Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/FR62IKNMjyBdaMtoSlh2pRoqR5E.roa
File: FR62IKNMjyBdaMtoSlh2pRoqR5E.roa (raw, json)
Hash identifier: uY/65ic6NKKCh5LO/EzvZGZKjOycvPf+B8RnCOGsfVE=
Subject key identifier: 15:1E:B6:20:A3:4C:8F:20:5D:68:CB:68:4A:58:76:A5:1A:2A:47:91
Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial: 051BC68D
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/FR62IKNMjyBdaMtoSlh2pRoqR5E.roa
Signing time: Sat 01 Jan 2022 09:02:34 +0000
ROA not before: Sat 01 Jan 2022 09:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30972
IP address blocks: 141.138.88.0/21 maxlen: 21
193.22.143.0/24 maxlen: 24
193.242.217.0/24 maxlen: 24
195.88.194.0/23 maxlen: 23
185.97.184.0/22 maxlen: 22
2a0a:21c0::/29 maxlen: 29
2a01:a580::/32 maxlen: 32
2a01:a580::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85706381 (0x51bc68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Validity
Not Before: Jan 1 09:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=151eb620a34c8f205d68cb684a5876a51a2a4791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:ce:75:1d:eb:d0:55:93:2e:bf:5f:07:54:
50:2f:30:01:cd:7f:62:81:96:f0:2e:f9:f4:ec:7b:
fe:59:74:36:d1:9e:b4:d9:e2:45:a2:1c:06:a4:58:
19:65:e4:c8:50:fa:b6:f7:4a:69:e3:6d:c1:5e:bf:
52:6a:30:bd:34:66:07:85:d2:9b:f3:8c:8c:16:40:
e5:5a:26:24:57:70:98:a8:e0:36:e9:b7:6a:8c:10:
33:1f:15:fe:66:1b:c7:8d:83:1a:bd:11:12:48:8d:
f4:7f:7b:8a:c8:a0:f7:28:66:04:e7:1c:7e:43:96:
34:3e:06:49:a0:f0:b7:eb:3d:73:a2:d4:1e:ba:ec:
86:54:a3:9c:32:aa:2b:4c:a7:86:76:fb:50:a5:3b:
4f:8b:16:d5:f5:1f:70:88:ac:13:21:c4:2d:99:4b:
8e:cc:ff:71:8e:94:9b:cb:3e:8d:f7:4e:33:6b:88:
5f:de:4f:ef:5a:cf:3b:57:7c:b4:97:40:f4:8a:02:
7a:ec:9f:a8:3d:a7:87:a0:93:a5:cf:c4:73:4e:44:
b0:5a:bc:e0:6c:9f:ee:a2:2c:10:04:5d:29:79:9c:
d8:6c:36:17:4f:56:a8:fc:0f:46:0f:07:9d:4f:9f:
f5:42:63:fe:75:e6:64:dc:dd:72:87:0b:33:3a:1a:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:B6:20:A3:4C:8F:20:5D:68:CB:68:4A:58:76:A5:1A:2A:47:91
X509v3 Authority Key Identifier:
keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/FR62IKNMjyBdaMtoSlh2pRoqR5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.88.0/21
185.97.184.0/22
193.22.143.0/24
193.242.217.0/24
195.88.194.0/23
IPv6:
2a01:a580::/29
2a0a:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
46:12:0c:52:6a:43:ff:5a:f2:66:91:24:19:2c:80:e3:16:ef:
15:88:bd:97:8a:a1:2d:fb:74:07:17:eb:9c:4c:b1:49:56:f2:
