Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/A4FsaQAfLCy_xbfFTMk-8kqQ-ck.roa
File: A4FsaQAfLCy_xbfFTMk-8kqQ-ck.roa (raw, json)
Hash identifier: GV0BxvP6eYT5yz+lQe9TRjA8Ec91uhELE6S4gzD1vzQ=
Subject key identifier: 03:81:6C:69:00:1F:2C:2C:BF:C5:B7:C5:4C:C9:3E:F2:4A:90:F9:C9
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 01829105F0EB2E060CF7F36EEB4AA75B3A3C
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/A4FsaQAfLCy_xbfFTMk-8kqQ-ck.roa
Signing time: Fri 12 Aug 2022 07:47:41 +0000
ROA not before: Fri 12 Aug 2022 07:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62336
IP address blocks: 185.193.44.0/24 maxlen: 24
212.122.128.0/19 maxlen: 19
2a10:fcc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:91:05:f0:eb:2e:06:0c:f7:f3:6e:eb:4a:a7:5b:3a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Aug 12 07:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03816c69001f2c2cbfc5b7c54cc93ef24a90f9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:90:f1:76:15:a8:7b:bd:d7:5e:de:40:c6:
c8:8a:bd:bc:66:c3:4a:03:3b:06:c2:ad:db:b1:d9:
c5:b8:93:f7:f0:d0:b7:3e:ea:a6:48:4b:c7:32:b7:
b3:38:75:0a:fe:08:4d:bf:4a:9c:02:e2:d5:52:5c:
a3:9f:82:e5:8b:5f:10:13:77:cc:03:32:27:d5:c4:
4d:4a:7d:e4:ba:8d:65:6c:73:d5:37:e1:83:e2:77:
a5:1e:25:68:f3:4c:3b:b1:68:30:b7:8b:7b:9c:3a:
7e:ed:c8:95:0c:85:13:28:bd:4b:8e:a6:87:b5:55:
22:d9:23:0e:47:dd:e4:ea:94:4b:c7:87:d8:a2:09:
97:b0:df:d0:f4:0a:e1:d0:53:cc:a4:40:5b:e1:bc:
2e:3e:32:aa:7f:0b:c3:ea:c9:85:c3:23:77:39:6c:
b9:5b:4a:b9:07:62:cc:91:46:6c:fa:b6:12:a6:a5:
05:27:45:44:a0:bf:9b:65:d8:02:fb:95:a1:e2:99:
de:93:ee:cc:f0:1c:1b:ef:c6:99:bb:6e:70:e4:69:
9a:3e:0a:eb:d3:6f:e0:17:a2:b7:18:4c:61:09:b3:
df:17:8c:8b:4e:21:d2:db:6e:34:9d:16:ea:0d:96:
e2:3d:49:66:55:45:e7:cf:3e:f4:8b:2f:bd:82:50:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:6C:69:00:1F:2C:2C:BF:C5:B7:C5:4C:C9:3E:F2:4A:90:F9:C9
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/A4FsaQAfLCy_xbfFTMk-8kqQ-ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.44.0/24
212.122.128.0/19
IPv6:
2a10:fcc0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:c7:12:c2:96:b0:c2:5c:42:f8:42:34:31:08:11:d7:34:1b:
f1:51:08:9e:54:2a:53:c6:f7:6e:5e:43:6e:7b:fe:fd:b4:55:
2b:f3:bd:86:8a:e2:7a:bb:61:82:37:c9:76:c5:3d:11:7c:f1:
e9:4f:ce:49:1d:70:42:65:c1:57:c0:6b:5a:2b:30:01:8b:97:
6d:27:0a:aa:65:ea:58:2d:a3:a0:82:55:05:5b:16:8d:61:5a:
8f:30:25:27:d2:7e:36:7e:22:e4:d9:a0:a6:1c:3e:e1:77:e2:
29:f3:0e:9f:cc:ef:26:93:0b:a6:d3:6b:74:0a:45:b6:43:7b:
e8:bd:c1:c9:95:e8:8a:64:b1:f4:07:08:c3:e7:3c:ad:f2:d1:
1a:09:78:4e:54:09:c1:c0:24:1b:b3:c1:8c:e7:e7:d4:85:32:
a3:18:ce:25:33:6d:70:8f:dd:12:e3:c5:39:c9:9c:24:3b:5e:
df:47:bb:b4:39:8b:41:8d:77:94:2b:db:b7:ba:66:26:cc:c0:
4c:30:d0:2c:ad:3a:32:70:ac:55:e9:84:35:c9:f6:6b:a8:03:
ab:92:a7:e1:7f:7e:76:12:9a:90:d5:82:f3:c1:12:7b:ff:c7:
d0:7b:ad:ef:f3:95:67:e3:67:df:1a:9b:88:e0:77:a4:9a:01:
aa:9b:d4:27
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYKRBfDrLgYM9/Nu60qnWzo8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk
NWMxMWEwHhcNMjIwODEyMDc0NzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzgxNmM2OTAwMWYyYzJjYmZjNWI3YzU0Y2M5M2VmMjRhOTBmOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y6Q8XYVqHu9117eQMbIir28ZsNK
AzsGwq3bsdnFuJP38NC3PuqmSEvHMrezOHUK/ghNv0qcAuLVUlyjn4Lli18QE3fM
AzIn1cRNSn3kuo1lbHPVN+GD4nelHiVo80w7sWgwt4t7nDp+7ciVDIUTKL1LjqaH
tVUi2SMOR93k6pRLx4fYogmXsN/Q9Arh0FPMpEBb4bwuPjKqfwvD6smFwyN3OWy5
W0q5B2LMkUZs+rYSpqUFJ0VEoL+bZdgC+5Wh4pnek+7M8Bwb78aZu25w5GmaPgrr
02/gF6K3GExhCbPfF4yLTiHS2240nRbqDZbiPUlmVUXnzz70iy+9glAcrwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAOBbGkAHywsv8W3xUzJPvJKkPnJMB8GA1UdIwQY
MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt
ZmE3MDlhMjNhYzc0LzEvQTRGc2FRQWZMQ3lfeGJmRlRNay04a3FRLWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0
LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAucEsAwQF
1HqAMA0EAgACMAcDBQMqEPzAMA0GCSqGSIb3DQEBCwUAA4IBAQAexxLClrDCXEL4
QjQxCBHXNBvxUQieVCpTxvduXkNue/79tFUr872GiuJ6u2GCN8l2xT0RfPHpT85J
HXBCZcFXwGtaKzABi5dtJwqqZepYLaOgglUFWxaNYVqPMCUn0n42fiLk2aCmHD7h
d+Ip8w6fzO8mkwum02t0CkW2Q3vovcHJleiKZLH0BwjD5zyt8tEaCXhOVAnBwCQb
s8GM5+fUhTKjGM4lM21wj90S48U5yZwkO17fR7u0OYtBjXeUK9u3umYmzMBMMNAs
rToycKxV6YQ1yfZrqAOrkqfhf352EpqQ1YLzwRJ7/8fQe63v85Vn42ffGpuI4Hek
mgGqm9Qn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:55 2023 by rpki-client on console-fra.rpki-client.org