Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/FvmEd8YFlR8LRVx1PDEVkTI_IKQ.roa
File: FvmEd8YFlR8LRVx1PDEVkTI_IKQ.roa (raw, json)
Hash identifier: kjD5IZ5u29HJeW6JTrEazIJ2Qyv0hPQi6OKGpEO7c/I=
Subject key identifier: 16:F9:84:77:C6:05:95:1F:0B:45:5C:75:3C:31:15:91:32:3F:20:A4
Certificate issuer: /CN=77a53d2e97704dbea831a6440072904ee91a71b0
Certificate serial: 037F454F
Authority key identifier: 77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/FvmEd8YFlR8LRVx1PDEVkTI_IKQ.roa
Signing time: Sat 01 Jan 2022 10:53:47 +0000
ROA not before: Sat 01 Jan 2022 10:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42510
IP address blocks: 193.200.69.0/24 maxlen: 24
193.200.68.0/24 maxlen: 24
193.200.68.0/23 maxlen: 23
176.103.64.0/21 maxlen: 21
176.103.64.0/22 maxlen: 22
176.103.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58672463 (0x37f454f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a53d2e97704dbea831a6440072904ee91a71b0
Validity
Not Before: Jan 1 10:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16f98477c605951f0b455c753c311591323f20a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:09:29:60:6a:17:99:ba:95:32:48:bc:32:
38:72:6f:72:27:7b:4b:4d:2f:95:18:b9:0c:b9:e9:
1c:ca:4a:07:a2:2a:6a:cc:c4:e3:d7:31:e4:e3:e0:
bb:6a:10:60:7d:ed:b4:d1:87:c6:54:5c:5a:9e:a1:
30:60:c8:9f:fe:d8:58:3b:45:af:04:55:05:96:fb:
01:38:ef:9a:19:28:1b:38:69:aa:7f:6a:88:d0:d2:
02:d7:aa:84:54:07:ee:6d:39:e8:c0:b0:a2:f6:e6:
29:ad:02:fc:64:be:d0:6b:d3:8d:41:c1:5e:d4:99:
df:4a:7b:f3:30:30:e3:77:7b:f6:07:ba:fb:2d:15:
a0:2c:de:f8:a8:af:52:f5:42:f3:c3:9e:b6:fe:a6:
8f:ef:af:95:84:da:dc:59:3d:9f:65:91:f9:8b:cf:
41:7f:84:f8:70:bf:ee:a3:97:b1:80:5e:64:96:3e:
1a:cc:e4:9a:a3:1c:c8:c3:dc:e2:c9:f6:d3:fb:b7:
0d:9b:fa:99:b3:3e:20:e1:f9:af:44:4b:ad:ea:ad:
55:53:07:12:2e:76:ea:79:b5:bd:5a:5f:17:7f:d7:
d2:9e:67:5a:27:21:23:f5:ef:b5:d3:37:72:8f:74:
d1:1e:88:82:08:71:4f:e8:e9:3a:6e:bf:2c:44:d0:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F9:84:77:C6:05:95:1F:0B:45:5C:75:3C:31:15:91:32:3F:20:A4
X509v3 Authority Key Identifier:
keyid:77:A5:3D:2E:97:70:4D:BE:A8:31:A6:44:00:72:90:4E:E9:1A:71:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6U9LpdwTb6oMaZEAHKQTukacbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/FvmEd8YFlR8LRVx1PDEVkTI_IKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/034971-b4da-4ba4-8d6e-d3c8a48f7a32/1/d6U9LpdwTb6oMaZEAHKQTukacbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.64.0/21
193.200.68.0/23
Signature Algorithm: sha256WithRSAEncryption
