Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/FBUpbPn52XnPPmiiFQTQWV_L23o.roa
File: FBUpbPn52XnPPmiiFQTQWV_L23o.roa (raw, json)
Hash identifier: Mg1F3RrlV/7m6yqH0dInOIfNPl1NlNWK5re5CBvEQt0=
Subject key identifier: 14:15:29:6C:F9:F9:D9:79:CF:3E:68:A2:15:04:D0:59:5F:CB:DB:7A
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 137DD1DF
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/FBUpbPn52XnPPmiiFQTQWV_L23o.roa
Signing time: Sat 01 Jan 2022 11:05:10 +0000
ROA not before: Sat 01 Jan 2022 11:05:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203653
IP address blocks: 185.128.38.0/24 maxlen: 24
185.128.37.0/24 maxlen: 24
185.128.36.0/24 maxlen: 24
185.128.39.0/24 maxlen: 24
2a03:9f60::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 327012831 (0x137dd1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Jan 1 11:05:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1415296cf9f9d979cf3e68a21504d0595fcbdb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:6f:13:01:1b:ec:9a:24:c2:73:fd:d6:ed:
b2:44:bc:c8:02:a7:b6:f0:fb:04:ea:ed:bf:36:92:
c8:d5:cc:06:eb:05:e3:46:00:50:ff:27:03:7d:4d:
0c:58:e9:33:c4:11:37:ee:88:78:30:59:69:5d:2d:
62:ae:33:98:9e:9b:16:d7:cd:6a:06:8d:d9:bd:c9:
b4:3e:f1:55:10:eb:4c:71:e8:2b:88:e3:3d:42:6f:
69:29:13:66:26:93:0e:c8:fa:55:74:3e:78:56:d1:
57:32:85:9c:2b:eb:37:3c:96:2f:8e:a4:df:1a:7f:
7d:e0:2b:f7:35:37:f7:41:f5:00:95:77:df:80:28:
d5:85:64:06:4b:b5:8c:0b:ea:90:76:a4:f2:c7:85:
16:83:5b:5c:78:d6:9d:2b:d2:91:40:fc:15:ea:73:
3a:85:fd:66:3d:0f:7c:a2:db:67:51:88:b9:e7:7c:
8f:c0:f2:d6:0a:34:80:37:44:b4:b9:5b:28:db:d5:
a4:9e:67:d5:0d:df:69:13:2f:d9:97:40:13:88:5e:
2d:3e:f6:c6:79:25:ed:85:0d:77:e4:e3:c3:ab:41:
34:a8:79:12:ec:a3:b5:8c:57:8a:21:8b:82:89:af:
ea:f0:78:94:70:90:3d:17:5a:bd:e6:3a:da:0f:45:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:29:6C:F9:F9:D9:79:CF:3E:68:A2:15:04:D0:59:5F:CB:DB:7A
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/FBUpbPn52XnPPmiiFQTQWV_L23o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.36.0/22
IPv6:
2a03:9f60::/32
Signature Algorithm: sha256WithRSAEncryption
40:6b:cf:d0:4e:36:36:5c:5e:4f:27:94:3d:19:94:b2:20:f7:
28:a9:87:17:0c:48:d6:e0:8e:7a:3b:45:ca:d3:94:d9:8b:fe:
c5:bc:f4:e5:f3:64:92:8b:0e:e6:82:ee:93:8e:0d:21:37:eb:
3a:53:02:80:f0:26:62:d7:c3:2c:ec:15:e0:fd:38:90:22:c7:
23:4c:23:5c:1e:ba:e2:9d:01:f6:75:00:19:0d:6f:ec:35:1e:
b4:6a:c0:12:53:30:07:5c:f8:3d:fd:53:66:1b:fa:68:02:c7:
72:ec:e3:fe:f3:b5:8a:55:aa:38:66:2a:83:8e:f9:af:f9:c8:
cb:f2:7b:c0:0e:0b:04:03:32:2f:97:40:27:b4:43:19:c8:dc:
f5:51:ad:c2:eb:a3:05:4f:7f:ea:76:f1:43:e1:e9:c7:80:5b:
df:8e:e9:3f:d7:2f:a2:cd:47:32:30:65:dc:d7:0b:61:87:57:
8f:e3:24:f3:ba:4b:2f:bb:7c:5d:4f:80:aa:87:87:07:7c:03:
1d:6d:bb:18:b1:93:61:f1:9e:c5:14:79:cf:05:02:fc:44:77:
13:7f:9a:7f:76:a6:62:7e:45:d9:c9:d6:cd:72:a9:b2:49:63:
c4:10:2a:07:7b:da:6d:ef:58:fc:72:8a:ab:cd:66:c7:c5:f0:
6d:24:43:66
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEE33R3zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NmM0NGI4MjFhYjVkYjU0MmNjNTM2YzFmODhiODRiYWYwNjIxNjU0MB4XDTIyMDEw
MTExMDUxMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQxNTI5NmNmOWY5
ZDk3OWNmM2U2OGEyMTUwNGQwNTk1ZmNiZGI3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKN+bxMBG+yaJMJz/dbtskS8yAKntvD7BOrtvzaSyNXMBusF
40YAUP8nA31NDFjpM8QRN+6IeDBZaV0tYq4zmJ6bFtfNagaN2b3JtD7xVRDrTHHo
K4jjPUJvaSkTZiaTDsj6VXQ+eFbRVzKFnCvrNzyWL46k3xp/feAr9zU390H1AJV3
34Ao1YVkBku1jAvqkHak8seFFoNbXHjWnSvSkUD8FepzOoX9Zj0PfKLbZ1GIued8
j8Dy1go0gDdEtLlbKNvVpJ5n1Q3faRMv2ZdAE4heLT72xnkl7YUNd+Tjw6tBNKh5
EuyjtYxXiiGLgomv6vB4lHCQPRdaveY62g9FMKkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQUFSls+fnZec8+aKIVBNBZX8vbejAfBgNVHSMEGDAWgBQGxEuCGrXbVCzF
NsH4i4S68GIWVDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JzUkxnaHExMjFRc3hUYkItSXVFdXZCaUZsUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDIvNzljZWY4LTQzYTEtNDA4OS04MDlmLWRjOTg0MjY1NTY3ZC8x
L0ZCVXBiUG41MlhuUFBtaWlGUVRRV1ZfTDIzby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIv
NzljZWY4LTQzYTEtNDA4OS04MDlmLWRjOTg0MjY1NTY3ZC8xL0JzUkxnaHExMjFR
c3hUYkItSXVFdXZCaUZsUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmAJDANBAIAAjAHAwUAKgOfYDAN
BgkqhkiG9w0BAQsFAAOCAQEAQGvP0E42NlxeTyeUPRmUsiD3KKmHFwxI1uCOejtF
ytOU2Yv+xbz05fNkkosO5oLuk44NITfrOlMCgPAmYtfDLOwV4P04kCLHI0wjXB66
4p0B9nUAGQ1v7DUetGrAElMwB1z4Pf1TZhv6aALHcuzj/vO1ilWqOGYqg475r/nI
y/J7wA4LBAMyL5dAJ7RDGcjc9VGtwuujBU9/6nbxQ+Hpx4Bb347pP9cvos1HMjBl
3NcLYYdXj+Mk87pLL7t8XU+AqoeHB3wDHW27GLGTYfGexRR5zwUC/ER3E3+af3am
Yn5F2cnWzXKpskljxBAqB3vabe9Y/HKKq81mx8XwbSRDZg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:05 2024 by rpki-client on console-fra.rpki-client.org