Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/FZ7ilnBY8eDjXQK-HBPPWGLtOuE.roa
File: FZ7ilnBY8eDjXQK-HBPPWGLtOuE.roa (raw, json)
Hash identifier: dDXb+UHe4Sr+jChTUdVmNmC1IpmVP7bxtGZc9Pw/Mz8=
Subject key identifier: 15:9E:E2:96:70:58:F1:E0:E3:5D:02:BE:1C:13:CF:58:62:ED:3A:E1
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01828937EEE31C69B07C3183D124A8BA38F0
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/FZ7ilnBY8eDjXQK-HBPPWGLtOuE.roa
Signing time: Wed 10 Aug 2022 19:25:20 +0000
ROA not before: Wed 10 Aug 2022 19:25:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 185.187.155.0/24 maxlen: 24
185.187.154.0/24 maxlen: 24
185.121.24.0/23 maxlen: 24
185.121.26.0/23 maxlen: 24
2a05:b0c4:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:37:ee:e3:1c:69:b0:7c:31:83:d1:24:a8:ba:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Aug 10 19:25:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=159ee2967058f1e0e35d02be1c13cf5862ed3ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1b:5d:a0:ff:45:41:2f:2f:4f:0e:c1:14:15:
32:b1:c2:1d:dd:e5:c5:d1:8f:a1:76:2c:24:d0:ae:
5d:3f:09:e8:9a:32:e9:6c:1e:6b:2e:04:a8:61:cf:
4e:20:28:01:17:18:6b:4f:04:b9:99:b6:f1:1f:81:
13:1b:4a:24:ce:cd:83:be:21:53:50:00:a3:f0:cf:
71:8b:7a:4a:2f:9b:ae:87:4a:98:71:a1:13:5c:7d:
d8:55:ba:e3:e1:05:18:09:4a:37:b9:45:57:09:98:
d4:93:01:10:4e:99:11:c7:fb:18:ae:bc:92:71:c8:
20:49:82:74:47:9a:1b:b0:70:cf:e8:fd:90:08:e9:
aa:aa:9a:75:68:ca:32:6f:51:b4:b0:9f:ad:f4:55:
73:e7:45:52:8f:d1:79:8b:0f:82:70:16:71:60:ab:
f9:44:7f:f1:cc:d8:88:37:6a:0c:7e:6a:44:ae:c8:
b2:02:16:0e:63:26:72:07:c6:eb:a3:c4:08:8b:fc:
75:77:10:a7:58:44:ae:ed:4b:31:2d:3e:bd:e4:f7:
9a:90:f3:fc:63:5a:37:2c:24:d9:1b:f6:5d:44:39:
bd:ec:f9:37:49:7c:ee:7e:03:f3:13:e8:41:22:c8:
34:93:85:f2:c9:93:e0:fd:13:f7:5f:c3:3b:15:9e:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:E2:96:70:58:F1:E0:E3:5D:02:BE:1C:13:CF:58:62:ED:3A:E1
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/FZ7ilnBY8eDjXQK-HBPPWGLtOuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.24.0/22
185.187.154.0/23
IPv6:
2a05:b0c4:2::/48
Signature Algorithm: sha256WithRSAEncryption
95:de:65:65:af:1b:39:71:c7:20:ac:e8:04:cf:90:37:e5:e4:
a6:cb:3f:93:bc:40:9a:06:97:52:4e:8a:07:bd:e3:74:fa:fb:
1f:9f:70:6d:d0:fb:54:71:13:85:ad:37:ee:25:d7:94:92:79:
6f:96:75:7b:eb:b2:34:7e:b7:6c:98:9d:2d:b3:2b:30:08:04:
df:94:bd:c8:b1:f2:59:ba:98:f2:15:59:d2:7c:93:86:35:45:
93:7e:4a:18:ea:6c:71:7e:ad:de:06:1c:59:d8:eb:ab:10:e6:
6d:a3:d4:05:5c:13:5c:de:d4:c4:99:9d:bc:f6:75:8d:f4:51:
d2:72:63:a2:80:40:a1:ce:69:40:54:0a:4d:d0:4a:f2:d3:25:
1e:1b:0c:f0:53:c7:f7:8c:6e:28:14:35:1e:9a:30:9f:72:3b:
a4:56:ce:24:ba:2e:8e:2d:be:bf:ad:69:f9:4a:25:f2:18:d4:
33:bd:71:84:d3:36:a3:f2:d9:1f:cf:a2:41:39:7f:68:f8:31:
d1:9d:dd:40:5d:93:1c:8e:9b:1b:1f:a1:65:10:81:c2:9f:b7:
be:bd:5e:70:62:83:2e:bb:cd:9a:d5:70:4e:d8:a9:dc:87:3b:
6d:53:3b:65:53:f4:2f:30:de:f9:ac:64:f3:7d:86:a8:0f:de:
34:df:4a:05
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYKJN+7jHGmwfDGD0SSoujjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjIwODEwMTkyNTIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTllZTI5NjcwNThmMWUwZTM1ZDAyYmUxYzEzY2Y1ODYyZWQzYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BtdoP9FQS8vTw7BFBUyscId3eXF
0Y+hdiwk0K5dPwnomjLpbB5rLgSoYc9OICgBFxhrTwS5mbbxH4ETG0okzs2DviFT
UACj8M9xi3pKL5uuh0qYcaETXH3YVbrj4QUYCUo3uUVXCZjUkwEQTpkRx/sYrryS
ccggSYJ0R5obsHDP6P2QCOmqqpp1aMoyb1G0sJ+t9FVz50VSj9F5iw+CcBZxYKv5
RH/xzNiIN2oMfmpErsiyAhYOYyZyB8bro8QIi/x1dxCnWESu7UsxLT695PeakPP8
Y1o3LCTZG/ZdRDm97Pk3SXzufgPzE+hBIsg0k4XyyZPg/RP3X8M7FZ4DwwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBWe4pZwWPHg410CvhwTz1hi7TrhMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvRlo3aWxuQlk4ZURqWFFLLUhCUFBXR0x0T3VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuXkYAwQB
ubuaMA8EAgACMAkDBwAqBbDEAAIwDQYJKoZIhvcNAQELBQADggEBAJXeZWWvGzlx
xyCs6ATPkDfl5KbLP5O8QJoGl1JOige943T6+x+fcG3Q+1RxE4WtN+4l15SSeW+W
dXvrsjR+t2yYnS2zKzAIBN+Uvcix8lm6mPIVWdJ8k4Y1RZN+ShjqbHF+rd4GHFnY
66sQ5m2j1AVcE1ze1MSZnbz2dY30UdJyY6KAQKHOaUBUCk3QSvLTJR4bDPBTx/eM
bigUNR6aMJ9yO6RWziS6Lo4tvr+taflKJfIY1DO9cYTTNqPy2R/PokE5f2j4MdGd
3UBdkxyOmxsfoWUQgcKft769XnBigy67zZrVcE7YqdyHO21TO2VT9C8w3vmsZPN9
hqgP3jTfSgU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:17 2024 by rpki-client on console-ams.rpki-client.org