Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/F1XOgC5Ja2WMj6tyzANdx5gvjdY.roa
File: F1XOgC5Ja2WMj6tyzANdx5gvjdY.roa (raw, json)
Hash identifier: C1wmS/gfYMprHbi4+XKsShQU5WPrjKzx5xWNrewtyok=
Subject key identifier: 17:55:CE:80:2E:49:6B:65:8C:8F:AB:72:CC:03:5D:C7:98:2F:8D:D6
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 088669A0
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/F1XOgC5Ja2WMj6tyzANdx5gvjdY.roa
Signing time: Mon 11 Apr 2022 10:40:50 +0000
ROA not before: Mon 11 Apr 2022 10:40:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 213.209.136.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143026592 (0x88669a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 11 10:40:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1755ce802e496b658c8fab72cc035dc7982f8dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:ba:04:58:32:dd:ac:b8:bb:fe:7c:50:16:
cd:8a:08:b2:95:9c:fc:b3:c3:2d:88:31:09:77:c2:
3c:80:02:0b:7c:16:b4:1c:50:6b:e9:50:6a:9a:11:
b4:4f:d4:2e:39:be:d9:88:e6:6b:00:32:1a:4a:73:
b1:4e:47:ca:a1:1e:d3:d5:b1:b1:93:40:e6:24:92:
e5:95:78:e5:c3:95:22:2c:da:a2:61:f4:ea:4f:de:
90:fd:73:87:db:29:5c:5e:96:c7:6a:cb:0a:68:be:
dc:b5:d0:08:a9:f0:4d:c0:b4:c1:96:ad:55:bd:b5:
e4:0e:d0:74:29:bd:27:e1:1a:d1:f9:fc:09:66:85:
2d:e9:c3:29:2c:a5:52:85:bb:d0:55:94:c4:63:bf:
65:3c:e2:af:9b:0a:16:55:13:ca:0c:31:79:fb:0c:
62:17:ef:10:38:2d:4a:df:d3:39:a8:83:93:6e:d7:
db:f6:c1:e0:5a:ff:d2:d4:32:f3:09:7d:96:40:90:
20:1f:91:68:78:cd:c0:d8:47:b6:4d:99:7b:1b:15:
12:b9:45:91:23:98:73:bf:ec:44:7b:89:25:3c:75:
48:87:a5:28:4f:99:60:c6:61:f3:33:17:18:1a:fd:
3c:9f:26:ea:bf:84:eb:f1:57:d5:af:64:8b:27:28:
6a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:CE:80:2E:49:6B:65:8C:8F:AB:72:CC:03:5D:C7:98:2F:8D:D6
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/F1XOgC5Ja2WMj6tyzANdx5gvjdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.13.0/24
213.209.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:46:91:87:34:d9:29:d9:1e:5f:6b:77:be:0f:52:75:bd:2a:
8b:33:af:cd:e6:41:2f:e6:f0:98:6a:5c:17:8e:39:99:34:26:
da:c0:ec:19:2a:16:d8:e9:92:a5:e0:c4:05:83:c4:21:e8:6e:
15:79:08:f7:f3:aa:38:b1:97:e5:1f:f6:20:d3:32:c0:76:8f:
20:02:7a:d7:5d:39:f3:32:01:80:2d:42:91:59:b8:86:5f:ef:
48:1a:d1:49:d9:f0:75:8e:10:11:42:43:81:43:de:3c:c0:d4:
3b:48:b7:97:b4:1c:32:ee:29:1e:e3:6b:6d:3b:4f:05:99:14:
05:09:fd:1c:31:47:3b:9f:4f:04:55:38:3a:09:e0:85:05:8f:
b2:2d:f5:da:78:f5:a7:e1:21:92:a2:dd:ae:cf:f7:0b:73:a7:
bf:49:23:c3:ee:6f:9c:91:cc:2a:e4:f7:9e:bc:6c:62:03:51:
fa:7f:02:a2:57:36:a0:f3:06:fe:1e:be:4e:7a:a3:7a:f0:2d:
b6:d4:67:85:47:f5:d0:b9:9f:ea:cd:1a:b9:a8:8d:53:d2:7f:
fb:83:36:4e:0f:f0:3a:ef:60:de:6f:90:43:bc:ae:c9:24:33:
68:2e:0d:0a:3f:33:88:a6:dd:d7:49:db:8e:f3:94:cd:a9:c6:
ed:a6:eb:ff
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIECIZpoDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjQ3NmUxMmU4OTg3ZTViMzAyY2RjMjRiZGQ5ZGIzZmU4M2M4NDQ5MB4XDTIyMDQx
MTEwNDA1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc1NWNlODAyZTQ5
NmI2NThjOGZhYjcyY2MwMzVkYzc5ODJmOGRkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANOYugRYMt2suLv+fFAWzYoIspWc/LPDLYgxCXfCPIACC3wW
tBxQa+lQapoRtE/ULjm+2YjmawAyGkpzsU5HyqEe09WxsZNA5iSS5ZV45cOVIiza
omH06k/ekP1zh9spXF6Wx2rLCmi+3LXQCKnwTcC0wZatVb215A7QdCm9J+Ea0fn8
CWaFLenDKSylUoW70FWUxGO/ZTzir5sKFlUTygwxefsMYhfvEDgtSt/TOaiDk27X
2/bB4Fr/0tQy8wl9lkCQIB+RaHjNwNhHtk2ZexsVErlFkSOYc7/sRHuJJTx1SIel
KE+ZYMZh8zMXGBr9PJ8m6r+E6/FX1a9kiycoarcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQXVc6ALklrZYyPq3LMA13HmC+N1jAfBgNVHSMEGDAWgBQ7R24S6Jh+WzAs
3CS92ds/6DyESTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08wZHVFdWlZZmxzd0xOd2t2ZG5iUC1nOGhFay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzQvZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8x
L0YxWE9nQzVKYTJXTWo2dHl6QU5keDVndmpkWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQv
ZDkwYzZmLTY1NzYtNDZiOS04MzEzLTZjYmZmM2M0ZGEwMS8xL08wZHVFdWlZZmxz
d0xOd2t2ZG5iUC1nOGhFay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEALnmDQMEANXRiDANBgkqhkiG9w0B
AQsFAAOCAQEAuEaRhzTZKdkeX2t3vg9Sdb0qizOvzeZBL+bwmGpcF445mTQm2sDs
GSoW2OmSpeDEBYPEIehuFXkI9/OqOLGX5R/2INMywHaPIAJ611058zIBgC1CkVm4
hl/vSBrRSdnwdY4QEUJDgUPePMDUO0i3l7QcMu4pHuNrbTtPBZkUBQn9HDFHO59P
BFU4OgnghQWPsi312nj1p+EhkqLdrs/3C3Onv0kjw+5vnJHMKuT3nrxsYgNR+n8C
olc2oPMG/h6+TnqjevAtttRnhUf10Lmf6s0auaiNU9J/+4M2Tg/wOu9g3m+QQ7yu
ySQzaC4NCj8ziKbd10nbjvOUzanG7abr/w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:22 2023 by rpki-client on console-fra.rpki-client.org