Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FD0HdDMgsse051qrdpqm4KCT958.roa
File: FD0HdDMgsse051qrdpqm4KCT958.roa (raw, json)
Hash identifier: tiNpA93wo0hL3veOEclIaL8iv16SAD/MCaq0r+crDQU=
Subject key identifier: 14:3D:07:74:33:20:B2:C7:B4:E7:5A:AB:76:9A:A6:E0:A0:93:F7:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0E1E7D0E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FD0HdDMgsse051qrdpqm4KCT958.roa
Signing time: Sat 01 Jan 2022 01:58:18 +0000
ROA not before: Sat 01 Jan 2022 01:58:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205026
IP address blocks: 194.87.128.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 236879118 (0xe1e7d0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 01:58:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=143d07743320b2c7b4e75aab769aa6e0a093f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1d:3c:fd:9a:ad:bd:f6:ef:52:be:c0:d2:b1:
58:a1:ce:06:53:44:66:4a:d8:06:1a:e3:9d:1c:e9:
ae:09:c8:79:3d:75:b5:8c:1d:0a:ed:b5:12:f1:29:
48:67:a3:50:6a:33:93:53:00:86:ff:2f:e3:6b:24:
9e:ba:97:39:07:bd:16:fe:01:84:ae:5f:23:10:a4:
06:b6:02:3e:5e:49:2a:9e:6e:07:29:30:e3:5e:f2:
3c:24:00:f9:96:a2:43:d8:b5:14:3b:35:c1:ea:f5:
ef:27:5a:b1:f6:a3:e9:bf:5e:82:d2:c9:ea:1a:04:
77:f3:8c:0c:29:b2:c6:ce:e2:4c:eb:2d:76:86:fd:
62:96:c2:a8:b4:1d:91:4e:60:85:6c:37:f2:59:cb:
af:4e:31:6d:97:ba:7b:2b:23:1a:21:98:d3:37:81:
87:17:b3:2b:a4:83:a6:ae:47:8e:48:8e:6a:a5:5b:
55:63:e1:f5:3f:3b:8b:42:f9:0a:d5:5e:ae:7e:2e:
8d:b7:71:bc:d7:07:cf:31:99:7a:f4:44:42:87:f9:
8c:0f:03:c5:92:f3:2e:29:ec:25:16:5b:63:c8:f9:
ad:48:5c:43:9c:a9:a7:bd:a2:cb:e6:60:3d:08:45:
b1:e0:a2:29:86:0b:8d:bb:72:2b:78:ca:a2:ec:9b:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:07:74:33:20:B2:C7:B4:E7:5A:AB:76:9A:A6:E0:A0:93:F7:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FD0HdDMgsse051qrdpqm4KCT958.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.128.0/22
Signature Algorithm: sha256WithRSAEncryption
62:be:1f:49:31:a0:29:2b:9d:58:1a:a0:95:a7:59:cf:5b:5b:
41:d3:30:1b:80:f1:60:c9:09:20:71:3d:4d:f2:17:d3:8b:a2:
49:62:c3:f5:04:a7:7f:6a:7f:79:24:10:04:87:e7:05:e5:bd:
7e:87:c5:25:34:5e:f8:5d:ca:cd:67:fc:f0:83:fa:a7:d5:06:
83:8f:ae:c8:98:62:cb:66:3f:b4:d7:06:05:86:4d:cf:9f:9c:
3b:44:75:16:46:3a:39:bc:89:33:32:17:e1:86:3a:0f:cc:f1:
86:e9:a2:4f:21:be:d4:67:8c:50:80:7b:df:42:ae:e1:8c:f6:
b7:38:9a:5e:44:03:65:45:9d:f9:60:cd:91:0c:67:53:1b:90:
b8:b2:60:a8:20:e7:a9:be:a7:12:11:12:bb:f2:82:af:b0:a7:
60:8b:4a:e4:45:69:78:28:92:6e:2d:fa:3e:15:ca:f6:46:3d:
70:30:25:3f:9c:a7:6a:ee:1e:20:56:ff:06:d2:7a:dc:b5:14:
6d:cc:b5:eb:be:6e:1a:8f:0f:ce:4d:b2:fe:90:1f:a3:fc:88:
8a:87:b5:1d:7d:32:0a:a4:e7:21:32:dd:cf:9e:c2:f4:08:d3:
75:4e:e1:55:4b:1c:92:0c:db:43:7a:5e:b2:50:e8:bf:cb:56:
2b:be:d0:51
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDh59DjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NTY5MGY1ZTMyZDVjODZhZjFlMTM0OWRmZDRlOGNlZWI3MGUxYWM3MB4XDTIyMDEw
MTAxNTgxOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQzZDA3NzQzMzIw
YjJjN2I0ZTc1YWFiNzY5YWE2ZTBhMDkzZjc5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANMdPP2arb3271K+wNKxWKHOBlNEZkrYBhrjnRzprgnIeT11
tYwdCu21EvEpSGejUGozk1MAhv8v42sknrqXOQe9Fv4BhK5fIxCkBrYCPl5JKp5u
Bykw417yPCQA+ZaiQ9i1FDs1wer17ydasfaj6b9egtLJ6hoEd/OMDCmyxs7iTOst
dob9YpbCqLQdkU5ghWw38lnLr04xbZe6eysjGiGY0zeBhxezK6SDpq5HjkiOaqVb
VWPh9T87i0L5CtVern4ujbdxvNcHzzGZevREQof5jA8DxZLzLinsJRZbY8j5rUhc
Q5ypp72iy+ZgPQhFseCiKYYLjbtyK3jKouyb9qUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUPQd0MyCyx7TnWqt2mqbgoJP3nzAfBgNVHSMEGDAWgBQ1aQ9eMtXIavHh
NJ39Tozutw4axzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05Xa1BYakxWeUdyeDRUU2RfVTZNN3JjT0dzYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDAvZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8x
L0ZEMEhkRE1nc3NlMDUxcXJkcHFtNEtDVDk1OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAv
ZTE0NDdhLThmMTgtNGE4MC1hNDIyLTVhNDI0MjhmMTE0My8xL05Xa1BYakxWeUdy
eDRUU2RfVTZNN3JjT0dzYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsJXgDANBgkqhkiG9w0BAQsFAAOC
AQEAYr4fSTGgKSudWBqgladZz1tbQdMwG4DxYMkJIHE9TfIX04uiSWLD9QSnf2p/
eSQQBIfnBeW9fofFJTRe+F3KzWf88IP6p9UGg4+uyJhiy2Y/tNcGBYZNz5+cO0R1
FkY6ObyJMzIX4YY6D8zxhumiTyG+1GeMUIB730Ku4Yz2tziaXkQDZUWd+WDNkQxn
UxuQuLJgqCDnqb6nEhESu/KCr7CnYItK5EVpeCiSbi36PhXK9kY9cDAlP5ynau4e
IFb/BtJ63LUUbcy1675uGo8Pzk2y/pAfo/yIioe1HX0yCqTnITLdz57C9AjTdU7h
VUsckgzbQ3peslDov8tWK77QUQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:53 2023 by rpki-client on console-ams.rpki-client.org