Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/0fXvrt2yrdaQSzhSoZuXYByhqHs.roa
File: 0fXvrt2yrdaQSzhSoZuXYByhqHs.roa (raw, json)
Hash identifier: nU/shnjPFeOKgKUT+EpHJThehtGeIUy298/hXqdap/M=
Subject key identifier: D1:F5:EF:AE:DD:B2:AD:D6:90:4B:38:52:A1:9B:97:60:1C:A1:A8:7B
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 01852F10756CBCCA7076659D232C3E9DC60A
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/0fXvrt2yrdaQSzhSoZuXYByhqHs.roa
Signing time: Tue 20 Dec 2022 10:24:45 +0000
ROA not before: Tue 20 Dec 2022 10:24:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 213.204.16.0/24 maxlen: 24
213.204.25.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2f:10:75:6c:bc:ca:70:76:65:9d:23:2c:3e:9d:c6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Dec 20 10:24:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1f5efaeddb2add6904b3852a19b97601ca1a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:03:af:34:e9:a2:1b:af:84:43:5f:16:29:e3:
b0:a7:a6:d5:a1:8d:10:df:a2:38:85:2a:57:a2:00:
2e:1c:93:85:99:ba:95:19:da:28:db:f4:d4:f0:ac:
79:39:01:c8:15:a9:2f:d9:9c:87:8d:61:d8:17:3f:
fa:bc:06:be:e8:71:85:ab:79:40:b4:15:71:5b:e3:
ea:89:30:ce:2d:26:c0:db:ab:9d:62:77:be:62:33:
5f:8f:d0:9e:6a:eb:85:88:a3:a2:ee:a9:88:8e:84:
27:f6:61:00:41:4d:b5:a3:29:35:72:ca:56:b4:8f:
a3:ff:3a:46:bd:97:c6:cb:0c:b7:10:64:30:ab:6b:
d3:73:ed:87:c4:b8:78:aa:9c:00:24:88:ac:b6:6f:
4b:3f:69:11:94:ad:c4:61:32:86:2e:67:5d:f2:0c:
ea:18:02:f6:4e:a9:f7:b5:12:05:2e:59:57:0a:e5:
4a:ec:77:1b:93:41:1e:6d:f1:90:85:8c:69:64:d9:
e2:02:12:8f:b9:5b:79:fb:a5:f1:cf:ab:f8:4f:ac:
6a:0b:92:49:8c:2e:85:c9:34:a0:01:0c:db:cc:97:
e0:0d:17:a0:e5:b5:5a:55:e1:2a:87:7c:e3:b2:b8:
34:da:95:1b:90:18:fa:73:42:30:00:c3:4e:1b:b8:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:EF:AE:DD:B2:AD:D6:90:4B:38:52:A1:9B:97:60:1C:A1:A8:7B
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/0fXvrt2yrdaQSzhSoZuXYByhqHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.204.16.0/24
213.204.25.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0f:20:e9:8b:bb:34:e5:ad:ab:d6:5f:1d:31:f4:36:71:b0:
74:8a:c6:d4:75:b0:6a:26:3a:f8:f1:02:9c:d8:00:c0:09:7d:
5d:92:c3:83:c2:f8:55:3b:83:7d:30:e7:d7:09:44:f3:05:2f:
d0:3c:53:a5:ef:00:26:42:da:91:0d:ff:d8:8b:74:6c:36:50:
cb:66:7c:36:47:5d:99:80:28:44:a3:b0:53:9f:d7:03:05:97:
16:42:1c:85:2b:df:5d:97:70:46:d6:e5:5d:aa:42:24:ec:90:
ee:0d:f3:25:7d:d6:f7:67:40:7c:f6:56:27:7e:fa:39:13:7b:
5c:f5:90:ea:c5:bb:5d:e6:b9:03:52:ea:c0:94:8d:63:c7:70:
e0:3f:fb:f1:8f:cd:a6:37:3f:ca:c1:a1:67:78:0e:b5:58:50:
49:d4:ec:bf:d1:ee:72:a4:d2:7b:8c:35:e2:83:fc:d7:a6:04:
ee:de:0a:0d:63:ea:f4:3e:1b:27:05:2a:3b:f6:5a:9d:c5:8d:
6d:5d:e0:14:ca:62:ac:f2:f5:60:fe:4a:08:39:c8:c7:1d:2f:
b3:b5:fd:c5:a8:9f:a0:37:1a:e5:87:2f:d4:e9:31:6c:0e:24:
84:e2:fb:00:79:d8:c2:f4:fd:da:e4:97:45:ac:c3:94:16:b6:
71:11:9c:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYUvEHVsvMpwdmWdIyw+ncYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZjMyOTM2MGMxYjZmY2FmYmY1MjUzYTY1N2UzZTlkN2Yy
MjRmN2UwHhcNMjIxMjIwMTAyNDQ1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWY1ZWZhZWRkYjJhZGQ2OTA0YjM4NTJhMTliOTc2MDFjYTFhODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQOvNOmiG6+EQ18WKeOwp6bVoY0Q
36I4hSpXogAuHJOFmbqVGdoo2/TU8Kx5OQHIFakv2ZyHjWHYFz/6vAa+6HGFq3lA
tBVxW+PqiTDOLSbA26udYne+YjNfj9CeauuFiKOi7qmIjoQn9mEAQU21oyk1cspW
tI+j/zpGvZfGywy3EGQwq2vTc+2HxLh4qpwAJIistm9LP2kRlK3EYTKGLmdd8gzq
GAL2Tqn3tRIFLllXCuVK7Hcbk0EebfGQhYxpZNniAhKPuVt5+6Xxz6v4T6xqC5JJ
jC6FyTSgAQzbzJfgDReg5bVaVeEqh3zjsrg02pUbkBj6c0IwAMNOG7j9XwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNH1767dsq3WkEs4UqGbl2Acoah7MB8GA1UdIwQY
MBaAFP7zKTYMG2/K+/UlOmV+Pp1/Ik9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgt
NTAwYjg4MzQyODllLzEvMGZYdnJ0MnlyZGFRU3poU29adVhZQnlocUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZTk2ZjQtZDg1Yy00ZmM1LTllOTgtNTAwYjg4MzQyODll
LzEvX3ZNcE5nd2JiOHI3OVNVNlpYNC1uWDhpVDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1cwQAwQA
1cwZMA0GCSqGSIb3DQEBCwUAA4IBAQBcDyDpi7s05a2r1l8dMfQ2cbB0isbUdbBq
Jjr48QKc2ADACX1dksODwvhVO4N9MOfXCUTzBS/QPFOl7wAmQtqRDf/Yi3RsNlDL
Znw2R12ZgChEo7BTn9cDBZcWQhyFK99dl3BG1uVdqkIk7JDuDfMlfdb3Z0B89lYn
fvo5E3tc9ZDqxbtd5rkDUurAlI1jx3DgP/vxj82mNz/KwaFneA61WFBJ1Oy/0e5y
pNJ7jDXig/zXpgTu3goNY+r0PhsnBSo79lqdxY1tXeAUymKs8vVg/koIOcjHHS+z
tf3FqJ+gNxrlhy/U6TFsDiSE4vsAedjC9P3a5JdFrMOUFrZxEZxd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-fra.rpki-client.org