Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/fLFViRusaKL1cUToJMV39vM-NzI.roa
File: fLFViRusaKL1cUToJMV39vM-NzI.roa (raw, json)
Hash identifier: zdrFxb7QQHtT/l961l3ria7/fAEu6j1YlegAz4RZI8c=
Subject key identifier: 7C:B1:55:89:1B:AC:68:A2:F5:71:44:E8:24:C5:77:F6:F3:3E:37:32
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 0182411B91BDD31334E989140B0D979AE7DD
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/fLFViRusaKL1cUToJMV39vM-NzI.roa
Signing time: Wed 27 Jul 2022 19:21:41 +0000
ROA not before: Wed 27 Jul 2022 19:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 195.8.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:41:1b:91:bd:d3:13:34:e9:89:14:0b:0d:97:9a:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jul 27 19:21:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cb155891bac68a2f57144e824c577f6f33e3732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d9:d2:e2:89:e7:c0:65:54:b0:5d:96:9d:fc:
83:b3:c5:1c:4f:42:bf:13:36:87:e1:1c:5d:ce:71:
60:c2:c6:51:18:12:da:5c:ff:97:49:ae:dd:bd:2d:
2f:95:13:63:e7:09:88:55:a2:3f:cc:60:95:be:90:
c0:ee:21:67:63:29:60:b9:28:63:c1:80:35:4d:d2:
e4:7d:d1:16:50:ca:7e:ef:0c:8b:7c:04:04:d2:80:
fd:38:44:92:81:f2:30:ed:10:c9:28:5a:a6:9f:a9:
85:39:2a:4e:63:12:0a:73:de:02:93:87:1a:d0:e5:
4b:10:f1:9f:39:23:36:64:f2:49:11:36:f6:1e:bb:
3a:58:fa:4b:18:a2:ef:88:40:04:c4:be:3e:88:b2:
97:94:dc:ca:0f:2c:f8:29:4c:aa:57:fc:76:3c:d4:
36:ec:e4:2d:88:a1:44:de:d9:c6:30:9d:bd:e7:67:
96:2b:38:53:24:20:bf:d9:fd:ab:43:be:3b:a2:4a:
7b:b8:9f:a3:8b:02:10:6e:80:78:2d:36:ad:dc:78:
db:e1:30:ea:4b:08:d8:2b:d3:84:fe:ad:83:6f:64:
f0:c7:b4:c1:74:b4:f7:49:6b:d3:1a:9c:11:93:13:
ad:af:8c:55:46:46:80:39:90:f0:70:fe:52:00:4c:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B1:55:89:1B:AC:68:A2:F5:71:44:E8:24:C5:77:F6:F3:3E:37:32
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/fLFViRusaKL1cUToJMV39vM-NzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5d:94:32:2c:19:13:ad:24:29:d4:97:9d:1b:e8:53:17:3d:
71:0d:f4:1c:dc:d5:7e:29:5e:ab:75:11:c0:a9:21:65:8c:7d:
06:92:19:cc:56:fb:8d:1e:fe:0e:8c:81:94:40:f0:78:e1:bd:
a3:46:a7:cd:1c:d7:7c:94:e3:ca:dc:a4:ca:02:5b:29:0d:02:
13:2b:38:19:92:7a:a1:50:25:89:bb:37:da:cc:67:97:36:9e:
86:60:ef:48:eb:ce:0c:c7:7d:c2:60:da:69:30:1f:fa:d4:f6:
f4:cb:3d:00:f5:b1:b4:19:02:0d:9c:0c:2e:3f:1c:fe:c6:bc:
12:60:77:46:60:28:bf:fd:c1:b3:16:de:70:61:2a:81:a6:f9:
1d:5e:46:fc:68:78:bf:0c:cf:13:a7:30:01:46:db:cc:05:35:
eb:ca:05:8e:64:cd:e1:ba:06:55:64:6f:0d:17:02:ca:b0:04:
59:34:36:65:5a:9b:c0:e4:d0:20:f1:97:71:fc:bc:6c:c9:f6:
99:74:5e:c3:dc:05:04:1d:df:ba:a6:66:1b:d4:99:1c:f9:5d:
67:20:dd:76:17:5a:03:7a:d1:05:31:23:51:e8:b8:7b:78:e7:
b7:35:03:59:f8:7d:c6:e4:6d:3f:3e:70:0a:bd:50:de:1a:53:
0d:bc:d2:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJBG5G90xM06YkUCw2XmufdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjZGNjOGJjZGI2Yzc0NGFjZGY0M2RkNzJkNjhkMjA0NTFh
MTc5ZjYwHhcNMjIwNzI3MTkyMTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2IxNTU4OTFiYWM2OGEyZjU3MTQ0ZTgyNGM1NzdmNmYzM2UzNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdnS4onnwGVUsF2WnfyDs8UcT0K/
EzaH4RxdznFgwsZRGBLaXP+XSa7dvS0vlRNj5wmIVaI/zGCVvpDA7iFnYylguShj
wYA1TdLkfdEWUMp+7wyLfAQE0oD9OESSgfIw7RDJKFqmn6mFOSpOYxIKc94Ck4ca
0OVLEPGfOSM2ZPJJETb2Hrs6WPpLGKLviEAExL4+iLKXlNzKDyz4KUyqV/x2PNQ2
7OQtiKFE3tnGMJ2952eWKzhTJCC/2f2rQ747okp7uJ+jiwIQboB4LTat3Hjb4TDq
SwjYK9OE/q2Db2Twx7TBdLT3SWvTGpwRkxOtr4xVRkaAOZDwcP5SAEyk8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyxVYkbrGii9XFE6CTFd/bzPjcyMB8GA1UdIwQY
MBaAFDzcyLzbbHRKzfQ91y1o0gRRoXn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQt
NjM3YjM3MWRhOGU2LzEvZkxGVmlSdXNhS0wxY1VUb0pNVjM5dk0tTnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8zNTY4MjYtZmMxMC00YWE5LTk2YTQtNjM3YjM3MWRhOGU2
LzEvUE56SXZOdHNkRXJOOUQzWExXalNCRkdoZWZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjJMA0G
CSqGSIb3DQEBCwUAA4IBAQBZXZQyLBkTrSQp1JedG+hTFz1xDfQc3NV+KV6rdRHA
qSFljH0GkhnMVvuNHv4OjIGUQPB44b2jRqfNHNd8lOPK3KTKAlspDQITKzgZknqh
UCWJuzfazGeXNp6GYO9I684Mx33CYNppMB/61Pb0yz0A9bG0GQINnAwuPxz+xrwS
YHdGYCi//cGzFt5wYSqBpvkdXkb8aHi/DM8TpzABRtvMBTXrygWOZM3hugZVZG8N
FwLKsARZNDZlWpvA5NAg8Zdx/LxsyfaZdF7D3AUEHd+6pmYb1Jkc+V1nIN12F1oD
etEFMSNR6Lh7eOe3NQNZ+H3G5G0/PnAKvVDeGlMNvNKO
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:28 2023 by rpki-client on console-ams.rpki-client.org