Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/FTF9ALg8iMX3hXxtqXwnOKdVf0o.roa
File: FTF9ALg8iMX3hXxtqXwnOKdVf0o.roa (raw, json)
Hash identifier: NWTVO+nJSCU2ye4qV+sYht9l7BbQFOyJcHwJLES5gSE=
Subject key identifier: 15:31:7D:00:B8:3C:88:C5:F7:85:7C:6D:A9:7C:27:38:A7:55:7F:4A
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 0502B92A
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/FTF9ALg8iMX3hXxtqXwnOKdVf0o.roa
Signing time: Sun 29 May 2022 07:39:13 +0000
ROA not before: Sun 29 May 2022 07:39:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203730
IP address blocks: 93.88.24.0/24 maxlen: 24
93.88.24.0/23 maxlen: 23
93.88.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84064554 (0x502b92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: May 29 07:39:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15317d00b83c88c5f7857c6da97c2738a7557f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:ec:e2:55:8d:b1:c0:ab:5a:ac:3a:50:80:
65:97:62:85:e8:53:fb:b1:2a:ad:98:74:e8:b4:7f:
25:a4:fe:93:6b:68:90:e3:73:b6:36:a3:a1:87:0e:
1e:0a:0e:41:8a:72:eb:8e:23:0f:eb:71:ed:42:f5:
df:e8:90:31:ef:be:58:03:47:0a:a4:bb:c1:84:d4:
27:23:00:76:97:61:e7:2e:68:fb:9a:45:2d:54:10:
97:f2:8b:ea:57:4a:54:21:7c:4d:dd:23:62:52:75:
c4:b0:6d:d5:c2:05:a5:56:e8:d1:05:72:ec:83:bc:
34:ab:11:f9:88:ab:9f:f3:65:e1:d9:a5:58:b3:3d:
4a:1b:ec:0c:75:66:f2:5f:a4:cb:57:a1:ed:75:b3:
83:b2:d9:6f:af:e5:21:f7:93:48:b3:5c:d7:7e:72:
04:c4:de:2b:84:f5:39:f5:b4:f3:06:ae:9f:2c:24:
a9:b3:da:7a:e4:fa:74:73:bf:ff:ac:87:a8:d2:52:
94:da:80:de:e6:a0:0f:19:c7:aa:5d:ba:f1:3b:35:
48:57:87:00:e7:27:8b:4d:c4:9f:75:97:65:77:ee:
78:a1:b6:e5:30:04:92:5b:14:a6:db:95:89:40:cf:
50:f1:eb:73:82:44:5b:2f:3e:e6:30:c8:86:5b:6e:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:7D:00:B8:3C:88:C5:F7:85:7C:6D:A9:7C:27:38:A7:55:7F:4A
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/FTF9ALg8iMX3hXxtqXwnOKdVf0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.24.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:84:f8:cd:28:4a:87:99:1d:1c:bf:52:65:a8:9c:c6:49:c8:
9f:ad:79:b2:65:dc:08:e2:64:34:d2:42:08:69:e0:8b:0c:12:
44:29:6c:70:81:73:de:64:93:df:db:28:e9:e8:45:ea:23:a6:
f1:56:4a:20:c4:46:a6:e8:08:71:47:52:29:4b:d3:bb:ed:58:
3e:0f:76:a2:64:ed:9d:56:3d:29:31:3d:a8:16:5f:e1:1e:d1:
e3:9e:51:31:65:e1:37:a0:39:1c:ef:49:10:b0:64:20:10:11:
f9:22:4e:ca:f8:15:87:c6:25:ce:1e:02:6a:01:5e:6c:a7:a7:
d9:01:77:bf:1e:b3:55:70:85:8a:57:ab:ed:82:d4:bb:81:e4:
e4:cf:c9:db:4f:68:a4:10:b1:87:8d:86:5e:17:fc:7d:71:4b:
0a:b8:a2:19:a0:48:68:13:56:1c:a4:29:80:8d:f7:06:d0:c1:
c7:7c:b9:b0:01:ad:71:a3:e1:f2:36:76:76:39:dc:fe:79:21:
d0:ac:75:ff:99:d4:c3:24:7c:fa:ab:f0:3e:3a:f4:89:a9:32:
44:25:59:8e:5a:bb:f0:6f:08:9e:2c:96:18:5a:07:61:7b:7c:
d5:12:1e:c2:14:e4:66:6a:96:78:f6:42:bf:35:8f:33:b6:c0:
52:b7:fb:a9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBQK5KjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZjkzZDNiYTE5N2Y1Y2UzMDk4YmZhNzcwMGI0Mzg1NGVhYTgwZTllMB4XDTIyMDUy
OTA3MzkxM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTUzMTdkMDBiODNj
ODhjNWY3ODU3YzZkYTk3YzI3MzhhNzU1N2Y0YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMkW7OJVjbHAq1qsOlCAZZdihehT+7EqrZh06LR/JaT+k2to
kONztjajoYcOHgoOQYpy644jD+tx7UL13+iQMe++WANHCqS7wYTUJyMAdpdh5y5o
+5pFLVQQl/KL6ldKVCF8Td0jYlJ1xLBt1cIFpVbo0QVy7IO8NKsR+Yirn/Nl4dml
WLM9ShvsDHVm8l+ky1eh7XWzg7LZb6/lIfeTSLNc135yBMTeK4T1OfW08waunywk
qbPaeuT6dHO//6yHqNJSlNqA3uagDxnHql268Ts1SFeHAOcni03En3WXZXfueKG2
5TAEklsUptuViUDPUPHrc4JEWy8+5jDIhltu1rECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQVMX0AuDyIxfeFfG2pfCc4p1V/SjAfBgNVHSMEGDAWgBQvk9O6GX9c4wmL
+ncAtDhU6qgOnjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0w1UFR1aGxfWE9NSmlfcDNBTFE0Vk9xb0RwNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjQvN2E4N2EwLTgwMTQtNDYwNS05ZmI1LTllNzFkYzI0YTY4My8x
L0ZURjlBTGc4aU1YM2hYeHRxWHduT0tkVmYwby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQv
N2E4N2EwLTgwMTQtNDYwNS05ZmI1LTllNzFkYzI0YTY4My8xL0w1UFR1aGxfWE9N
SmlfcDNBTFE0Vk9xb0RwNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV1YGDANBgkqhkiG9w0BAQsFAAOC
AQEACoT4zShKh5kdHL9SZaicxknIn615smXcCOJkNNJCCGngiwwSRClscIFz3mST
39so6ehF6iOm8VZKIMRGpugIcUdSKUvTu+1YPg92omTtnVY9KTE9qBZf4R7R455R
MWXhN6A5HO9JELBkIBAR+SJOyvgVh8Ylzh4CagFebKen2QF3vx6zVXCFiler7YLU
u4Hk5M/J209opBCxh42GXhf8fXFLCriiGaBIaBNWHKQpgI33BtDBx3y5sAGtcaPh
8jZ2djnc/nkh0Kx1/5nUwyR8+qvwPjr0iakyRCVZjlq78G8IniyWGFoHYXt81RIe
whTkZmqWePZCvzWPM7bAUrf7qQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:09 2023 by rpki-client on console-ams.rpki-client.org