Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/fu6GD6fs88tyJp1Lf4khgf6BgXs.roa
File: fu6GD6fs88tyJp1Lf4khgf6BgXs.roa (raw, json)
Hash identifier: Azvt/ujYZ2yGzSfsfJPw/KnwuvsLVNQvWfjFC+0xzU0=
Subject key identifier: 7E:EE:86:0F:A7:EC:F3:CB:72:26:9D:4B:7F:89:21:81:FE:81:81:7B
Certificate issuer: /CN=77e839ea59b975824fd708a0ad735550017cbf7c
Certificate serial: 040CDE96
Authority key identifier: 77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/fu6GD6fs88tyJp1Lf4khgf6BgXs.roa
Signing time: Sat 01 Jan 2022 00:55:44 +0000
ROA not before: Sat 01 Jan 2022 00:55:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49920
IP address blocks: 185.234.53.0/24 maxlen: 24
185.234.54.0/23 maxlen: 23
185.149.60.0/22 maxlen: 24
2a05:c0c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67952278 (0x40cde96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e839ea59b975824fd708a0ad735550017cbf7c
Validity
Not Before: Jan 1 00:55:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7eee860fa7ecf3cb72269d4b7f892181fe81817b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:76:a0:41:0c:8d:94:1f:3a:38:34:1c:f9:
5e:8c:a1:17:54:e8:63:d2:5e:51:00:88:86:7a:15:
97:aa:08:62:ac:ef:fc:5d:ce:16:b2:89:0e:63:3b:
00:fc:7b:76:9d:c9:2d:80:8b:08:32:e2:a7:75:9f:
02:08:2d:7e:1b:1c:4e:7b:43:8a:cb:17:6a:79:0c:
fd:30:50:9a:98:34:4f:6e:63:81:e0:65:0c:c5:37:
17:8c:47:9f:7f:3b:f9:42:12:7d:f6:3f:f0:e9:92:
e6:b6:54:1e:94:a0:09:68:62:65:c3:a4:a0:8d:57:
f2:e9:cf:5f:7c:e0:b6:63:d9:fb:f5:0c:8f:57:7d:
47:7b:a5:b8:fb:75:63:cf:28:b7:c3:80:d3:76:d5:
cd:d9:fa:50:f2:9b:5a:df:a4:9c:fa:81:68:c4:c9:
d5:51:9f:ce:dc:59:ce:1c:7c:35:4b:64:72:c0:22:
e2:49:ba:e8:ea:64:a2:ac:3e:97:19:34:59:ca:98:
86:06:d8:04:a7:8e:46:6f:15:78:c7:ac:e0:e1:1e:
c8:17:fa:cc:44:a1:79:21:1f:88:44:f6:8a:be:df:
56:4f:0c:fb:ea:f4:af:02:53:a8:a8:99:dd:b5:14:
d0:00:2a:e5:6d:98:58:8c:84:16:49:9f:df:41:58:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EE:86:0F:A7:EC:F3:CB:72:26:9D:4B:7F:89:21:81:FE:81:81:7B
X509v3 Authority Key Identifier:
keyid:77:E8:39:EA:59:B9:75:82:4F:D7:08:A0:AD:73:55:50:01:7C:BF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-g56lm5dYJP1wigrXNVUAF8v3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/fu6GD6fs88tyJp1Lf4khgf6BgXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ae5b5f-e748-4fd5-b1de-c79a3fa71d34/1/d-g56lm5dYJP1wigrXNVUAF8v3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.60.0/22
185.234.53.0-185.234.55.255
IPv6:
2a05:c0c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:91:18:38:76:7b:76:de:af:1b:2d:2f:90:9b:c9:98:f4:e8:
