Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/Fl_Ghpjxv_QzDccmOZopRWlU8zc.roa
File: Fl_Ghpjxv_QzDccmOZopRWlU8zc.roa (raw, json)
Hash identifier: i866bmU54hlma+Hh7WBy+qpJXrgJmCgG3Xb08FJdnlk=
Subject key identifier: 16:5F:C6:86:98:F1:BF:F4:33:0D:C7:26:39:9A:29:45:69:54:F3:37
Certificate issuer: /CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Certificate serial: 05A4AB70
Authority key identifier: A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/Fl_Ghpjxv_QzDccmOZopRWlU8zc.roa
Signing time: Sat 01 Jan 2022 10:02:01 +0000
ROA not before: Sat 01 Jan 2022 10:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 194.0.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94677872 (0x5a4ab70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a652cb32c2c86696e35f9b78d5f18b362614b168
Validity
Not Before: Jan 1 10:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=165fc68698f1bff4330dc726399a29456954f337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:03:72:a1:c8:cb:bc:24:db:ad:5b:d6:1f:
36:16:c6:7c:e5:3d:8b:04:08:63:47:ee:40:f1:2c:
60:48:b2:a1:73:25:f9:68:4d:f4:47:f1:ea:16:2a:
0a:02:13:b0:07:07:92:a3:6b:3e:23:26:56:2e:e9:
85:d3:b4:a6:3d:df:0e:0f:aa:76:1d:f6:43:1f:ec:
ea:59:25:01:28:d7:9d:4f:28:6d:74:83:ea:1d:83:
4f:6c:8b:a0:3d:26:05:cb:6a:e1:14:11:a5:8e:33:
00:d3:ec:7f:4b:eb:58:3b:37:76:9e:0b:13:27:68:
a1:6b:a8:c0:76:e7:1e:88:36:87:d8:84:87:ed:db:
53:68:d6:78:f0:fd:87:9a:6e:92:02:13:71:35:4f:
57:32:aa:29:8b:11:66:5b:38:83:de:0d:f6:5e:8c:
59:40:01:5f:40:02:81:5f:ef:e7:07:36:2d:c7:16:
0c:56:d4:23:08:9a:00:91:cd:2b:46:c4:f6:05:28:
d2:2f:e0:ca:58:7a:1d:81:04:c6:8f:a1:8d:18:2a:
59:b0:fc:cc:5a:5a:c6:b3:73:ae:f0:d9:40:af:24:
17:1b:3c:b0:7d:d0:35:cd:21:e1:e1:33:c9:a5:5c:
84:41:06:66:9f:fb:c2:54:53:e7:65:99:2f:22:b6:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5F:C6:86:98:F1:BF:F4:33:0D:C7:26:39:9A:29:45:69:54:F3:37
X509v3 Authority Key Identifier:
keyid:A6:52:CB:32:C2:C8:66:96:E3:5F:9B:78:D5:F1:8B:36:26:14:B1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plLLMsLIZpbjX5t41fGLNiYUsWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/Fl_Ghpjxv_QzDccmOZopRWlU8zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e66a25-31b8-40a1-9485-2264adf5b34c/1/plLLMsLIZpbjX5t41fGLNiYUsWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ab:67:cf:53:58:7f:d6:d6:0b:a9:83:35:75:fd:6a:46:dc:
86:94:bb:3a:79:c7:3d:ac:d1:92:33:83:f8:d8:c4:66:fe:39:
de:13:86:80:c6:7c:f0:cf:ef:bf:65:36:b6:d4:96:d7:bb:ec:
f2:49:16:22:57:07:b6:3b:4d:44:07:b6:4c:91:63:bc:1e:9e:
87:74:68:2f:c5:df:90:8a:94:15:59:09:62:7b:03:03:23:fe:
b5:16:2e:84:89:40:42:89:18:76:83:2e:18:42:98:be:ad:db:
78:d9:e6:1a:fa:e8:94:8e:7b:d4:4c:4a:4c:e5:cf:6c:74:0a:
ff:27:d2:8c:ca:e8:0f:a7:a5:41:6d:3f:c9:10:e4:b4:ed:77:
90:4c:7e:29:e4:07:50:c0:c2:58:68:ef:57:d8:2b:df:e8:66:
a6:85:aa:ca:3e:a6:dc:79:2b:cd:95:2a:00:cf:77:e8:89:2e:
01:55:7b:79:d4:e7:46:e8:2f:b0:95:18:be:a1:60:cd:5d:61:
7d:fb:f3:58:78:78:37:12:5f:53:a3:d9:41:4b:d5:b4:6c:ab:
46:48:88:3e:67:76:4e:df:68:c1:a9:4e:98:ca:dd:dc:0f:45:
0c:51:86:cd:ac:0f:27:d5:cf:8a:6a:68:99:a7:ab:18:e4:68:
e0:c0:83:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaSrcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NjUyY2IzMmMyYzg2Njk2ZTM1ZjliNzhkNWYxOGIzNjI2MTRiMTY4MB4XDTIyMDEw
MTEwMDIwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTY1ZmM2ODY5OGYx
YmZmNDMzMGRjNzI2Mzk5YTI5NDU2OTU0ZjMzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOqA3KhyMu8JNutW9YfNhbGfOU9iwQIY0fuQPEsYEiyoXMl
+WhN9Efx6hYqCgITsAcHkqNrPiMmVi7phdO0pj3fDg+qdh32Qx/s6lklASjXnU8o
bXSD6h2DT2yLoD0mBctq4RQRpY4zANPsf0vrWDs3dp4LEydooWuowHbnHog2h9iE
h+3bU2jWePD9h5pukgITcTVPVzKqKYsRZls4g94N9l6MWUABX0ACgV/v5wc2LccW
DFbUIwiaAJHNK0bE9gUo0i/gylh6HYEExo+hjRgqWbD8zFpaxrNzrvDZQK8kFxs8
sH3QNc0h4eEzyaVchEEGZp/7wlRT52WZLyK20mUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQWX8aGmPG/9DMNxyY5milFaVTzNzAfBgNVHSMEGDAWgBSmUssywshmluNf
m3jV8Ys2JhSxaDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BsTExNc0xJWnBialg1dDQxZkdMTmlZVXNXZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTcvZTY2YTI1LTMxYjgtNDBhMS05NDg1LTIyNjRhZGY1YjM0Yy8x
L0ZsX0docGp4dl9RekRjY21PWm9wUldsVTh6Yy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcv
ZTY2YTI1LTMxYjgtNDBhMS05NDg1LTIyNjRhZGY1YjM0Yy8xL3BsTExNc0xJWnBi
alg1dDQxZkdMTmlZVXNXZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIAyTANBgkqhkiG9w0BAQsFAAOC
AQEAeqtnz1NYf9bWC6mDNXX9akbchpS7OnnHPazRkjOD+NjEZv453hOGgMZ88M/v
v2U2ttSW17vs8kkWIlcHtjtNRAe2TJFjvB6eh3RoL8XfkIqUFVkJYnsDAyP+tRYu
hIlAQokYdoMuGEKYvq3beNnmGvrolI571ExKTOXPbHQK/yfSjMroD6elQW0/yRDk
tO13kEx+KeQHUMDCWGjvV9gr3+hmpoWqyj6m3HkrzZUqAM936IkuAVV7edTnRugv
sJUYvqFgzV1hffvzWHh4NxJfU6PZQUvVtGyrRkiIPmd2Tt9owalOmMrd3A9FDFGG
zawPJ9XPimpomaerGORo4MCDag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org