Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/frNmguckQFJGkfF1OWak-djOk14.roa
File: frNmguckQFJGkfF1OWak-djOk14.roa (raw, json)
Hash identifier: C3x+HAIoHEfjCjtSxECGbViNWol7CsB1AFuEB3coMmM=
Subject key identifier: 7E:B3:66:82:E7:24:40:52:46:91:F1:75:39:66:A4:F9:D8:CE:93:5E
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 0D1601E0
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/frNmguckQFJGkfF1OWak-djOk14.roa
Signing time: Fri 29 Apr 2022 18:30:51 +0000
ROA not before: Fri 29 Apr 2022 18:30:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 195.180.148.0/24 maxlen: 24
195.180.158.0/24 maxlen: 24
195.252.173.0/24 maxlen: 24
195.180.178.0/24 maxlen: 24
195.180.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219546080 (0xd1601e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Apr 29 18:30:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eb36682e72440524691f1753966a4f9d8ce935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fc:48:a9:9e:d7:a3:84:01:37:71:9a:4d:0f:
c5:b5:93:e2:7d:6f:f5:b7:f0:f1:65:eb:e2:3f:0d:
f2:38:46:4f:ae:83:49:36:b2:b0:56:f5:43:35:b8:
54:1a:1f:cf:bc:28:43:c7:85:18:e0:e5:9f:f3:54:
1b:89:43:bc:bc:f9:60:0a:d1:98:3e:ba:24:6f:27:
ae:d3:f4:ea:6c:55:0e:f9:98:c6:e5:8f:89:1d:87:
96:02:cf:85:11:ed:72:b6:dc:8f:e8:91:23:17:86:
dc:f8:f9:bc:42:7c:3a:d4:38:31:b3:21:07:21:77:
c0:c6:82:da:37:31:68:50:bc:cb:d5:02:1a:30:42:
e9:6e:46:c2:4f:c9:61:1d:08:67:da:57:9a:e4:da:
6c:69:f4:20:60:6f:11:e0:3d:8c:d4:f2:9f:fd:55:
f5:02:e2:53:e4:69:30:a1:9b:0a:0d:94:39:2c:1a:
65:46:53:cd:e0:f2:d9:7f:bc:2c:28:92:e6:03:2e:
28:5e:8d:d5:b4:63:fb:bd:fe:f6:bf:f4:7e:28:ae:
50:be:ab:34:9b:71:b6:89:00:19:02:f1:8a:8e:d2:
4b:ca:23:3a:e2:b2:80:67:b7:c8:c1:bb:59:93:e2:
11:f7:59:e9:71:6e:de:a2:49:fe:de:7e:d0:54:9b:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B3:66:82:E7:24:40:52:46:91:F1:75:39:66:A4:F9:D8:CE:93:5E
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/frNmguckQFJGkfF1OWak-djOk14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.180.148.0/24
195.180.158.0/24
195.180.178.0/24
195.180.191.0/24
195.252.173.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a4:68:97:4d:98:c0:6d:55:07:7e:c5:4b:6b:f4:a9:4f:b5:
6d:6a:f5:87:53:7f:1c:7b:2e:70:b2:69:07:b9:44:ff:d9:ff:
f4:65:56:6c:c5:08:84:fe:c7:dd:6a:6d:07:f6:1a:7f:f1:ab:
08:7c:c9:4d:40:f6:f1:ad:2d:89:f4:30:8a:c5:3d:16:53:84:
c0:87:db:14:ac:14:e8:7b:87:b5:02:d6:2c:4d:1f:95:84:da:
16:ba:30:4a:86:d7:40:70:a0:92:85:f7:cd:8e:4c:d5:ea:fb:
b9:e9:fb:66:31:e6:21:d4:a1:33:a2:8f:ac:b2:96:21:14:11:
76:1c:4f:92:21:d0:dc:d3:78:18:8c:74:9f:fb:2e:0f:5f:fe:
65:e2:07:e8:48:87:0a:5c:1f:2e:90:d6:6c:4d:ca:81:db:0b:
0d:c9:16:82:e0:1b:6d:4f:c4:db:15:5b:68:91:00:14:55:02:
78:58:ce:fc:e6:48:d4:36:36:ab:0d:e4:ec:66:27:85:d1:28:
2b:07:d8:e3:53:64:6e:b6:0f:fb:d9:ce:64:09:01:7b:bd:95:
d5:03:9a:fb:22:e5:a7:81:fe:dc:ce:7b:28:9e:47:f9:d3:98:
8f:0d:51:0a:76:5c:c8:96:56:53:17:4c:6a:9a:cd:06:d2:97:
92:16:87:99
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIEDRYB4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NzQ3MDE3NTY0YzcxMWJjYmQ1NzY4MGEwZGZkMDBmMmE1ZDA5OWRiMB4XDTIyMDQy
OTE4MzA1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2ViMzY2ODJlNzI0
NDA1MjQ2OTFmMTc1Mzk2NmE0ZjlkOGNlOTM1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO78SKme16OEATdxmk0PxbWT4n1v9bfw8WXr4j8N8jhGT66D
STaysFb1QzW4VBofz7woQ8eFGODln/NUG4lDvLz5YArRmD66JG8nrtP06mxVDvmY
xuWPiR2HlgLPhRHtcrbcj+iRIxeG3Pj5vEJ8OtQ4MbMhByF3wMaC2jcxaFC8y9UC
GjBC6W5Gwk/JYR0IZ9pXmuTabGn0IGBvEeA9jNTyn/1V9QLiU+RpMKGbCg2UOSwa
ZUZTzeDy2X+8LCiS5gMuKF6N1bRj+73+9r/0fiiuUL6rNJtxtokAGQLxio7SS8oj
OuKygGe3yMG7WZPiEfdZ6XFu3qJJ/t5+0FSbor0CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBR+s2aC5yRAUkaR8XU5ZqT52M6TXjAfBgNVHSMEGDAWgBTXRwF1ZMcRvL1X
aAoN/QDypdCZ2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEwY0JkV1RIRWJ5OVYyZ0tEZjBBOHFYUW1kcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTgvYmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8x
L2ZyTm1ndWNrUUZKR2tmRjFPV2FrLWRqT2sxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTgv
YmEyMzYyLTBjYzUtNDliZC1hNTIyLTRmMGU4Y2UxMWE3ZC8xLzEwY0JkV1RIRWJ5
OVYyZ0tEZjBBOHFYUW1kcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAMO0lAMEAMO0ngMEAMO0sgMEAMO0
vwMEAMP8rTANBgkqhkiG9w0BAQsFAAOCAQEAcaRol02YwG1VB37FS2v0qU+1bWr1
h1N/HHsucLJpB7lE/9n/9GVWbMUIhP7H3WptB/Yaf/GrCHzJTUD28a0tifQwisU9
FlOEwIfbFKwU6HuHtQLWLE0flYTaFrowSobXQHCgkoX3zY5M1er7uen7ZjHmIdSh
M6KPrLKWIRQRdhxPkiHQ3NN4GIx0n/suD1/+ZeIH6EiHClwfLpDWbE3KgdsLDckW
guAbbU/E2xVbaJEAFFUCeFjO/OZI1DY2qw3k7GYnhdEoKwfY41NkbrYP+9nOZAkB
e72V1QOa+yLlp4H+3M57KJ5H+dOYjw1RCnZcyJZWUxdMaprNBtKXkhaHmQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org