Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/fayA07J-FeDKqHGZnOp2IQIGaE4.roa
File: fayA07J-FeDKqHGZnOp2IQIGaE4.roa (raw, json)
Hash identifier: /+D3JUUyYW8bxG9U2foZbjasfP0ZIQjg8uV70RsIivM=
Subject key identifier: 7D:AC:80:D3:B2:7E:15:E0:CA:A8:71:99:9C:EA:76:21:02:06:68:4E
Certificate issuer: /CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Certificate serial: 0E55B2D4
Authority key identifier: B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/fayA07J-FeDKqHGZnOp2IQIGaE4.roa
Signing time: Sat 01 Jan 2022 16:02:30 +0000
ROA not before: Sat 01 Jan 2022 16:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61094
IP address blocks: 185.103.216.0/22 maxlen: 24
185.111.190.0/23 maxlen: 24
2a02:e220::/30 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240497364 (0xe55b2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8155ac34b6ec15f226ae9913d6aecfca7a784d4
Validity
Not Before: Jan 1 16:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dac80d3b27e15e0caa871999cea76210206684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:5d:70:50:6e:22:dc:77:8d:a1:dd:0f:a9:
bc:85:94:1a:92:e8:08:59:d6:ca:8d:0f:d0:d5:e1:
eb:34:04:df:02:1a:8f:e7:f2:5f:a8:76:a9:c0:61:
e8:61:a9:9a:08:0c:96:07:6e:da:45:83:90:e7:51:
51:f4:0c:ff:64:c8:cc:dd:a1:28:a8:93:47:9e:f2:
ff:10:77:3d:fb:06:76:80:2e:01:a2:08:c1:44:d3:
c2:38:19:9d:69:7c:17:ac:d5:4b:0f:e3:c0:9f:c4:
02:d6:ac:de:72:e1:2c:c4:c3:69:9c:9d:73:f6:8f:
aa:83:d0:8c:b7:7e:74:b0:c4:30:f8:6e:b0:c1:57:
15:0b:85:78:d7:2e:b6:ab:94:35:51:08:7a:72:f7:
ba:b6:16:3f:08:1b:8c:43:89:fe:7a:7d:7f:5d:f5:
7c:29:20:4d:bb:8c:41:49:fa:a0:17:52:d1:78:fe:
5e:2a:0e:57:4e:b1:7b:43:f4:13:d3:12:85:32:cb:
cd:dd:28:d9:21:73:9a:e6:41:80:9b:a7:c7:5f:59:
b5:8f:19:b7:a6:f8:83:56:bc:0d:69:ec:cc:c6:be:
4f:7f:98:71:ef:8e:e8:a9:12:ed:1f:4c:02:0d:87:
2d:0d:9a:35:53:b2:61:51:13:7e:91:72:14:17:af:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AC:80:D3:B2:7E:15:E0:CA:A8:71:99:9C:EA:76:21:02:06:68:4E
X509v3 Authority Key Identifier:
keyid:B8:15:5A:C3:4B:6E:C1:5F:22:6A:E9:91:3D:6A:EC:FC:A7:A7:84:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBVaw0tuwV8iaumRPWrs_KenhNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/fayA07J-FeDKqHGZnOp2IQIGaE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/62a01d-feec-40fd-98ed-bc8c6d286f1c/1/uBVaw0tuwV8iaumRPWrs_KenhNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.216.0/22
185.111.190.0/23
IPv6:
2a02:e220::/30
Signature Algorithm: sha256WithRSAEncryption
21:bc:f5:67:e0:e2:61:e0:c0:66:b6:99:78:d4:52:59:a6:60:
