Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/FawjXCpnGh7ywmk2FOHlmZLEpDk.roa
File: FawjXCpnGh7ywmk2FOHlmZLEpDk.roa (raw, json)
Hash identifier: iGKrqemJRD9xjZfEIdAGRbG4wtFFxUzIzbJYtQwhYdA=
Subject key identifier: 15:AC:23:5C:2A:67:1A:1E:F2:C2:69:36:14:E1:E5:99:92:C4:A4:39
Certificate issuer: /CN=0414e9902b63fefabcc7d6887a4c8185cca0932f
Certificate serial: 025B9E60
Authority key identifier: 04:14:E9:90:2B:63:FE:FA:BC:C7:D6:88:7A:4C:81:85:CC:A0:93:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/FawjXCpnGh7ywmk2FOHlmZLEpDk.roa
Signing time: Sat 01 Jan 2022 01:59:43 +0000
ROA not before: Sat 01 Jan 2022 01:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60631
IP address blocks: 185.190.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39558752 (0x25b9e60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0414e9902b63fefabcc7d6887a4c8185cca0932f
Validity
Not Before: Jan 1 01:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15ac235c2a671a1ef2c2693614e1e59992c4a439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:ee:67:75:2a:0a:1a:c5:fc:65:04:df:4b:
46:1a:bf:5d:e2:01:b5:0c:cb:7c:75:86:f7:a5:a4:
fc:80:ce:59:78:63:66:10:5e:03:8b:a9:24:a6:3c:
d4:84:e3:af:4b:31:93:45:8f:07:65:b7:b9:d4:04:
ba:09:d2:a0:cf:62:bc:e5:e0:de:8b:e7:1e:dd:21:
fe:4f:0f:e2:e5:4b:fb:a5:3d:9e:cb:62:a8:76:ab:
fa:1c:ab:26:cb:35:9c:a2:12:c4:06:a6:c7:3b:ba:
12:86:87:ac:2e:80:74:ed:da:75:88:e9:aa:53:13:
93:6f:c9:f0:94:2e:f1:2b:8c:0e:ab:83:45:a0:21:
e5:c7:83:f4:e6:a0:92:e8:26:6a:ee:67:b9:c9:fc:
ca:44:64:e5:62:bb:5f:7d:1b:75:12:30:15:38:4f:
81:d0:8d:c9:47:7c:8a:e1:0e:3f:f7:c6:fe:97:d8:
74:b3:8d:d9:e0:89:e2:b1:15:71:1b:e5:2b:ac:9d:
69:1a:30:68:ce:c5:bb:e0:2a:e1:8c:a9:44:82:fb:
ad:34:c6:82:e8:62:83:5a:57:9a:61:bd:87:c6:2c:
ab:c6:c5:16:d8:27:11:51:8e:07:51:d3:9e:ae:36:
dd:a3:35:53:60:e0:ab:50:d2:c9:c4:89:cd:1d:60:
59:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:23:5C:2A:67:1A:1E:F2:C2:69:36:14:E1:E5:99:92:C4:A4:39
X509v3 Authority Key Identifier:
keyid:04:14:E9:90:2B:63:FE:FA:BC:C7:D6:88:7A:4C:81:85:CC:A0:93:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBTpkCtj_vq8x9aIekyBhcygky8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/FawjXCpnGh7ywmk2FOHlmZLEpDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/98e2bb-3f94-48bf-9d00-c32bfe14b817/1/BBTpkCtj_vq8x9aIekyBhcygky8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.39.0/24
Signature Algorithm: sha256WithRSAEncryption
00:94:00:c2:bc:51:66:bd:37:41:6a:c7:86:3b:28:43:a5:04:
