Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/FU4cnQkrbLLsWu0f6fYoKR5mU3w.roa
File: FU4cnQkrbLLsWu0f6fYoKR5mU3w.roa (raw, json)
Hash identifier: iyetVDGrzI2LU6XWr2mgOWkQmRu6DKjwAcc5mP67q+g=
Subject key identifier: 15:4E:1C:9D:09:2B:6C:B2:EC:5A:ED:1F:E9:F6:28:29:1E:66:53:7C
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 01831CBEB50A35DF120D68398BB2F6192402
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/FU4cnQkrbLLsWu0f6fYoKR5mU3w.roa
Signing time: Thu 08 Sep 2022 10:56:43 +0000
ROA not before: Thu 08 Sep 2022 10:56:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42475
IP address blocks: 91.207.34.0/24 maxlen: 24
91.207.35.0/24 maxlen: 24
185.82.55.0/24 maxlen: 24
185.82.52.0/24 maxlen: 24
185.82.53.0/24 maxlen: 24
185.82.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:1c:be:b5:0a:35:df:12:0d:68:39:8b:b2:f6:19:24:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Sep 8 10:56:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=154e1c9d092b6cb2ec5aed1fe9f628291e66537c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:32:29:c4:b2:50:bf:58:b5:ff:c8:c9:ad:
39:5d:71:1d:c7:93:37:ac:e4:df:74:c7:c4:25:93:
cd:25:cd:a9:ef:43:2d:c0:14:3f:e6:fb:75:ff:30:
76:ba:1a:95:cc:83:4e:27:d7:31:56:33:7e:29:31:
7d:33:78:71:24:3c:7e:95:de:d7:c0:ea:25:15:93:
19:c9:0c:ec:4f:0a:7f:42:1c:dc:ce:76:40:c3:a8:
7f:aa:62:e1:50:03:7c:d7:10:07:3c:18:3a:91:57:
2e:fc:f7:88:bd:70:41:a0:72:d2:9a:28:ef:30:ac:
9b:ac:05:48:52:c8:48:3d:3a:8f:16:ff:b0:28:b6:
5c:c7:62:c7:50:d8:71:0f:39:67:d8:1f:6f:27:57:
29:f8:68:5a:7a:d5:c7:12:3f:83:5e:4d:9a:00:f0:
be:11:f4:f3:24:e0:20:85:94:2c:f6:6b:fd:1e:9b:
80:d0:40:b3:00:2f:d6:55:4f:b6:19:a6:a9:1b:0f:
ab:ce:46:cd:5f:d1:26:d8:2f:4b:ca:ab:7b:d7:aa:
00:60:22:17:3f:f7:60:a3:1a:e4:12:da:3a:46:91:
7e:79:bb:34:a9:09:be:1f:f7:9f:c8:48:46:07:d7:
6b:70:0e:62:4b:04:28:b5:19:fd:71:f1:e3:12:7f:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:1C:9D:09:2B:6C:B2:EC:5A:ED:1F:E9:F6:28:29:1E:66:53:7C
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/FU4cnQkrbLLsWu0f6fYoKR5mU3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.34.0/23
185.82.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:b4:9d:c3:02:49:cc:1a:a4:fb:7a:52:d6:28:2a:ae:32:64:
89:55:07:4a:67:82:2f:66:07:fc:3b:b6:5d:92:fd:4d:6e:49:
4d:64:51:0e:ee:81:15:62:82:e5:d4:5c:96:cd:60:db:50:6d:
89:f6:9b:74:13:ba:34:35:f2:11:d5:b9:70:3a:e1:ae:50:ce:
97:34:0d:2c:3c:50:e5:97:e8:63:d2:0e:03:9b:ff:da:f5:47:
dc:1b:9e:8d:78:71:4b:0a:86:13:9d:ce:1c:c7:ee:e4:ce:2a:
c7:77:3e:81:58:44:86:52:56:43:09:b7:b6:9d:ab:93:93:83:
ff:8c:6c:84:41:16:2f:35:d8:df:63:c5:ad:6f:89:d2:ab:e4:
ac:0a:d3:23:f3:1e:53:0d:19:94:31:f0:e0:f2:19:88:de:c3:
34:73:85:9e:d4:4b:42:f6:f8:2b:3a:e4:d8:75:12:11:53:9c:
00:1f:b5:bf:c4:96:bc:6c:b2:53:e7:d5:cf:11:09:d7:be:ba:
aa:5a:48:5b:1b:b8:f2:a7:d3:c6:63:0d:94:9e:54:3a:56:5b:
a4:eb:72:5a:13:34:12:e1:c1:fa:86:95:9b:fe:af:d3:f1:06:
64:78:a1:c5:11:90:e5:06:f3:be:2b:92:da:c1:c0:25:bf:2b:
5e:12:d5:2d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYMcvrUKNd8SDWg5i7L2GSQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw
MDgyZTMwHhcNMjIwOTA4MTA1NjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTRlMWM5ZDA5MmI2Y2IyZWM1YWVkMWZlOWY2MjgyOTFlNjY1MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHQyKcSyUL9Ytf/Iya05XXEdx5M3
rOTfdMfEJZPNJc2p70MtwBQ/5vt1/zB2uhqVzINOJ9cxVjN+KTF9M3hxJDx+ld7X
wOolFZMZyQzsTwp/QhzcznZAw6h/qmLhUAN81xAHPBg6kVcu/PeIvXBBoHLSmijv
MKybrAVIUshIPTqPFv+wKLZcx2LHUNhxDzln2B9vJ1cp+GhaetXHEj+DXk2aAPC+
EfTzJOAghZQs9mv9HpuA0ECzAC/WVU+2GaapGw+rzkbNX9Em2C9Lyqt716oAYCIX
P/dgoxrkEto6RpF+ebs0qQm+H/efyEhGB9drcA5iSwQotRn9cfHjEn9PmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBVOHJ0JK2yy7FrtH+n2KCkeZlN8MB8GA1UdIwQY
MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt
MGNhZGQ4NDc0NDhiLzEvRlU0Y25Ra3JiTExzV3UwZjZmWW9LUjVtVTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi
LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW88iAwQC
uVI0MA0GCSqGSIb3DQEBCwUAA4IBAQCmtJ3DAknMGqT7elLWKCquMmSJVQdKZ4Iv
Zgf8O7Zdkv1NbklNZFEO7oEVYoLl1FyWzWDbUG2J9pt0E7o0NfIR1blwOuGuUM6X
NA0sPFDll+hj0g4Dm//a9UfcG56NeHFLCoYTnc4cx+7kzirHdz6BWESGUlZDCbe2
nauTk4P/jGyEQRYvNdjfY8Wtb4nSq+SsCtMj8x5TDRmUMfDg8hmI3sM0c4We1EtC
9vgrOuTYdRIRU5wAH7W/xJa8bLJT59XPEQnXvrqqWkhbG7jyp9PGYw2UnlQ6Vluk
63JaEzQS4cH6hpWb/q/T8QZkeKHFEZDlBvO+K5LawcAlvyteEtUt
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org