Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/FPh8wIFORkkcbAIs_GAJrpb6dnI.roa
File: FPh8wIFORkkcbAIs_GAJrpb6dnI.roa (raw, json)
Hash identifier: q5OrALIFyhHp/xJBKUmJf4qAKKNSp1NRqTUQdh2Sf8E=
Subject key identifier: 14:F8:7C:C0:81:4E:46:49:1C:6C:02:2C:FC:60:09:AE:96:FA:76:72
Certificate issuer: /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial: 039715FD
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/FPh8wIFORkkcbAIs_GAJrpb6dnI.roa
Signing time: Sat 01 Jan 2022 04:57:38 +0000
ROA not before: Sat 01 Jan 2022 04:57:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198684
IP address blocks: 91.238.132.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60233213 (0x39715fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Validity
Not Before: Jan 1 04:57:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14f87cc0814e46491c6c022cfc6009ae96fa7672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:06:df:48:0f:48:d3:3e:7e:3b:35:09:02:
2b:02:f4:9f:76:df:5e:84:49:39:00:dc:b4:ff:a4:
cb:b3:88:36:05:ec:64:78:fa:44:bb:9b:62:50:07:
71:ad:1a:92:d5:c6:4a:38:bf:f8:e1:7f:0a:2c:86:
b3:98:2b:35:9c:27:0c:68:8a:cd:4d:a3:c5:a0:02:
ab:2e:61:d5:d5:80:6e:79:54:e5:68:4f:c1:04:2a:
87:13:9e:f8:8b:76:95:e9:b5:b2:8e:ca:8d:48:43:
58:04:7b:6a:56:d3:79:2a:e0:b2:67:8a:f7:e0:85:
a1:32:b2:12:78:26:2e:16:0e:c9:24:e0:af:66:4a:
7a:7c:61:34:74:56:8d:c3:70:56:22:c4:d7:cc:fc:
14:f1:52:1e:4b:b9:dd:9d:b6:0f:4d:0f:c8:3f:6a:
b3:24:18:be:4c:61:8d:a7:d2:6f:90:c0:1e:12:24:
47:73:6b:fa:66:85:8e:f8:ed:ae:fa:6a:79:58:0e:
f2:1d:2f:c2:c9:ba:a3:c4:5e:26:4e:8f:6f:af:67:
be:85:26:29:65:36:6f:cf:47:d1:2b:8d:00:8f:91:
de:83:33:ba:d2:7b:be:fb:19:31:bd:ae:1d:b9:66:
5a:47:9a:c0:d5:c6:e8:39:4d:02:8a:ba:38:e6:86:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F8:7C:C0:81:4E:46:49:1C:6C:02:2C:FC:60:09:AE:96:FA:76:72
X509v3 Authority Key Identifier:
keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/FPh8wIFORkkcbAIs_GAJrpb6dnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.132.0/24
Signature Algorithm: sha256WithRSAEncryption
92:31:80:68:a1:bc:1c:b7:88:0a:97:e5:b4:5e:86:86:5f:f3:
2a:77:47:01:01:39:22:a6:42:05:fc:5c:36:2f:6a:9e:67:a8:
e8:b4:8c:3e:af:b1:5c:7f:6c:c3:b6:f2:e8:4d:47:a0:0e:cb:
4f:1a:38:a4:87:45:d7:67:67:ed:e1:09:66:f5:06:39:57:ad:
1b:0a:fb:e5:f8:c5:44:8e:84:5d:c7:bc:a2:d9:4d:b7:33:16:
9d:a2:aa:53:63:29:c0:0f:5a:a9:1c:d9:3f:dd:35:5c:d2:38:
e9:e7:91:0c:9f:46:24:ff:52:91:2a:db:af:f8:c6:aa:7e:69:
97:4d:4c:98:63:2b:fb:3e:02:17:62:83:05:62:21:19:e5:ec:
dc:e9:b8:69:1c:68:7b:71:06:08:e5:a4:28:60:6c:ba:5e:86:
61:01:10:6b:8a:c2:06:9b:dc:52:7d:84:b4:f7:a8:be:02:04:
5c:20:b9:54:ad:bb:9a:3f:d5:bf:6e:9f:ad:b6:88:14:af:26:
b1:66:11:27:7a:b6:5b:26:be:16:22:7b:19:26:74:a0:fc:16:
84:f5:9e:f9:fe:17:68:0f:62:5a:74:c6:5d:b2:d8:3e:72:a3:
3d:94:c5:7e:da:bb:d0:44:44:92:2c:3a:36:69:c9:d6:ed:2b:
be:45:59:f6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA5cV/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MWViN2Y5YjU4OTUyYjllODBhZmNmN2JiZGJhMzJiMjZhMzRkMGExMB4XDTIyMDEw
MTA0NTczOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTRmODdjYzA4MTRl
NDY0OTFjNmMwMjJjZmM2MDA5YWU5NmZhNzY3MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANyaBt9ID0jTPn47NQkCKwL0n3bfXoRJOQDctP+ky7OINgXs
ZHj6RLubYlAHca0aktXGSji/+OF/CiyGs5grNZwnDGiKzU2jxaACqy5h1dWAbnlU
5WhPwQQqhxOe+It2lem1so7KjUhDWAR7albTeSrgsmeK9+CFoTKyEngmLhYOySTg
r2ZKenxhNHRWjcNwViLE18z8FPFSHku53Z22D00PyD9qsyQYvkxhjafSb5DAHhIk
R3Nr+maFjvjtrvpqeVgO8h0vwsm6o8ReJk6Pb69nvoUmKWU2b89H0SuNAI+R3oMz
utJ7vvsZMb2uHblmWkeawNXG6DlNAoq6OOaGdpUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQU+HzAgU5GSRxsAiz8YAmulvp2cjAfBgNVHSMEGDAWgBQh63+bWJUrnoCv
z3u9ujKyajTQoTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lldF9tMWlWSzU2QXI4OTd2Ym95c21vMDBLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvZDZkYjQ2LTg1YjEtNDIwYy04Y2U3LWY3ZGFiYjBkMjc4Ny8x
L0ZQaDh3SUZPUmtrY2JBSXNfR0FKcnBiNmRuSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
ZDZkYjQ2LTg1YjEtNDIwYy04Y2U3LWY3ZGFiYjBkMjc4Ny8xL0lldF9tMWlWSzU2
QXI4OTd2Ym95c21vMDBLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvuhDANBgkqhkiG9w0BAQsFAAOC
AQEAkjGAaKG8HLeICpfltF6Ghl/zKndHAQE5IqZCBfxcNi9qnmeo6LSMPq+xXH9s
w7by6E1HoA7LTxo4pIdF12dn7eEJZvUGOVetGwr75fjFRI6EXce8otlNtzMWnaKq
U2MpwA9aqRzZP901XNI46eeRDJ9GJP9SkSrbr/jGqn5pl01MmGMr+z4CF2KDBWIh
GeXs3Om4aRxoe3EGCOWkKGBsul6GYQEQa4rCBpvcUn2EtPeovgIEXCC5VK27mj/V
v26frbaIFK8msWYRJ3q2Wya+FiJ7GSZ0oPwWhPWe+f4XaA9iWnTGXbLYPnKjPZTF
ftq70EREkiw6NmnJ1u0rvkVZ9g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org