99:4f:5d:af:bb:0d:be:b4:38:a7:a8:3d:2b:86:00:a1:4f:d2:
db:20:89:88:e7:3c:85:84:a2:89:12:bc:b4:ee:e9:e3:b7:d6:
80:69:4c:29:94:d6:fb:ed:59:d8:cc:98:af:25:a7:66:7c:ea:
71:59:ac:91:91:7e:eb:aa:26:58:b9:52:e3:7a:15:92:ce:10:
97:9b:2d:bb:0e:4d:48:50:78:94:a0:61:75:40:af:49:72:c8:
1a:87:87:c1:86:13:0d:05:2f:4b:c7:7d:55:2a:c9:65:e6:aa:
26:0b:58:23:a8:57:e3:18:60:b8:e1:5d:07:c3:96:de:b7:80:
4e:0c:8d:b7:7c:9a:50:ca:78:d4:df:1f:91:61:87:1d:22:6a:
42:d8:85:f5:63:9e:f1:fb:04:8d:ab:92:d9:ee:c5:39:bd:1c:
d0:4c:e0:6b:c6:f2:08:4f:e1:b0:4b:60:db:be:b5:56:77:43:
67:58:98:50:91:b6:51:85:bf:00:de:67:49:d2:7c:06:84:dc:
d4:85:a6:a7:89:65:66:53:78:a1:7a:d1:38:78:03:f7:6c:90:
30:7d:0f:bf:cd:99:a7:92:79:d1:e9:64:3f:04:53:3f:27:e9:
63:04:7f:3d:d1:e9:7f:f0:84:9e:6d:46:18:ab:49:ad:21:77:
9f:40:d6:18
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEA39FTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2E1M2QyZTk3NzA0ZGJlYTgzMWE2NDQwMDcyOTA0ZWU5MWE3MWIwMB4XDTIyMDEw
MTEwNTM0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZmOTg0NzdjNjA1
OTUxZjBiNDU1Yzc1M2MzMTE1OTEzMjNmMjBhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRiCSlgaheZupUySLwyOHJvcid7S00vlRi5DLnpHMpKB6Iq
aszE49cx5OPgu2oQYH3ttNGHxlRcWp6hMGDIn/7YWDtFrwRVBZb7ATjvmhkoGzhp
qn9qiNDSAteqhFQH7m056MCwovbmKa0C/GS+0GvTjUHBXtSZ30p78zAw43d79ge6
+y0VoCze+KivUvVC88Oetv6mj++vlYTa3Fk9n2WR+YvPQX+E+HC/7qOXsYBeZJY+
GszkmqMcyMPc4sn20/u3DZv6mbM+IOH5r0RLreqtVVMHEi526nm1vVpfF3/X0p5n
WichI/XvtdM3co900R6IgghxT+jpOm6/LETQLzkCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQW+YR3xgWVHwtFXHU8MRWRMj8gpDAfBgNVHSMEGDAWgBR3pT0ul3BNvqgx
pkQAcpBO6RpxsDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2Q2VTlMcGR3VGI2b01hWkVBSEtRVHVrYWNiQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmYvMDM0OTcxLWI0ZGEtNGJhNC04ZDZlLWQzYzhhNDhmN2EzMi8x
L0Z2bUVkOFlGbFI4TFJWeDFQREVWa1RJX0lLUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmYv
MDM0OTcxLWI0ZGEtNGJhNC04ZDZlLWQzYzhhNDhmN2EzMi8xL2Q2VTlMcGR3VGI2
b01hWkVBSEtRVHVrYWNiQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEA7BnQAMEAcHIRDANBgkqhkiG9w0B
AQsFAAOCAQEAmU9dr7sNvrQ4p6g9K4YAoU/S2yCJiOc8hYSiiRK8tO7p47fWgGlM
KZTW++1Z2MyYryWnZnzqcVmskZF+66omWLlS43oVks4Ql5stuw5NSFB4lKBhdUCv
SXLIGoeHwYYTDQUvS8d9VSrJZeaqJgtYI6hX4xhguOFdB8OW3reATgyNt3yaUMp4
1N8fkWGHHSJqQtiF9WOe8fsEjauS2e7FOb0c0Ezga8byCE/hsEtg2761VndDZ1iY
UJG2UYW/AN5nSdJ8BoTc1IWmp4llZlN4oXrROHgD92yQMH0Pv82Zp5J50elkPwRT
PyfpYwR/PdHpf/CEnm1GGKtJrSF3n0DWGA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:18 2024 by rpki-client on console-fra.rpki-client.org