Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-0fSMqVC3L3nOGXA5a0yKpfGcpI.roa
File: 1-0fSMqVC3L3nOGXA5a0yKpfGcpI.roa (raw, json)
Hash identifier: lkgwnXEn1m+KsA+uLwa1nFk4gMYYT083HdFQYfbONMw=
Subject key identifier: FB:47:D2:32:A5:42:DC:BD:E7:38:65:C0:E5:AD:32:2A:97:C6:72:92
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 079E5614
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-0fSMqVC3L3nOGXA5a0yKpfGcpI.roa
Signing time: Sat 01 Jan 2022 08:01:42 +0000
ROA not before: Sat 01 Jan 2022 08:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 185.255.54.0/24 maxlen: 24
62.133.34.0/24 maxlen: 24
2a0b:4080::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127817236 (0x79e5614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb47d232a542dcbde73865c0e5ad322a97c67292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:a8:a0:2d:84:84:28:4d:8e:0a:be:87:a5:
ef:58:e2:b3:c9:6f:25:a3:92:84:c3:49:d5:2e:cd:
eb:88:c0:b4:20:cc:2f:0c:25:e4:61:05:e0:00:fb:
dc:36:04:a6:ef:3e:4f:af:9e:d9:a1:03:c9:47:92:
b8:a9:5e:10:10:de:ad:ef:ea:85:a5:ef:7f:b5:92:
e7:89:f4:0e:6a:61:4c:33:d8:e6:15:70:4b:86:e9:
94:65:a3:87:79:2d:93:7f:2a:40:08:02:12:53:db:
ef:20:db:cb:53:0b:49:7f:cb:fe:00:ad:5e:d3:48:
48:5f:38:37:91:af:75:b7:31:da:98:52:ca:19:ef:
a2:c2:f5:d9:08:b6:a0:7f:23:61:b4:a1:b5:48:78:
a3:ef:6e:8a:bf:c2:df:bc:92:ad:9f:41:37:df:22:
22:bf:e2:6c:1b:3d:bd:4c:b1:3a:1d:98:6a:ff:60:
ec:c2:a6:33:12:da:88:c4:13:a2:b1:32:54:c3:bb:
47:2b:54:9f:b3:da:df:ee:a3:46:42:84:7a:68:d8:
a8:74:96:ac:52:39:ca:dc:d1:15:97:f9:ef:fe:aa:
a8:ef:86:46:a2:a4:dc:16:e9:e8:37:a3:91:62:60:
c7:23:9f:21:8e:98:83:15:66:6a:e6:bd:79:e4:d5:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:47:D2:32:A5:42:DC:BD:E7:38:65:C0:E5:AD:32:2A:97:C6:72:92
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-0fSMqVC3L3nOGXA5a0yKpfGcpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.34.0/24
185.255.54.0/24
IPv6:
2a0b:4080::/32
Signature Algorithm: sha256WithRSAEncryption
88:b6:67:ba:3b:2f:2a:1a:8c:b9:f3:bf:ef:6a:89:3d:5c:c9:
b8:9a:94:02:fc:41:89:dc:db:28:05:3b:9e:be:fc:ae:a2:91:
71:42:84:38:cb:fa:d7:13:93:18:43:3b:7f:5d:50:3b:f3:ad:
15:86:24:c2:b7:b0:e7:7f:49:ea:c2:ed:9c:dc:6a:5f:4a:32:
a3:dc:50:8a:56:eb:9c:c8:07:18:16:42:46:e2:8a:51:5a:f2:
83:88:f8:36:2f:50:5a:4f:a4:c5:38:9d:13:d3:29:08:0c:13:
10:93:4d:06:26:62:93:2c:89:51:01:0c:b4:3b:ef:13:c0:2d:
a8:3f:a5:5b:c9:41:ec:ea:70:47:08:e3:78:47:e8:24:90:cd:
c5:ec:a4:db:02:aa:ed:30:2c:d2:d5:dc:58:8c:c2:a3:8a:01:
57:a8:6c:19:c0:4b:29:1e:c1:22:38:c6:21:17:9e:4e:f6:33:
d6:b4:48:4f:81:91:6e:a1:e5:18:19:91:22:c1:4c:c2:96:c9:
69:19:a4:ad:e9:da:68:50:84:d7:f2:50:24:b4:94:bd:32:e4:
1a:a9:8b:ac:54:ef:0a:c3:8a:e4:a6:bf:c6:8e:9a:f7:d3:c1:
0f:05:38:c1:9d:7c:ee:38:2d:1b:a0:93:d9:1d:2f:88:db:b9:
fb:25:1d:42
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEB55WFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTc2ZWIyY2M0NjJlNmU0YmYwZGU2OWI5ZjYzNDg3NWRlYmJhYWUyMB4XDTIyMDEw
MTA4MDE0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmI0N2QyMzJhNTQy
ZGNiZGU3Mzg2NWMwZTVhZDMyMmE5N2M2NzI5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ+JqKAthIQoTY4Kvoel71jis8lvJaOShMNJ1S7N64jAtCDM
Lwwl5GEF4AD73DYEpu8+T6+e2aEDyUeSuKleEBDere/qhaXvf7WS54n0DmphTDPY
5hVwS4bplGWjh3ktk38qQAgCElPb7yDby1MLSX/L/gCtXtNISF84N5Gvdbcx2phS
yhnvosL12Qi2oH8jYbShtUh4o+9uir/C37ySrZ9BN98iIr/ibBs9vUyxOh2Yav9g
7MKmMxLaiMQTorEyVMO7RytUn7Pa3+6jRkKEemjYqHSWrFI5ytzRFZf57/6qqO+G
RqKk3Bbp6DejkWJgxyOfIY6YgxVmaua9eeTVXVMCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBT7R9IypULcvec4ZcDlrTIql8ZykjAfBgNVHSMEGDAWgBSldussxGLm5L8N
5pufY0h13ruq4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BYYnJMTVJpNXVTX0RlYWJuMk5JZGQ2N3F1SS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODcvOTMxOTI3LTlmMzgtNDFiNi04N2ZhLTI1NGFjZDkyYjRlMS8x
LzEtMGZTTXFWQzNMM25PR1hBNWEweUtwZkdjcEkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg3
LzkzMTkyNy05ZjM4LTQxYjYtODdmYS0yNTRhY2Q5MmI0ZTEvMS9wWGJyTE1SaTV1
U19EZWFibjJOSWRkNjdxdUkuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
NAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAA+hSIDBAC5/zYwDQQCAAIwBwMF
ACoLQIAwDQYJKoZIhvcNAQELBQADggEBAIi2Z7o7LyoajLnzv+9qiT1cybialAL8
QYnc2ygFO56+/K6ikXFChDjL+tcTkxhDO39dUDvzrRWGJMK3sOd/SerC7Zzcal9K
MqPcUIpW65zIBxgWQkbiilFa8oOI+DYvUFpPpMU4nRPTKQgMExCTTQYmYpMsiVEB
DLQ77xPALag/pVvJQezqcEcI43hH6CSQzcXspNsCqu0wLNLV3FiMwqOKAVeobBnA
SykewSI4xiEXnk72M9a0SE+BkW6h5RgZkSLBTMKWyWkZpK3p2mhQhNfyUCS0lL0y
5Bqpi6xU7wrDiuSmv8aOmvfTwQ8FOMGdfO44LRugk9kdL4jbufslHUI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:58 2023 by rpki-client on console-fra.rpki-client.org