99:3f:ef:91:
da:21:10:65:9b:4e:5d:67:40:aa:48:8c:02:97:21:
06:bc:37:e2:04:dc:14:de:74:e4:68:e5:ce:ce:4a:
63:74:4b:63:49:06:6b:b6:0e:db:a3:41:4f:59:fb:
24:8e:a1:f7:73:96:c2:88:6c:59:c0:4d:05:64:17:
4a:8a:ab:ab:7f:fa:b3:cf:c7:6c:66:f5:52:20:be:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E4:DF:01:93:B4:B6:63:7A:A3:7B:10:53:24:AE:76:26:C8:F6:C8
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/_eTfAZO0tmN6o3sQUySudibI9sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.44.0/22
185.115.40.0/22
Signature Algorithm: sha256WithRSAEncryption
51:10:f5:c1:53:3b:95:74:ae:69:bf:de:d7:92:3b:b3:f0:07:
c9:23:50:fc:08:ea:09:0e:63:a0:a8:6d:3d:b0:08:27:e7:cd:
83:8c:65:d5:ad:e5:e9:15:35:74:4e:29:3c:a1:07:c4:ec:43:
9c:a1:9d:f9:db:5e:e8:95:f0:df:42:05:e1:17:31:6c:71:4d:
09:f5:87:c7:1c:4e:ae:f6:55:8d:c2:f4:74:cc:30:38:54:07:
da:03:c0:e3:a7:b1:37:82:00:a3:34:1f:52:eb:cc:a9:19:5b:
e5:0f:c5:23:9d:32:49:5a:55:4d:13:9e:5e:cf:f9:27:30:4f:
dd:e2:af:29:84:9f:a1:cf:a5:a5:14:16:f6:31:70:52:ad:89:
18:d9:6c:7f:fc:45:b1:7c:d3:fb:c9:04:9c:c3:50:bd:8d:92:
47:d1:6e:33:6d:a2:35:a4:5e:2d:52:08:09:cc:63:da:3a:fa:
01:e5:33:c0:07:c5:e9:76:ec:9d:fd:fb:8f:c9:b0:19:4c:da:
56:e3:55:85:5a:40:78:62:59:29:cd:30:2d:e6:5e:60:d5:c6:
66:8b:3b:3b:93:04:a1:8b:4f:1b:05:e8:1a:90:82:fc:92:43:
32:58:7c:fc:55:2d:03:f6:65:5a:ba:58:9d:5c:73:b3:3c:bd:
81:b8:e5:a2
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIEBumNNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmIyNjk1MmIxMjEzZjljYmQxZDhjOTY3MWZiMjIzNTdhZDhkMzIyMB4XDTIyMDEw
MTEwNTYyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmRlNGRmMDE5M2I0
YjY2MzdhYTM3YjEwNTMyNGFlNzYyNmM4ZjZjODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJo6WJ12iU36zX3yIKlKcvDKse1rXdAjblggdoJ8esGTIG0S
Z6sHU7KHlkjsHbeTplNcxM1S7GspVPmVatxasb6FDgBkOEpYcAKoReO23cvx9vu0
2VS83yR0krgijif4OpzMFFhOcYuY3EYGVZYunDgpyEfq2Is2L7pmmPFlMqFI7/sO
aK2ApaYhDh0UhlCfEEQTyrccXdM9dd6rb6yMSPCakAy7BxSAQrS42CFvGGCZP++R
2iEQZZtOXWdAqkiMApchBrw34gTcFN505Gjlzs5KY3RLY0kGa7YO26NBT1n7JI6h
93OWwohsWcBNBWQXSoqrq3/6s8/HbGb1UiC+IJkCAwEAAaOCAhEwggINMB0GA1Ud
DgQWBBT95N8Bk7S2Y3qjexBTJK52Jsj2yDAfBgNVHSMEGDAWgBT7smlSsSE/nL0d
jJZx+yI1etjTIjAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdhMTkv
MS9fZVRmQVpPMHRtTjZvM3NRVXlTdWRpYkk5c2cucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U1
LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdhMTkvMS8xLTdKcFVyRWhQ
NXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuTssAwQCuXMoMA0GCSqGSIb3
DQEBCwUAA4IBAQBREPXBUzuVdK5pv97Xkjuz8AfJI1D8COoJDmOgqG09sAgn582D
jGXVreXpFTV0Tik8oQfE7EOcoZ35217olfDfQgXhFzFscU0J9YfHHE6u9lWNwvR0
zDA4VAfaA8Djp7E3ggCjNB9S68ypGVvlD8UjnTJJWlVNE55ez/knME/d4q8phJ+h
z6WlFBb2MXBSrYkY2Wx//EWxfNP7yQScw1C9jZJH0W4zbaI1pF4tUggJzGPaOvoB
5TPAB8Xpduyd/fuPybAZTNpW41WFWkB4YlkpzTAt5l5g1cZmizs7kwShi08bBega
kIL8kkMyWHz8VS0D9mVaulidXHOzPL2BuOWi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:32 2024 by rpki-client on console-fra.rpki-client.org