06:d0:29:dd:86:6e:80:9e:bf:25:22:21:b5:17:34:44:a9:1e:
5e:2b:99:ee:2a:6f:de:00:5a:c6:57:25:48:96:e3:52:e0:9d:
68:c5:88:31:8b:6b:39:8d:9e:13:1c:64:ca:a7:19:2e:7b:c2:
1e:07:ec:ce:47:c8:16:34:f3:36:33:47:4c:fb:bf:d3:63:72:
81:64:81:68:59:f8:fe:fa:a8:e6:5a:6b:13:78:8e:08:cd:be:
43:84:f1:45:40:e8:d1:00:a5:26:9a:15:8c:d3:28:5b:18:7e:
ab:e2:62:6c:6e:51:05:8e:0d:e9:62:8a:13:8f:1b:ea:31:1b:
d3:65:41:c1:d5:62:9d:d1:52:ce:f7:3a:c7:30:8e:02:31:d6:
cc:7a:39:65:f3:f5:ab:b2:d7:a9:b6:26:13:51:14:84:94:5b:
3a:ce:9a:0c:6f:c4:5a:6f:43:1e:c3:72:fa:7c:8d:6e:23:9a:
9a:3c:88:17:09:05:a3:7b:a6:db:c2:95:68:0b:3b:68:4e:14:
19:34:1e:91:91:20:a8:bd:da:cd:51:07:56:d6:db:d8:52:2e:
76:24:5f:18:c7:0f:ff:2c:82:24:16:6b:27:4e:2b:4a:1d:8c:
44:9a:d2:97
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAlueYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
NDE0ZTk5MDJiNjNmZWZhYmNjN2Q2ODg3YTRjODE4NWNjYTA5MzJmMB4XDTIyMDEw
MTAxNTk0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTVhYzIzNWMyYTY3
MWExZWYyYzI2OTM2MTRlMWU1OTk5MmM0YTQzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAINM7md1KgoaxfxlBN9LRhq/XeIBtQzLfHWG96Wk/IDOWXhj
ZhBeA4upJKY81ITjr0sxk0WPB2W3udQEugnSoM9ivOXg3ovnHt0h/k8P4uVL+6U9
nstiqHar+hyrJss1nKISxAamxzu6EoaHrC6AdO3adYjpqlMTk2/J8JQu8SuMDquD
RaAh5ceD9Oagkugmau5nucn8ykRk5WK7X30bdRIwFThPgdCNyUd8iuEOP/fG/pfY
dLON2eCJ4rEVcRvlK6ydaRowaM7Fu+Aq4YypRIL7rTTGguhig1pXmmG9h8Ysq8bF
FtgnEVGOB1HTnq423aM1U2Dgq1DSycSJzR1gWVcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQVrCNcKmcaHvLCaTYU4eWZksSkOTAfBgNVHSMEGDAWgBQEFOmQK2P++rzH
1oh6TIGFzKCTLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0JCVHBrQ3RqX3ZxOHg5YUlla3lCaGN5Z2t5OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWQvOThlMmJiLTNmOTQtNDhiZi05ZDAwLWMzMmJmZTE0YjgxNy8x
L0Zhd2pYQ3BuR2g3eXdtazJGT0hsbVpMRXBEay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQv
OThlMmJiLTNmOTQtNDhiZi05ZDAwLWMzMmJmZTE0YjgxNy8xL0JCVHBrQ3RqX3Zx
OHg5YUlla3lCaGN5Z2t5OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm+JzANBgkqhkiG9w0BAQsFAAOC
AQEAAJQAwrxRZr03QWrHhjsoQ6UEBtAp3YZugJ6/JSIhtRc0RKkeXiuZ7ipv3gBa
xlclSJbjUuCdaMWIMYtrOY2eExxkyqcZLnvCHgfszkfIFjTzNjNHTPu/02NygWSB
aFn4/vqo5lprE3iOCM2+Q4TxRUDo0QClJpoVjNMoWxh+q+JibG5RBY4N6WKKE48b
6jEb02VBwdVindFSzvc6xzCOAjHWzHo5ZfP1q7LXqbYmE1EUhJRbOs6aDG/EWm9D
HsNy+nyNbiOamjyIFwkFo3um28KVaAs7aE4UGTQekZEgqL3azVEHVtbb2FIudiRf
GMcP/yyCJBZrJ04rSh2MRJrSlw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:13 2024 by rpki-client on console-ams.rpki-client.org