0c:ee:c1:8c:14:33:6a:7d:86:f6:02:2a:7a:86:e1:40:3e:b8:
46:5d:c1:29:a1:60:bc:62:ad:27:2d:c1:02:c0:19:45:16:10:
05:5a:d8:2e:12:90:32:4d:19:cb:aa:86:e3:3d:0b:0f:63:62:
17:20:84:0a:58:63:fe:3b:a8:08:bd:f0:c1:61:cb:7f:64:06:
6f:e1:ea:f9:86:0a:d6:88:55:f5:c2:6d:58:2b:93:fd:f2:f2:
36:25:b0:5d:5e:27:69:17:48:c9:dc:e1:c0:70:1b:dd:82:84:
b2:aa:43:29:d7:87:21:0f:02:0f:b8:28:59:f9:b3:0f:3b:5d:
1e:44:cc:8a:f8:09:98:eb:2b:8a:a1:7e:cc:56:ab:5d:1d:eb:
e3:f1:87:28:b1:95:4c:7d:05:97:ef:fa:42:fe:d6:bc:ad:30:
70:d6:7b:84:a1:f3:bd:f6:6a:37:03:0d:44:bd:e8:4e:b4:85:
ab:2d:25:b2:2f:60:60:6a:40:14:f7:75:c2:68:e8:2b:9e:44:
23:3c:20:ef:26:ef:6a:c6:2c:d9:20:c2:d6:a5:08:da:39:fe:
2f:e8:99:a2:76:af:1c:80:76:cc:54:06:f0:81:d8:7e:33:75:
5b:63:ab:52
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDlWy1DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
ODE1NWFjMzRiNmVjMTVmMjI2YWU5OTEzZDZhZWNmY2E3YTc4NGQ0MB4XDTIyMDEw
MTE2MDIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2RhYzgwZDNiMjdl
MTVlMGNhYTg3MTk5OWNlYTc2MjEwMjA2Njg0ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKo5XXBQbiLcd42h3Q+pvIWUGpLoCFnWyo0P0NXh6zQE3wIa
j+fyX6h2qcBh6GGpmggMlgdu2kWDkOdRUfQM/2TIzN2hKKiTR57y/xB3PfsGdoAu
AaIIwUTTwjgZnWl8F6zVSw/jwJ/EAtas3nLhLMTDaZydc/aPqoPQjLd+dLDEMPhu
sMFXFQuFeNcutquUNVEIenL3urYWPwgbjEOJ/np9f131fCkgTbuMQUn6oBdS0Xj+
XioOV06xe0P0E9MShTLLzd0o2SFzmuZBgJunx19ZtY8Zt6b4g1a8DWnszMa+T3+Y
ce+O6KkS7R9MAg2HLQ2aNVOyYVETfpFyFBevEc8CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBR9rIDTsn4V4MqocZmc6nYhAgZoTjAfBgNVHSMEGDAWgBS4FVrDS27BXyJq
6ZE9auz8p6eE1DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3VCVmF3MHR1d1Y4aWF1bVJQV3JzX0tlbmhOUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvNjJhMDFkLWZlZWMtNDBmZC05OGVkLWJjOGM2ZDI4NmYxYy8x
L2ZheUEwN0otRmVES3FIR1puT3AySVFJR2FFNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
NjJhMDFkLWZlZWMtNDBmZC05OGVkLWJjOGM2ZDI4NmYxYy8xL3VCVmF3MHR1d1Y4
aWF1bVJQV3JzX0tlbmhOUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEArln2AMEAblvvjANBAIAAjAHAwUC
KgLiIDANBgkqhkiG9w0BAQsFAAOCAQEAIbz1Z+DiYeDAZraZeNRSWaZgDO7BjBQz
an2G9gIqeobhQD64Rl3BKaFgvGKtJy3BAsAZRRYQBVrYLhKQMk0Zy6qG4z0LD2Ni
FyCEClhj/juoCL3wwWHLf2QGb+Hq+YYK1ohV9cJtWCuT/fLyNiWwXV4naRdIydzh
wHAb3YKEsqpDKdeHIQ8CD7goWfmzDztdHkTMivgJmOsriqF+zFarXR3r4/GHKLGV
TH0Fl+/6Qv7WvK0wcNZ7hKHzvfZqNwMNRL3oTrSFqy0lsi9gYGpAFPd1wmjoK55E
Izwg7ybvasYs2SDC1qUI2jn+L+iZonavHIB2zFQG8IHYfjN1W2OrUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:45 2024 by rpki-client on console-ams.rpki-client.org