42:0e:0f:aa:8a:11:a8:dd:13:40:ef:67:ca:26:d6:c1:ad:14:
cc:b2:82:e8:6c:be:de:5c:6d:41:92:81:84:fd:f3:ab:62:98:
4f:ec:30:18:1d:25:ef:0c:7d:65:5a:f1:04:e2:78:70:1d:11:
61:87:46:9c:c0:dc:e0:2a:b0:16:60:f2:5b:7a:11:58:20:b4:
59:b0:c0:f9:94:70:e2:80:ee:92:b2:23:3b:37:54:9f:62:f6:
6f:cc:cb:68:86:7b:89:30:2e:00:fd:0a:93:9c:78:fd:2a:f6:
21:76:81:db:4e:22:ff:03:6a:cc:59:30:e3:c8:43:f4:98:a3:
5f:ef:8e:6a:d0:f6:be:27:be:3c:7e:42:5e:4e:e3:53:7f:e0:
86:46:9d:ea:1a:dd:07:e9:9e:5f:03:da:1c:f9:c1:d9:cb:dc:
5a:d7:40:02:83:3b:2e:aa:4d:f9:23:59:52:15:5e:e0:fb:9b:
b5:ff:ff:64:4f:a1:63:85:0a:86:eb:d0:33:67:20:9d:b9:95:
99:c3:af:40:b6:59:ee:08:7a:ed:be:bd:af:e4:12:ea:1d:7b:
9e:62:ce:7f
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgIEBRvGjTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjdkZDFlYmVlNTEzZmZhMzE4Y2RjODhiODFhYzE4Y2ZlNzI2YjMwMB4XDTIyMDEw
MTA5MDIzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTUxZWI2MjBhMzRj
OGYyMDVkNjhjYjY4NGE1ODc2YTUxYTJhNDc5MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOexznUd69BVky6/XwdUUC8wAc1/YoGW8C759Ox7/ll0NtGe
tNniRaIcBqRYGWXkyFD6tvdKaeNtwV6/UmowvTRmB4XSm/OMjBZA5VomJFdwmKjg
Num3aowQMx8V/mYbx42DGr0REkiN9H97isig9yhmBOccfkOWND4GSaDwt+s9c6LU
HrrshlSjnDKqK0ynhnb7UKU7T4sW1fUfcIisEyHELZlLjsz/cY6Um8s+jfdOM2uI
X95P71rPO1d8tJdA9IoCeuyfqD2nh6CTpc/Ec05EsFq84Gyf7qIsEARdKXmc2Gw2
F09WqPwPRg8HnU+f9UJj/nXmZNzdcocLMzoanRMCAwEAAaOCAjcwggIzMB0GA1Ud
DgQWBBQVHrYgo0yPIF1oy2hKWHalGipHkTAfBgNVHSMEGDAWgBTvfdHr7lE/+jGM
3Ii4GsGM/nJrMDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzczM1I2LTVSUF9veGpOeUl1QnJCalA1eWF6QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTQvZjllZTZkLTc2NDAtNGUzZC05YjQ1LWU1NmZlY2E2MTJlNy8x
L0ZSNjJJS05NanlCZGFNdG9TbGgycFJvcVI1RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTQv
ZjllZTZkLTc2NDAtNGUzZC05YjQ1LWU1NmZlY2E2MTJlNy8xLzczM1I2LTVSUF9v
eGpOeUl1QnJCalA1eWF6QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBN
BggrBgEFBQcBBwEB/wQ+MDwwJAQCAAEwHgMEA42KWAMEArlhuAMEAMEWjwMEAMHy
2QMEAcNYwjAUBAIAAjAOAwUDKgGlgAMFAyoKIcAwDQYJKoZIhvcNAQELBQADggEB
AEYSDFJqQ/9a8maRJBksgOMW7xWIvZeKoS37dAcX65xMsUlW8kIOD6qKEajdE0Dv
Z8om1sGtFMyyguhsvt5cbUGSgYT986timE/sMBgdJe8MfWVa8QTieHAdEWGHRpzA
3OAqsBZg8lt6EVggtFmwwPmUcOKA7pKyIzs3VJ9i9m/My2iGe4kwLgD9CpOceP0q
9iF2gdtOIv8DasxZMOPIQ/SYo1/vjmrQ9r4nvjx+Ql5O41N/4IZGneoa3Qfpnl8D
2hz5wdnL3FrXQAKDOy6qTfkjWVIVXuD7m7X//2RPoWOFCobr0DNnIJ25lZnDr0C2
We4Ieu2+va/kEuode55izn8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-ams.rpki-client.org