Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FagYds0SWHgGD0c30ird-Ex03SE.roa
File: FagYds0SWHgGD0c30ird-Ex03SE.roa (raw, json)
Hash identifier: HTyYuFLe1WUPhkaH7WdCL0Rt6eKat9AnQYfRP0U/NAw=
Subject key identifier: 15:A8:18:76:CD:12:58:78:06:0F:47:37:D2:2A:DD:F8:4C:74:DD:21
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01831C00476D54C51287F93058CF716E41A2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FagYds0SWHgGD0c30ird-Ex03SE.roa
Signing time: Thu 08 Sep 2022 07:28:43 +0000
ROA not before: Thu 08 Sep 2022 07:28:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 194.87.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:00:47:6d:54:c5:12:87:f9:30:58:cf:71:6e:41:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 07:28:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15a81876cd125878060f4737d22addf84c74dd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:c8:0b:86:62:a3:a3:f7:bb:04:0e:f2:99:
88:df:cc:28:ce:63:c2:4e:f2:c6:7f:84:36:c1:8b:
71:d3:5b:40:df:4e:15:5f:d1:f6:26:80:5e:6a:be:
a9:3f:15:14:80:ff:be:91:11:70:0a:6a:75:23:b6:
4b:9c:af:2b:a4:dd:79:f9:9c:43:25:1c:77:32:c9:
b3:75:bf:d6:71:1e:7d:fa:32:f7:8c:54:07:d8:48:
fa:d2:a9:e9:21:4c:e2:6c:b0:ab:6e:8c:b6:6b:f1:
b2:bc:7b:16:e9:39:bb:38:cf:0b:d7:cf:7f:ec:80:
cb:31:d3:e9:da:52:02:13:6b:6f:fc:47:f7:c6:c8:
10:85:e5:0d:55:28:9f:ab:5c:c9:fb:c3:97:d7:ef:
38:0f:fe:6c:08:7b:7b:cf:6c:ee:03:96:f0:71:e5:
11:0b:e4:be:b8:29:89:a4:ca:eb:cd:27:63:e8:5b:
92:1a:07:5f:54:ba:61:a8:36:e0:b4:e0:be:b9:d2:
63:a5:2f:6f:bb:3d:f2:50:aa:df:7f:bc:a9:ed:5c:
31:f6:f8:ba:63:e9:95:54:79:a1:84:0b:79:e9:f4:
31:62:e7:b3:2e:0b:85:ba:51:ef:02:c1:a7:1a:7c:
67:71:90:b9:d0:84:4d:b9:f6:a6:67:c8:f4:4e:05:
bc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A8:18:76:CD:12:58:78:06:0F:47:37:D2:2A:DD:F8:4C:74:DD:21
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FagYds0SWHgGD0c30ird-Ex03SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.169.0/24
Signature Algorithm: sha256WithRSAEncryption
16:76:44:ac:66:d9:2a:68:51:0b:0f:07:cd:4b:8b:d7:28:f3:
c5:11:4a:a7:b9:57:76:d0:ee:e8:96:a9:8f:23:a2:95:30:ba:
43:02:90:fe:e0:1c:40:48:6f:61:1b:77:72:13:65:84:b6:04:
66:54:9d:3a:31:66:b5:c0:11:3d:d5:25:1b:4b:6e:38:41:8c:
49:4a:24:1b:ef:7d:b0:e7:67:57:28:79:16:a6:43:d7:cd:5c:
2f:6d:66:62:e5:2d:42:24:6e:73:1f:7c:b7:f7:20:b1:35:5e:
38:8c:65:80:08:0e:7f:9e:d3:56:c3:4e:cc:34:02:c3:f1:f2:
88:9d:c4:4f:d6:27:9e:8f:d2:05:1e:fa:36:0e:8f:52:37:e6:
55:c3:73:87:2b:bb:96:3e:22:f2:04:ef:ee:02:05:51:94:1a:
7e:9c:0b:48:55:a7:4c:9e:01:b2:02:a8:62:2a:41:54:5f:ea:
ab:17:6a:f8:0a:c4:6d:b5:96:58:0e:99:6e:cd:3b:1a:a1:b8:
76:f6:f9:c3:50:e5:8a:13:8c:9e:31:03:30:19:0a:ab:fb:10:
d4:cf:5d:92:e8:ab:c8:b5:c8:4e:2d:1f:94:62:9d:37:44:e1:
20:f1:20:d9:22:b0:cc:7b:df:e8:c4:8a:33:d4:7e:be:e8:57:
74:4b:96:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMcAEdtVMUSh/kwWM9xbkGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjIwOTA4MDcyODQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWE4MTg3NmNkMTI1ODc4MDYwZjQ3MzdkMjJhZGRmODRjNzRkZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnjIC4Zio6P3uwQO8pmI38wozmPC
TvLGf4Q2wYtx01tA304VX9H2JoBear6pPxUUgP++kRFwCmp1I7ZLnK8rpN15+ZxD
JRx3Msmzdb/WcR59+jL3jFQH2Ej60qnpIUzibLCrboy2a/GyvHsW6Tm7OM8L189/
7IDLMdPp2lICE2tv/Ef3xsgQheUNVSifq1zJ+8OX1+84D/5sCHt7z2zuA5bwceUR
C+S+uCmJpMrrzSdj6FuSGgdfVLphqDbgtOC+udJjpS9vuz3yUKrff7yp7Vwx9vi6
Y+mVVHmhhAt56fQxYuezLguFulHvAsGnGnxncZC50IRNufamZ8j0TgW8PwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBWoGHbNElh4Bg9HN9Iq3fhMdN0hMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvRmFnWWRzMFNXSGdHRDBjMzBpcmQtRXgwM1NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlepMA0G
CSqGSIb3DQEBCwUAA4IBAQAWdkSsZtkqaFELDwfNS4vXKPPFEUqnuVd20O7olqmP
I6KVMLpDApD+4BxASG9hG3dyE2WEtgRmVJ06MWa1wBE91SUbS244QYxJSiQb732w
52dXKHkWpkPXzVwvbWZi5S1CJG5zH3y39yCxNV44jGWACA5/ntNWw07MNALD8fKI
ncRP1ieej9IFHvo2Do9SN+ZVw3OHK7uWPiLyBO/uAgVRlBp+nAtIVadMngGyAqhi
KkFUX+qrF2r4CsRttZZYDpluzTsaobh29vnDUOWKE4yeMQMwGQqr+xDUz12S6KvI
tchOLR+UYp03ROEg8SDZIrDMe9/oxIoz1H6+6Fd0S5YY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org