Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ferpVAUwKDAlEP9a3voWn_Ma6F4.roa
File: ferpVAUwKDAlEP9a3voWn_Ma6F4.roa (raw, json)
Hash identifier: OqjWdHh0KllNJBWum65znwA6Mttla4nJAcsnD4T/beQ=
Subject key identifier: 7D:EA:E9:54:05:30:28:30:25:10:FF:5A:DE:FA:16:9F:F3:1A:E8:5E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0183D2B58B7305043E32B8A873171008BA09
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ferpVAUwKDAlEP9a3voWn_Ma6F4.roa
Signing time: Thu 13 Oct 2022 18:57:36 +0000
ROA not before: Thu 13 Oct 2022 18:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34450
IP address blocks: 91.228.14.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d2:b5:8b:73:05:04:3e:32:b8:a8:73:17:10:08:ba:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 13 18:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7deae954053028302510ff5adefa169ff31ae85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:c5:11:3f:1f:18:79:42:81:b3:76:f2:21:
be:de:d2:7e:b5:dc:cc:9c:c2:bd:35:b9:18:18:93:
07:dc:af:0d:df:38:a3:e2:b1:50:f8:11:25:f3:b4:
1f:be:43:e6:e5:c7:61:43:ad:6a:8e:0e:bb:60:0a:
fc:09:00:1a:ae:5d:df:30:59:18:f1:2b:e1:09:7e:
00:ea:62:e9:84:4a:01:75:6c:2f:06:bb:9b:20:7f:
c5:d3:0b:3d:e4:54:88:7a:a3:9f:5a:1b:5e:e1:87:
56:d6:db:f1:5b:45:ce:e0:f7:48:fc:73:19:35:e9:
1e:c9:ce:e3:b7:f6:1f:a7:36:87:47:08:8c:ec:6d:
93:00:e6:9b:c4:2c:d0:5b:05:cd:94:9e:a2:7a:8d:
98:90:1c:26:ce:19:32:42:4f:d8:63:1e:64:fd:b7:
54:b9:12:94:b3:f9:8a:af:c5:20:0b:51:61:99:a2:
1f:df:4d:bb:1d:09:2a:14:b7:9a:45:b7:a2:22:9b:
a1:8c:97:3f:d6:3f:07:65:17:7e:bd:e5:b4:3c:fa:
23:ed:7a:28:8f:3c:59:bb:ed:16:e8:e6:e5:99:1a:
54:eb:8a:47:fe:8d:4a:6b:0f:53:8f:3c:7b:6d:23:
6c:78:3d:23:5e:a6:8c:da:b1:e8:bc:d3:ac:a4:b2:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EA:E9:54:05:30:28:30:25:10:FF:5A:DE:FA:16:9F:F3:1A:E8:5E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ferpVAUwKDAlEP9a3voWn_Ma6F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
40:59:3b:e2:de:8d:0b:05:59:a6:8f:c3:a4:a7:d7:45:27:2e:
24:87:86:a0:8c:12:ce:69:49:dc:66:95:b6:39:22:59:31:77:
34:28:9b:98:b9:a8:f8:4e:f7:da:92:55:d4:ba:f0:43:ad:33:
50:44:a6:dd:ed:e2:22:fd:07:e5:58:db:be:e1:9a:f8:86:90:
7b:03:40:c1:54:5e:4d:7a:cf:44:25:81:3b:76:3d:08:da:6b:
91:13:3a:f7:c5:4c:45:f8:cb:28:1f:01:50:67:f8:25:5a:d1:
e1:aa:6e:16:2d:78:30:05:9e:82:2d:02:78:cb:42:06:14:01:
b5:96:e3:1e:fa:f0:26:95:97:e1:d4:5b:3f:c2:92:c0:a5:1c:
20:eb:f5:e6:59:2e:8c:16:56:a7:25:3a:52:5d:9f:d8:f8:56:
e4:b5:fd:74:1d:40:40:43:32:ba:43:2b:e5:8e:4a:c2:0f:fb:
d5:e7:fe:79:aa:78:e7:0b:4a:5d:fb:0a:87:65:c1:c9:fd:12:
c5:ea:2f:4e:5c:35:13:7b:e8:bd:64:5c:3d:9a:39:f9:17:2a:
0a:43:7e:c3:b4:c4:f6:8b:b4:2b:57:5c:89:5c:38:7d:31:98:
28:d8:5e:86:43:56:92:40:c5:8e:f6:98:3c:a0:4a:0a:13:1d:
da:96:da:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYPStYtzBQQ+MriocxcQCLoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjIxMDEzMTg1NzM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGVhZTk1NDA1MzAyODMwMjUxMGZmNWFkZWZhMTY5ZmYzMWFlODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD3FET8fGHlCgbN28iG+3tJ+tdzM
nMK9NbkYGJMH3K8N3zij4rFQ+BEl87QfvkPm5cdhQ61qjg67YAr8CQAarl3fMFkY
8SvhCX4A6mLphEoBdWwvBrubIH/F0ws95FSIeqOfWhte4YdW1tvxW0XO4PdI/HMZ
Nekeyc7jt/YfpzaHRwiM7G2TAOabxCzQWwXNlJ6ieo2YkBwmzhkyQk/YYx5k/bdU
uRKUs/mKr8UgC1FhmaIf3027HQkqFLeaRbeiIpuhjJc/1j8HZRd+veW0PPoj7Xoo
jzxZu+0W6OblmRpU64pH/o1Kaw9Tjzx7bSNseD0jXqaM2rHovNOspLJGOQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH3q6VQFMCgwJRD/Wt76Fp/zGuheMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvZmVycFZBVXdLREFsRVA5YTN2b1duX01hNkY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+QOAwQA
XpolMA0GCSqGSIb3DQEBCwUAA4IBAQBAWTvi3o0LBVmmj8Okp9dFJy4kh4agjBLO
aUncZpW2OSJZMXc0KJuYuaj4TvfaklXUuvBDrTNQRKbd7eIi/QflWNu+4Zr4hpB7
A0DBVF5Nes9EJYE7dj0I2muREzr3xUxF+MsoHwFQZ/glWtHhqm4WLXgwBZ6CLQJ4
y0IGFAG1luMe+vAmlZfh1Fs/wpLApRwg6/XmWS6MFlanJTpSXZ/Y+Fbktf10HUBA
QzK6QyvljkrCD/vV5/55qnjnC0pd+wqHZcHJ/RLF6i9OXDUTe+i9ZFw9mjn5FyoK
Q37DtMT2i7QrV1yJXDh9MZgo2F6GQ1aSQMWO9pg8oEoKEx3altox
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org