Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FR58U9H732y1WsmTZDOLxmJ4Ny0.roa
File: FR58U9H732y1WsmTZDOLxmJ4Ny0.roa (raw, json)
Hash identifier: gzfeJEsW66uYoGmzZcgXYbnoESJAZbnwE3auZhpHwbU=
Subject key identifier: 15:1E:7C:53:D1:FB:DF:6C:B5:5A:C9:93:64:33:8B:C6:62:78:37:2D
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 1513B7F2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FR58U9H732y1WsmTZDOLxmJ4Ny0.roa
Signing time: Wed 25 May 2022 13:27:58 +0000
ROA not before: Wed 25 May 2022 13:27:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
45.146.240.0/22 maxlen: 24
5.226.48.0/21 maxlen: 24
46.249.104.0/21 maxlen: 21
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353613810 (0x1513b7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 25 13:27:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151e7c53d1fbdf6cb55ac99364338bc66278372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:3e:27:64:96:90:ac:cf:ca:0b:a5:f7:73:
70:55:c5:05:ec:9e:91:6f:e0:9a:eb:98:7f:f7:89:
ea:50:ce:97:62:88:aa:12:43:03:91:2e:23:b3:66:
43:9d:7f:7d:1e:28:4e:6a:33:3c:59:75:25:c9:2b:
99:bb:37:a0:b7:17:1f:46:8a:cf:23:90:14:fb:49:
f7:52:3e:e1:4e:c3:5f:57:2b:00:c1:e1:bc:f9:a0:
a7:2b:73:d8:be:80:e5:dc:1b:aa:d5:9c:e0:c5:80:
2b:f6:ff:93:bc:70:17:a4:86:01:e7:0c:cd:28:0f:
e5:97:8d:06:e3:a2:b5:7d:07:2e:bb:7d:1a:08:59:
de:a5:d4:bd:95:96:d2:16:99:b4:e0:11:bd:55:d8:
dd:6c:5e:86:44:4f:8f:3a:bd:d0:d5:d0:bf:d0:05:
4c:de:fe:cf:ef:49:9a:19:1f:1c:68:2a:8f:65:bf:
bc:94:64:85:e0:0a:0c:b5:52:5c:03:3c:f0:48:e3:
64:84:f1:56:87:ef:e9:56:14:a3:16:c3:85:e4:81:
cd:f2:06:3d:c8:fa:e4:11:b7:a2:fb:d4:4c:56:f4:
2c:cd:e9:aa:40:90:e9:f5:ba:01:c8:84:f8:c0:2a:
1e:51:8d:8c:cb:15:b2:ab:0e:33:b7:ef:ce:53:c6:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:7C:53:D1:FB:DF:6C:B5:5A:C9:93:64:33:8B:C6:62:78:37:2D
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/FR58U9H732y1WsmTZDOLxmJ4Ny0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.48.0/21
45.146.240.0/22
46.249.104.0-46.249.119.255
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
67:cc:7d:f9:30:14:b9:10:08:71:f4:52:18:16:72:bb:ac:5b:
42:8c:fa:a4:36:4e:c3:f3:3a:53:f6:6a:a6:48:5e:c4:b1:a8:
3c:09:b8:65:16:6b:5f:82:27:a6:dd:63:3f:d9:b2:29:1b:2f:
f2:b0:6d:5d:b5:30:90:bc:e4:ef:09:1e:81:fc:51:d7:6e:36:
c8:b2:27:f1:58:5b:fe:97:7a:e3:74:34:aa:99:c4:03:da:46:
79:73:8c:96:98:8c:a3:86:46:d3:42:79:22:b3:dc:05:64:b2:
64:4c:d2:0f:fd:32:36:28:19:52:97:45:f7:10:8f:44:d6:98:
a9:d0:eb:68:ff:95:03:d9:1e:8f:dd:be:06:51:34:81:15:d5:
61:f9:bf:ad:2d:7e:1f:43:96:c7:4a:c5:7e:f5:40:08:6e:97:
3b:f7:a0:20:86:45:3a:fd:0a:f6:7e:60:ba:69:82:ea:84:37:
bd:f1:ac:80:44:39:3a:e3:09:2a:76:4e:05:a9:f8:71:ae:ca:
f0:72:39:c9:4e:12:fc:9f:8e:8e:ae:e6:12:50:a5:e0:14:e9:
e0:79:2a:b5:53:9a:0d:ae:e5:4b:11:d0:f9:6c:50:f3:ae:c3:
6f:46:62:3c:8e:5f:a2:35:03:3e:09:2e:16:3f:d9:40:73:4b:
07:78:22:5a
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIEFRO38jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
YWMzZGFhMWIxNDg1MGYyZTYxYzU5MmIyMTkxOTE1YTVlNjVhNDc4MB4XDTIyMDUy
NTEzMjc1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTUxZTdjNTNkMWZi
ZGY2Y2I1NWFjOTkzNjQzMzhiYzY2Mjc4MzcyZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIyEPidklpCsz8oLpfdzcFXFBeyekW/gmuuYf/eJ6lDOl2KI
qhJDA5EuI7NmQ51/fR4oTmozPFl1Jckrmbs3oLcXH0aKzyOQFPtJ91I+4U7DX1cr
AMHhvPmgpytz2L6A5dwbqtWc4MWAK/b/k7xwF6SGAecMzSgP5ZeNBuOitX0HLrt9
GghZ3qXUvZWW0haZtOARvVXY3WxehkRPjzq90NXQv9AFTN7+z+9JmhkfHGgqj2W/
vJRkheAKDLVSXAM88EjjZITxVofv6VYUoxbDheSBzfIGPcj65BG3ovvUTFb0LM3p
qkCQ6fW6AciE+MAqHlGNjMsVsqsOM7fvzlPGW+sCAwEAAaOCAjUwggIxMB0GA1Ud
DgQWBBQVHnxT0fvfbLVayZNkM4vGYng3LTAfBgNVHSMEGDAWgBQqw9qhsUhQ8uYc
WSshkZFaXmWkeDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tzUGFvYkZJVVBMbUhGa3JJWkdSV2w1bHBIZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzAvNDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8x
L0ZSNThVOUg3MzJ5MVdzbVRaRE9MeG1KNE55MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAv
NDA1YmJkLTU5MTMtNGU5NS04ZTc1LWZlMDY1OTE3NmE1Ni8xL0tzUGFvYkZJVVBM
bUhGa3JJWkdSV2w1bHBIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL
BggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMgMEAwXiMAMEAi2S8DAMAwQDLvloAwQD
LvlwAwQCuYFsAwQCudzsAwQAvNGbAwQC1FpkMA0GCSqGSIb3DQEBCwUAA4IBAQBn
zH35MBS5EAhx9FIYFnK7rFtCjPqkNk7D8zpT9mqmSF7Esag8CbhlFmtfgiem3WM/
2bIpGy/ysG1dtTCQvOTvCR6B/FHXbjbIsifxWFv+l3rjdDSqmcQD2kZ5c4yWmIyj
hkbTQnkis9wFZLJkTNIP/TI2KBlSl0X3EI9E1pip0Oto/5UD2R6P3b4GUTSBFdVh
+b+tLX4fQ5bHSsV+9UAIbpc796AghkU6/Qr2fmC6aYLqhDe98ayARDk64wkqdk4F
qfhxrsrwcjnJThL8n46OruYSUKXgFOngeSq1U5oNruVLEdD5bFDzrsNvRmI8jl+i
NQM+CS4WP9lAc0sHeCJa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org