81:2e:18:1a:59:36:41:45:b7:51:da:2e:70:5c:67:d7:68:ad:
40:60:22:e5:8a:31:c2:a4:c6:34:d3:cb:bb:de:4f:c3:cc:11:
95:61:a4:7d:bf:9b:e6:a9:68:3d:ac:72:5a:bd:e5:a4:4d:6a:
dd:51:c6:d8:1d:f0:1c:b2:ef:00:1d:f1:fc:8c:f0:e1:89:00:
fc:30:77:74:00:fa:d9:6e:44:8f:d6:1b:b7:46:fd:6e:fd:03:
5a:7e:25:ab:47:10:bd:de:19:3c:c6:15:35:fb:4b:8e:db:6b:
a0:3d:8f:21:7e:3e:1d:58:51:63:6d:07:64:d7:54:9e:b7:98:
fc:47:f6:34:c1:e2:ac:b1:eb:37:89:95:3b:7f:26:40:1f:f7:
d0:60:30:37:ba:24:d8:ca:6e:a6:9b:13:66:eb:18:70:ff:a6:
af:68:3e:f0:27:a8:a1:0a:6e:98:22:2b:0f:85:78:e7:7b:24:
ac:4a:50:d0:a0:f6:2f:7b:4e:9f:c5:cc:a1:5d:72:6c:50:3a:
50:85:c4:6f:a6:9e:fb:69:28:75:43:05:8c:e4:cd:0c:a4:43:
d1:3d:b6:0d:bb:ac:ff:d5:c7:ea:14:59:0d:ee:0e:04:48:8e:
78:be:10:fb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEBAzeljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
N2U4MzllYTU5Yjk3NTgyNGZkNzA4YTBhZDczNTU1MDAxN2NiZjdjMB4XDTIyMDEw
MTAwNTU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2VlZTg2MGZhN2Vj
ZjNjYjcyMjY5ZDRiN2Y4OTIxODFmZTgxODE3YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMIZdqBBDI2UHzo4NBz5XoyhF1ToY9JeUQCIhnoVl6oIYqzv
/F3OFrKJDmM7APx7dp3JLYCLCDLip3WfAggtfhscTntDissXankM/TBQmpg0T25j
geBlDMU3F4xHn387+UISffY/8OmS5rZUHpSgCWhiZcOkoI1X8unPX3zgtmPZ+/UM
j1d9R3uluPt1Y88ot8OA03bVzdn6UPKbWt+knPqBaMTJ1VGfztxZzhx8NUtkcsAi
4km66Opkoqw+lxk0WcqYhgbYBKeORm8VeMes4OEeyBf6zESheSEfiET2ir7fVk8M
++r0rwJTqKiZ3bUU0AAq5W2YWIyEFkmf30FY6J8CAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBR+7oYPp+zzy3ImnUt/iSGB/oGBezAfBgNVHSMEGDAWgBR36DnqWbl1gk/X
CKCtc1VQAXy/fDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2QtZzU2bG01ZFlKUDF3aWdyWE5WVUFGOHYzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWIvYWU1YjVmLWU3NDgtNGZkNS1iMWRlLWM3OWEzZmE3MWQzNC8x
L2Z1NkdENmZzODh0eUpwMUxmNGtoZ2Y2QmdYcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWIv
YWU1YjVmLWU3NDgtNGZkNS1iMWRlLWM3OWEzZmE3MWQzNC8xL2QtZzU2bG01ZFlK
UDF3aWdyWE5WVUFGOHYzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA8
BggrBgEFBQcBBwEB/wQtMCswGgQCAAEwFAMEArmVPDAMAwQAueo1AwQDueowMA0E
AgACMAcDBQMqBcDAMA0GCSqGSIb3DQEBCwUAA4IBAQBXkRg4dnt23q8bLS+Qm8mY
9OiBLhgaWTZBRbdR2i5wXGfXaK1AYCLlijHCpMY008u73k/DzBGVYaR9v5vmqWg9
rHJaveWkTWrdUcbYHfAcsu8AHfH8jPDhiQD8MHd0APrZbkSP1hu3Rv1u/QNafiWr
RxC93hk8xhU1+0uO22ugPY8hfj4dWFFjbQdk11Set5j8R/Y0weKsses3iZU7fyZA
H/fQYDA3uiTYym6mmxNm6xhw/6avaD7wJ6ihCm6YIisPhXjneySsSlDQoPYve06f
xcyhXXJsUDpQhcRvpp77aSh1QwWM5M0MpEPRPbYNu6z/1cfqFFkN7g4ESI54vhD7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-fra.rpki-client.org