Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-FB5Z2cWMg04tfkCZICQCQ6hcsY.roa
File: 1-FB5Z2cWMg04tfkCZICQCQ6hcsY.roa (raw, json)
Hash identifier: zJRARTH2Zfctewel5NHjYs+fFPKVPxjWCiizE2iogY8=
Subject key identifier: F8:50:79:67:67:16:32:0D:38:B5:F9:02:64:80:90:09:0E:A1:72:C6
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0A723369
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-FB5Z2cWMg04tfkCZICQCQ6hcsY.roa
Signing time: Sat 01 Jan 2022 16:07:03 +0000
ROA not before: Sat 01 Jan 2022 16:07:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34314
IP address blocks: 151.237.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175256425 (0xa723369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 16:07:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f85079676716320d38b5f902648090090ea172c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:5c:d5:5e:48:56:48:72:73:65:11:6b:c8:
f0:d9:e8:52:41:ed:64:fc:2d:8d:d8:46:f1:85:60:
2b:f2:3c:a0:08:e3:bd:53:08:f4:c1:ca:cb:d7:aa:
07:3b:0e:b0:45:7a:53:25:ef:a1:c6:f0:80:63:3b:
c8:93:60:f9:f9:10:63:da:3c:eb:e1:6b:8e:66:c4:
97:a7:c0:d1:df:e7:05:b6:e9:db:26:ba:34:71:3a:
78:cd:2d:f0:39:02:be:d6:99:a6:09:42:0a:6c:3c:
66:aa:8a:e0:47:ab:7b:9f:e5:ae:e0:ae:d8:ee:10:
c1:8e:f6:81:0e:4a:27:0f:ac:9d:5c:6d:d8:11:34:
17:ce:23:24:d2:b2:e5:fe:54:3c:e6:84:40:ed:34:
20:52:53:d4:2a:38:e8:99:cc:08:00:cd:99:82:93:
0d:e2:85:30:5c:86:a9:87:2c:31:cc:a1:1e:82:0c:
6e:b8:c9:a1:49:15:1f:db:d9:da:33:fd:e0:91:22:
69:c9:9d:88:cf:98:6e:7e:ac:8c:ff:27:a3:f3:3b:
56:ce:06:9a:38:b3:01:f0:46:5c:20:13:e3:1e:d2:
62:ee:5e:eb:ff:73:77:4b:e1:11:df:9b:46:50:1d:
88:87:e5:24:71:fc:43:3a:71:db:64:af:53:1b:68:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:50:79:67:67:16:32:0D:38:B5:F9:02:64:80:90:09:0E:A1:72:C6
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-FB5Z2cWMg04tfkCZICQCQ6hcsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.143.0/24
Signature Algorithm: sha256WithRSAEncryption
67:af:36:82:31:da:5f:02:fd:8a:48:cc:4c:8d:b3:9a:6c:9a:
d2:f1:8a:d4:e2:5e:a5:02:8b:46:bc:9a:77:40:93:2e:73:40:
2d:59:ec:e8:ab:65:39:06:9d:12:35:22:ba:44:36:9f:f2:17:
d4:e4:3c:68:56:4a:8a:c0:66:6b:d8:33:0d:bd:b9:63:43:c3:
82:35:b5:c3:45:ca:5d:ce:81:5a:9e:4a:4c:c9:9c:b1:2c:e1:
b6:be:29:61:ca:bd:0e:7d:4e:65:e7:74:53:93:77:fe:df:76:
bd:95:ad:8a:7c:db:54:fa:dd:20:8b:de:b9:92:ec:b5:8f:ca:
fb:fa:ba:e2:39:cb:57:4e:73:6d:13:7f:9c:40:61:5c:76:fb:
13:0c:cc:a3:3c:6c:6e:83:b4:7d:cb:f0:6b:be:a1:23:ef:6e:
ce:5a:2a:70:0f:b1:fb:51:8f:f6:46:5f:24:ef:cb:75:c9:f0:
55:bb:8f:9f:8f:2f:3b:7b:75:c4:57:90:dc:a9:c5:00:5b:de:
3e:31:d6:8d:43:03:d5:d7:05:20:a8:7a:60:68:f4:10:1f:6d:
d6:25:01:50:56:c8:dc:4d:01:40:d7:bf:c2:b3:a5:43:ce:0a:
02:ee:91:56:49:91:06:6a:e7:cf:36:cc:71:2b:d2:6c:4a:23:
2d:08:ab:cd
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIECnIzaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
ZWJmMzAyMDFmMTJhMDQwZDM4NmQyYjRlZWQ0NDg0NjIzZTRkMTFiMB4XDTIyMDEw
MTE2MDcwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjg1MDc5Njc2NzE2
MzIwZDM4YjVmOTAyNjQ4MDkwMDkwZWExNzJjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjsXNVeSFZIcnNlEWvI8NnoUkHtZPwtjdhG8YVgK/I8oAjj
vVMI9MHKy9eqBzsOsEV6UyXvocbwgGM7yJNg+fkQY9o86+FrjmbEl6fA0d/nBbbp
2ya6NHE6eM0t8DkCvtaZpglCCmw8ZqqK4Eere5/lruCu2O4QwY72gQ5KJw+snVxt
2BE0F84jJNKy5f5UPOaEQO00IFJT1Co46JnMCADNmYKTDeKFMFyGqYcsMcyhHoIM
brjJoUkVH9vZ2jP94JEiacmdiM+Ybn6sjP8no/M7Vs4GmjizAfBGXCAT4x7SYu5e
6/9zd0vhEd+bRlAdiIflJHH8Qzpx22SvUxto8TcCAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT4UHlnZxYyDTi1+QJkgJAJDqFyxjAfBgNVHSMEGDAWgBT+vzAgHxKgQNOG
0rTu1EhGI+TRGzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0OS8x
LzEtRkI1WjJjV01nMDR0ZmtDWklDUUNRNmhjc1kucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Nj
L2Y4YzRhMi05NmFjLTRiNGUtYTE5NS1hOTdjMGRjMGE3NDkvMS9fcjh3SUI4U29F
RFRodEswN3RSSVJpUGswUnMuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACX7Y8wDQYJKoZIhvcNAQELBQAD
ggEBAGevNoIx2l8C/YpIzEyNs5psmtLxitTiXqUCi0a8mndAky5zQC1Z7OirZTkG
nRI1IrpENp/yF9TkPGhWSorAZmvYMw29uWNDw4I1tcNFyl3OgVqeSkzJnLEs4ba+
KWHKvQ59TmXndFOTd/7fdr2VrYp821T63SCL3rmS7LWPyvv6uuI5y1dOc20Tf5xA
YVx2+xMMzKM8bG6DtH3L8Gu+oSPvbs5aKnAPsftRj/ZGXyTvy3XJ8FW7j5+PLzt7
dcRXkNypxQBb3j4x1o1DA9XXBSCoemBo9BAfbdYlAVBWyNxNAUDXv8KzpUPOCgLu
kVZJkQZq5882zHEr0mxKIy0Iq80=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org