Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FVFFulmAJBbIyIA8h4-Jr9yGUdQ.roa
File: FVFFulmAJBbIyIA8h4-Jr9yGUdQ.roa (raw, json)
Hash identifier: aG9YWP2Z5iumha9Y3mp3KnlMKMFn8v/sTrK+yKUOlE0=
Subject key identifier: 15:51:45:BA:59:80:24:16:C8:C8:80:3C:87:8F:89:AF:DC:86:51:D4
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0184763E4994BE0877DB57D5BB01AA0D619A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FVFFulmAJBbIyIA8h4-Jr9yGUdQ.roa
Signing time: Mon 14 Nov 2022 13:05:04 +0000
ROA not before: Mon 14 Nov 2022 13:05:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211617
IP address blocks: 194.56.226.0/24 maxlen: 24
185.186.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:76:3e:49:94:be:08:77:db:57:d5:bb:01:aa:0d:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Nov 14 13:05:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=155145ba59802416c8c8803c878f89afdc8651d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:16:15:c7:a4:34:de:b4:eb:af:64:5b:cc:
ba:9d:28:1f:87:72:e3:ae:01:30:7a:04:92:6f:17:
41:45:48:77:5c:f4:ff:66:14:a1:20:20:31:d0:4a:
14:e4:28:54:7c:77:dc:bd:5d:9a:a4:30:ad:8a:09:
9d:e0:1c:3b:11:84:08:36:2f:df:ad:8a:60:af:e9:
b1:9b:7f:38:9f:05:5d:4e:fe:a3:b3:98:ca:cf:f2:
13:6f:40:15:b6:b5:09:b3:3f:7f:f7:60:ad:f1:c2:
bb:55:be:f9:f2:5f:4b:ed:99:7f:df:a3:87:f8:58:
b3:92:af:1f:f6:97:6f:e5:d5:40:ce:ca:28:9f:46:
c1:16:42:1d:7a:24:35:15:c2:da:4f:d1:31:11:66:
85:6f:db:fd:1d:a7:5a:44:94:a5:5e:6d:ad:47:86:
2e:b8:e6:2f:19:e4:b2:61:91:9c:14:41:47:c0:08:
3b:41:64:30:47:2d:0a:78:73:e3:0c:cf:a2:46:0e:
51:3f:bc:a3:91:04:36:62:54:62:23:90:1d:51:12:
c9:00:8d:a6:9f:06:1d:f4:57:32:8b:68:82:9e:05:
56:8b:ba:03:27:36:02:57:7a:5b:dc:ae:de:e2:f4:
38:e6:d8:eb:ec:0d:2e:ed:ff:82:34:3c:b1:5a:71:
ad:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:45:BA:59:80:24:16:C8:C8:80:3C:87:8F:89:AF:DC:86:51:D4
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/FVFFulmAJBbIyIA8h4-Jr9yGUdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.67.0/24
194.56.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6f:72:60:46:80:45:a3:95:03:36:b9:87:ea:22:3d:54:dc:
7f:57:65:4e:f3:b3:29:c3:ab:bf:f5:f9:01:d0:9c:cd:26:dc:
8d:90:69:80:92:9d:45:a9:a8:e1:cc:0c:6f:49:eb:63:10:18:
2b:64:66:e4:38:f6:12:3a:51:b3:f7:f7:90:87:f4:0e:a9:aa:
92:57:fc:f0:03:a3:bb:aa:d7:05:fd:20:00:f3:cd:e0:0a:ee:
24:dc:08:c4:e1:6e:86:72:12:59:f5:61:f7:1c:3f:5c:66:ab:
99:5d:23:61:b2:c9:83:44:84:b1:69:cc:b8:23:d0:69:52:d9:
fd:58:9e:66:f2:2f:0a:94:e1:ab:bf:42:f8:c8:83:a9:41:b7:
95:2f:03:4a:eb:3f:e4:89:87:61:b8:51:ce:f4:e6:ee:c7:84:
33:13:b1:9f:9d:62:12:b2:86:b3:af:2e:61:0d:77:63:2b:15:
46:bc:a3:e8:57:37:55:9b:13:c2:14:f6:25:60:ea:0f:70:f4:
af:6d:6c:bc:e9:c2:b1:0a:13:fd:17:f9:58:5c:da:bf:d7:8a:
74:6b:85:4c:59:76:c6:28:2f:a5:bf:c4:d0:38:ba:6e:2a:0b:
e9:9e:99:00:fe:6c:46:fa:23:47:37:3b:7e:ab:b6:29:6d:69:
02:d8:e0:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYR2PkmUvgh321fVuwGqDWGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjIxMTE0MTMwNTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUxNDViYTU5ODAyNDE2YzhjODgwM2M4NzhmODlhZmRjODY1MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArygWFcekNN60669kW8y6nSgfh3Lj
rgEwegSSbxdBRUh3XPT/ZhShICAx0EoU5ChUfHfcvV2apDCtigmd4Bw7EYQINi/f
rYpgr+mxm384nwVdTv6js5jKz/ITb0AVtrUJsz9/92Ct8cK7Vb758l9L7Zl/36OH
+Fizkq8f9pdv5dVAzsoon0bBFkIdeiQ1FcLaT9ExEWaFb9v9HadaRJSlXm2tR4Yu
uOYvGeSyYZGcFEFHwAg7QWQwRy0KeHPjDM+iRg5RP7yjkQQ2YlRiI5AdURLJAI2m
nwYd9Fcyi2iCngVWi7oDJzYCV3pb3K7e4vQ45tjr7A0u7f+CNDyxWnGt7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBVRRbpZgCQWyMiAPIePia/chlHUMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvRlZGRnVsbUFKQmJJeUlBOGg0LUpyOXlHVWRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubpDAwQA
wjjiMA0GCSqGSIb3DQEBCwUAA4IBAQCPb3JgRoBFo5UDNrmH6iI9VNx/V2VO87Mp
w6u/9fkB0JzNJtyNkGmAkp1FqajhzAxvSetjEBgrZGbkOPYSOlGz9/eQh/QOqaqS
V/zwA6O7qtcF/SAA883gCu4k3AjE4W6GchJZ9WH3HD9cZquZXSNhssmDRISxacy4
I9BpUtn9WJ5m8i8KlOGrv0L4yIOpQbeVLwNK6z/kiYdhuFHO9Obux4QzE7GfnWIS
soazry5hDXdjKxVGvKPoVzdVmxPCFPYlYOoPcPSvbWy86cKxChP9F/lYXNq/14p0
a4VMWXbGKC+lv8TQOLpuKgvpnpkA/mxG+iNHNzt+q7YpbWkC2OAn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:38 2023 by rpki-client on console-fra.rpki-client.org