Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/1-6cuisNtyJKXCcCwOmAMLyK0zg8.roa
File: 1-6cuisNtyJKXCcCwOmAMLyK0zg8.roa (raw, json)
Hash identifier: HrstftSZ3TB6LQ1rXvQLG+XqcVsIx67qJWSpUPKopDU=
Subject key identifier: FB:A7:2E:8A:C3:6D:C8:92:97:09:C0:B0:3A:60:0C:2F:22:B4:CE:0F
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 09129734
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/1-6cuisNtyJKXCcCwOmAMLyK0zg8.roa
Signing time: Sat 01 Jan 2022 10:57:52 +0000
ROA not before: Sat 01 Jan 2022 10:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202814
IP address blocks: 171.22.140.0/22 maxlen: 24
185.139.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152213300 (0x9129734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Jan 1 10:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fba72e8ac36dc8929709c0b03a600c2f22b4ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a0:de:f8:fd:fc:48:5f:b7:9c:8d:c0:ac:88:
f0:a6:55:ff:83:68:2e:a6:e1:5e:cc:d4:2c:2b:58:
89:8c:51:6f:ad:be:57:db:c7:29:1e:82:ff:93:ee:
99:53:61:da:3c:27:ac:af:77:85:51:aa:41:27:47:
6d:1c:67:7c:f7:fd:d0:1b:9a:11:ca:c1:97:e4:b3:
6f:2e:0c:f6:f4:b9:7b:65:6e:66:f7:da:95:0e:93:
62:1a:e1:ae:02:b6:6a:34:08:4a:7e:62:3a:01:80:
51:5f:18:55:bd:c3:be:46:1e:38:cd:66:04:1b:42:
3f:76:66:11:e7:ee:45:7f:41:f7:19:d3:2a:fc:f1:
be:ae:14:2b:39:8b:da:6e:bb:1a:f1:74:67:35:ba:
7e:b2:1e:96:0d:50:5f:75:47:9b:f9:e2:9b:45:e9:
37:fa:59:94:10:44:cc:2f:aa:cd:8c:f0:7f:ac:44:
d9:e9:d3:29:d8:0c:16:a8:48:46:31:b3:df:bd:1e:
55:6b:33:1b:94:1c:a8:54:b7:f3:cf:76:4b:93:5e:
a0:4c:62:4e:55:81:6a:23:02:f7:53:18:49:9f:e2:
74:9f:05:47:47:54:01:4d:9a:b3:7c:51:16:73:30:
fb:15:12:5b:44:b5:9b:90:c5:27:f2:7e:f7:6b:11:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A7:2E:8A:C3:6D:C8:92:97:09:C0:B0:3A:60:0C:2F:22:B4:CE:0F
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/1-6cuisNtyJKXCcCwOmAMLyK0zg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.140.0/22
185.139.192.0/22
Signature Algorithm: sha256WithRSAEncryption
15:88:99:04:28:c9:c0:59:79:d1:47:53:99:20:8e:ec:0f:5b:
03:8d:e2:6b:74:5e:88:81:6a:fd:75:52:59:ea:a4:dc:33:df:
0d:2b:54:1c:89:51:ce:d5:a4:4a:ce:76:7b:cd:1d:78:54:67:
ab:e8:7d:ab:b3:be:4e:02:de:d1:c0:3e:97:69:78:38:ec:59:
43:93:fe:20:37:1c:fc:24:1e:0f:00:6a:60:50:90:c8:1a:cf:
13:ff:4e:c9:f1:2f:7b:f9:32:fd:27:6e:38:af:c8:60:8d:65:
8f:52:e3:e8:81:b4:18:7f:0e:f7:3f:be:a3:8c:a7:e9:95:b2:
e2:b6:49:4f:05:85:9e:86:8a:01:dc:58:f8:d3:3b:0a:ab:20:
95:ac:9c:2d:47:e3:7b:18:22:71:52:d5:71:8e:ce:0e:91:c9:
01:58:18:df:84:d7:c0:92:5c:4f:86:84:7f:bf:4e:42:82:73:
a4:1e:48:4d:bf:f4:27:ce:7f:53:53:fd:6a:e7:91:44:60:9c:
5a:eb:ee:89:ef:db:da:69:77:33:dc:2d:88:e2:94:4d:f2:f0:
02:63:23:74:a5:0d:6b:ac:f5:28:ae:20:96:6c:bc:a5:6a:f6:
b9:3c:d5:61:9f:5d:06:b4:3c:ef:e1:a0:0f:ec:dd:82:ee:b4:
51:b3:65:fb
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIECRKXNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Y2Y5YWRhOWIyOGI2OTk3ZmRhMWM0NjhhOGQ4Njk2Mzg0MDdhMGJiMB4XDTIyMDEw
MTEwNTc1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmJhNzJlOGFjMzZk
Yzg5Mjk3MDljMGIwM2E2MDBjMmYyMmI0Y2UwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCg3vj9/Ehft5yNwKyI8KZV/4NoLqbhXszULCtYiYxRb62+
V9vHKR6C/5PumVNh2jwnrK93hVGqQSdHbRxnfPf90BuaEcrBl+Szby4M9vS5e2Vu
ZvfalQ6TYhrhrgK2ajQISn5iOgGAUV8YVb3DvkYeOM1mBBtCP3ZmEefuRX9B9xnT
Kvzxvq4UKzmL2m67GvF0ZzW6frIelg1QX3VHm/nim0XpN/pZlBBEzC+qzYzwf6xE
2enTKdgMFqhIRjGz370eVWszG5QcqFS38892S5NeoExiTlWBaiMC91MYSZ/idJ8F
R0dUAU2as3xRFnMw+xUSW0S1m5DFJ/J+92sR31kCAwEAAaOCAhAwggIMMB0GA1Ud
DgQWBBT7py6Kw23IkpcJwLA6YAwvIrTODzAfBgNVHSMEGDAWgBT8+a2psotpl/2h
xGio2GljhAeguzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19QbXRxYktMYVpmOW9jUm9xTmhwWTRRSG9Mcy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvN2E5NmQxLWNmMWItNGY0Ny05M2VlLTI1OWZlMTc1MGVlYi8x
LzEtNmN1aXNOdHlKS1hDY0N3T21BTUx5SzB6Zzgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUx
LzdhOTZkMS1jZjFiLTRmNDctOTNlZS0yNTlmZTE3NTBlZWIvMS9fUG10cWJLTGFa
ZjlvY1JvcU5ocFk0UUhvTHMuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
JQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAKrFowDBAK5i8AwDQYJKoZIhvcN
AQELBQADggEBABWImQQoycBZedFHU5kgjuwPWwON4mt0XoiBav11UlnqpNwz3w0r
VByJUc7VpErOdnvNHXhUZ6vofauzvk4C3tHAPpdpeDjsWUOT/iA3HPwkHg8AamBQ
kMgazxP/TsnxL3v5Mv0nbjivyGCNZY9S4+iBtBh/Dvc/vqOMp+mVsuK2SU8FhZ6G
igHcWPjTOwqrIJWsnC1H43sYInFS1XGOzg6RyQFYGN+E18CSXE+GhH+/TkKCc6Qe
SE2/9CfOf1NT/WrnkURgnFrr7onv29ppdzPcLYjilE3y8AJjI3SlDWus9SiuIJZs
vKVq9rk81WGfXQa0PO/hoA/s3YLutFGzZfs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org