Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/f695E4zqwIX3jAwR4-e5HcUBMBI.roa
File: f695E4zqwIX3jAwR4-e5HcUBMBI.roa (raw, json)
Hash identifier: ppCO3mBXuCswhih/CJgEGIUBLeRYoypJ4DKafogxa/E=
Subject key identifier: 7F:AF:79:13:8C:EA:C0:85:F7:8C:0C:11:E3:E7:B9:1D:C5:01:30:12
Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial: 0183429183F761F09B84207649F5C768EF5B
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/f695E4zqwIX3jAwR4-e5HcUBMBI.roa
Signing time: Thu 15 Sep 2022 19:12:56 +0000
ROA not before: Thu 15 Sep 2022 19:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209549
IP address blocks: 185.149.38.0/24 maxlen: 24
185.149.37.0/24 maxlen: 24
185.149.36.0/24 maxlen: 24
185.149.36.0/22 maxlen: 22
2a0d:b780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:91:83:f7:61:f0:9b:84:20:76:49:f5:c7:68:ef:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Validity
Not Before: Sep 15 19:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7faf79138ceac085f78c0c11e3e7b91dc5013012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7b:7b:b6:10:7d:ed:4a:b4:fb:2e:31:a6:e7:
e4:98:ad:52:30:cf:13:d6:9e:43:ec:30:45:22:48:
bb:8d:d1:48:50:d3:e4:b6:4b:73:ee:7c:13:fc:e1:
44:6c:52:97:2f:20:00:23:e2:e9:03:be:13:5e:42:
01:0d:56:31:92:a4:a5:c2:6b:85:5e:5b:cd:ae:e3:
d4:41:ca:fc:54:fa:a8:15:2a:b7:c3:9a:e8:b6:04:
d2:be:cc:75:2b:61:07:af:71:e0:cc:f2:7f:17:ff:
53:52:2a:f1:b3:70:fb:26:c6:73:2c:a9:6e:df:08:
c5:1a:66:e2:45:56:96:41:93:08:f8:05:38:72:f3:
a9:80:a2:73:e8:62:b4:47:22:3c:6e:9f:27:d6:5a:
56:46:cb:06:c2:ea:a8:41:7a:cc:38:d4:0a:67:33:
11:60:db:27:73:f2:78:1e:86:b5:69:f6:32:35:2c:
70:10:b8:a8:d5:72:bd:1c:4c:37:8e:78:2f:32:d2:
ce:1c:cf:2a:12:2c:f3:13:44:fa:0f:66:98:ca:5b:
53:20:d9:f3:c8:60:c8:17:16:bf:cd:02:ab:7e:20:
54:cd:e1:bf:2f:d1:8b:72:59:9b:84:fb:b8:b8:db:
42:b1:21:87:77:50:b1:79:5b:8b:27:c5:b7:e2:40:
04:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AF:79:13:8C:EA:C0:85:F7:8C:0C:11:E3:E7:B9:1D:C5:01:30:12
X509v3 Authority Key Identifier:
keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/f695E4zqwIX3jAwR4-e5HcUBMBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.36.0/22
IPv6:
2a0d:b780::/29
Signature Algorithm: sha256WithRSAEncryption
05:ff:ab:7a:3f:bc:d1:20:b5:32:31:8a:3a:a3:60:03:68:9e:
d5:b3:19:5c:ff:cd:3e:80:1b:ee:6e:8e:66:22:d9:95:92:b9:
48:02:c6:9c:9e:f7:0a:e7:28:10:de:b6:64:09:28:29:35:45:
07:fe:74:4f:74:ec:ea:c0:62:df:af:49:17:c0:54:72:22:85:
04:97:7e:11:c9:ba:0f:33:55:65:70:0b:28:1a:55:20:4f:04:
78:65:b5:5b:e9:8d:9c:5c:7f:fc:94:3c:59:1f:65:21:c6:2d:
e4:ae:ce:36:22:6e:f5:f7:b1:7c:6c:fb:a3:af:dc:3d:b0:8c:
37:12:13:f9:f5:fc:d4:03:a6:67:a1:eb:cf:f6:a8:e9:80:f4:
6b:65:bb:a8:3c:cd:d5:f4:17:5a:1c:1e:64:05:29:82:67:10:
dd:7c:0d:45:e3:35:ce:ca:be:c1:96:02:f8:f7:60:0a:6a:f6:
0f:58:ac:1a:74:81:28:47:69:4f:9d:9d:33:55:4c:89:d4:f2:
a3:6b:b6:a5:e0:a1:da:81:3f:97:f9:32:e7:44:da:d6:05:a3:
99:38:d9:0e:6e:7a:f4:6e:bd:ab:12:49:4a:29:0f:d2:8b:a1:
c3:31:3c:45:22:48:95:cf:1d:ac:d9:b9:c4:d2:18:a3:13:21:
47:64:4f:17
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYNCkYP3YfCbhCB2SfXHaO9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YWIzZTcyZjczNDBkYTg1NmU5M2Q2MmVlOGQwMjNmMWQ3
YzhlZTcwHhcNMjIwOTE1MTkxMjU2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmFmNzkxMzhjZWFjMDg1Zjc4YzBjMTFlM2U3YjkxZGM1MDEzMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHt7thB97Uq0+y4xpufkmK1SMM8T
1p5D7DBFIki7jdFIUNPktktz7nwT/OFEbFKXLyAAI+LpA74TXkIBDVYxkqSlwmuF
XlvNruPUQcr8VPqoFSq3w5rotgTSvsx1K2EHr3HgzPJ/F/9TUirxs3D7JsZzLKlu
3wjFGmbiRVaWQZMI+AU4cvOpgKJz6GK0RyI8bp8n1lpWRssGwuqoQXrMONQKZzMR
YNsnc/J4Hoa1afYyNSxwELio1XK9HEw3jngvMtLOHM8qEizzE0T6D2aYyltTINnz
yGDIFxa/zQKrfiBUzeG/L9GLclmbhPu4uNtCsSGHd1CxeVuLJ8W34kAEzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH+veROM6sCF94wMEePnuR3FATASMB8GA1UdIwQY
MBaAFBWrPnL3NA2oVuk9Yu6NAj8dfI7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YzEzMGItZTE1ZS00YjZkLWI1ZmIt
NzE5YjA0OTdlN2NjLzEvZjY5NUU0enF3SVgzakF3UjQtZTVIY1VCTUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85YzEzMGItZTE1ZS00YjZkLWI1ZmItNzE5YjA0OTdlN2Nj
LzEvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZUkMA0E
AgACMAcDBQMqDbeAMA0GCSqGSIb3DQEBCwUAA4IBAQAF/6t6P7zRILUyMYo6o2AD
aJ7Vsxlc/80+gBvubo5mItmVkrlIAsacnvcK5ygQ3rZkCSgpNUUH/nRPdOzqwGLf
r0kXwFRyIoUEl34RyboPM1VlcAsoGlUgTwR4ZbVb6Y2cXH/8lDxZH2Uhxi3krs42
Im7197F8bPujr9w9sIw3EhP59fzUA6ZnoevP9qjpgPRrZbuoPM3V9BdaHB5kBSmC
ZxDdfA1F4zXOyr7BlgL492AKavYPWKwadIEoR2lPnZ0zVUyJ1PKja7al4KHagT+X
+TLnRNrWBaOZONkObnr0br2rEklKKQ/Si6HDMTxFIkiVzx2s2bnE0hijEyFHZE8X
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:37 2023 by rpki-client on console-fra.rpki-client.org