Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FBXBzPdqN8zPN470andBfcmi3mo.roa
File: FBXBzPdqN8zPN470andBfcmi3mo.roa (raw, json)
Hash identifier: TA0NeY+QQl8NsbU3FVP1GJJj6G61CrUqVAspDy7Z3cY=
Subject key identifier: 14:15:C1:CC:F7:6A:37:CC:CF:37:8E:F4:6A:77:41:7D:C9:A2:DE:6A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 065EE2DA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FBXBzPdqN8zPN470andBfcmi3mo.roa
Signing time: Sun 02 Jan 2022 23:02:11 +0000
ROA not before: Sun 02 Jan 2022 23:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106881754 (0x65ee2da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 23:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1415c1ccf76a37cccf378ef46a77417dc9a2de6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d5:30:a3:9f:d6:36:bf:de:47:8c:82:06:e1:
c8:8d:82:cd:d5:43:6a:fd:98:fa:57:9c:75:d4:41:
5f:a2:bf:a4:2d:2b:92:ca:70:10:69:49:03:dc:83:
07:59:c1:2f:1d:d8:74:12:41:6f:71:ca:32:73:5e:
06:fb:a7:5f:b0:b4:92:16:9e:bc:d8:53:b9:f6:a8:
4e:7d:67:66:9a:ea:ef:c1:07:4b:25:8c:bf:07:8b:
7b:c3:0f:21:28:73:b7:94:93:16:af:ee:99:68:c4:
2e:85:1c:d1:14:c3:db:f6:c1:91:91:e8:65:c4:5c:
db:49:d6:1c:55:a9:3f:05:aa:2e:e3:9f:fe:6d:93:
47:59:48:25:4d:d7:5a:72:8b:b2:dd:4e:ac:de:0d:
bb:37:ed:47:c4:09:19:1e:9b:f0:ef:d8:48:7b:7c:
68:51:c1:38:70:f4:38:73:2a:82:13:23:ce:f9:b4:
55:8f:0f:9e:30:94:46:f9:3c:2b:1d:1a:8e:ca:6a:
65:04:20:ff:ea:0b:4a:6f:61:05:59:d6:c3:28:24:
26:8d:bb:0a:f8:dd:f2:22:d9:83:1b:6b:a0:7f:2e:
4e:3b:ce:b3:68:a1:de:29:4f:90:e9:aa:6f:f2:31:
c0:ab:bd:a3:1b:58:30:c3:3f:ce:84:93:13:03:86:
69:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:C1:CC:F7:6A:37:CC:CF:37:8E:F4:6A:77:41:7D:C9:A2:DE:6A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FBXBzPdqN8zPN470andBfcmi3mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:35:e8:ba:64:a4:f4:cd:ed:27:a3:5e:90:94:ac:e9:03:37:
ef:2d:7b:cb:74:2e:1e:a0:a5:d7:27:af:d2:6c:c0:73:47:d9:
42:ce:d4:48:58:69:a5:35:ce:12:08:11:20:42:7d:da:c5:db:
c4:ec:f7:fb:30:67:de:64:62:24:f1:11:9e:3e:8c:9b:36:89:
6d:b4:5c:43:bd:fb:80:fb:c1:0d:b6:12:34:f4:48:a6:03:29:
b4:90:ba:fa:72:cf:2a:a9:2d:19:f9:ad:05:1e:c0:10:47:18:
f9:c9:d4:d7:0a:39:4b:54:3a:d8:a8:ed:c4:08:60:ca:34:fd:
fa:a5:df:63:c9:8f:7f:18:73:b3:40:16:2b:58:e1:4c:61:bc:
47:03:4f:9e:ee:20:bb:66:ac:1e:1d:2b:2c:6e:9a:04:ea:a7:
fe:c2:f7:b9:9f:a6:cf:15:83:4e:7a:57:5f:bd:ae:e7:e8:d9:
c5:3d:9b:90:77:21:37:49:2c:fb:45:47:97:a1:4e:39:be:e9:
03:91:fe:65:fb:78:18:6e:50:e1:88:49:cc:de:88:bc:95:5a:
89:f6:d8:6b:88:b5:ea:5b:1c:87:ae:31:f6:e8:06:5e:96:4a:
96:09:3c:e5:00:b9:a5:d5:48:3c:34:5b:11:37:51:f7:8a:2e:
34:41:e0:57
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBl7i2jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDY3ODRjMTA1MDg1YjlkNmFkNWY3M2EwM2IyMGQ5YTVjMTE0Y2FmMB4XDTIyMDEw
MjIzMDIxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQxNWMxY2NmNzZh
MzdjY2NmMzc4ZWY0NmE3NzQxN2RjOWEyZGU2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOTVMKOf1ja/3keMggbhyI2CzdVDav2Y+lecddRBX6K/pC0r
kspwEGlJA9yDB1nBLx3YdBJBb3HKMnNeBvunX7C0khaevNhTufaoTn1nZprq78EH
SyWMvweLe8MPIShzt5STFq/umWjELoUc0RTD2/bBkZHoZcRc20nWHFWpPwWqLuOf
/m2TR1lIJU3XWnKLst1OrN4NuzftR8QJGR6b8O/YSHt8aFHBOHD0OHMqghMjzvm0
VY8PnjCURvk8Kx0ajspqZQQg/+oLSm9hBVnWwygkJo27Cvjd8iLZgxtroH8uTjvO
s2ih3ilPkOmqb/IxwKu9oxtYMMM/zoSTEwOGadcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUFcHM92o3zM83jvRqd0F9yaLeajAfBgNVHSMEGDAWgBRgZ4TBBQhbnWrV
9zoDsg2aXBFMrzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lHZUV3UVVJVzUxcTFmYzZBN0lObWx3UlRLOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvMmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8x
L0ZCWEJ6UGRxTjh6UE40NzBhbmRCZmNtaTNtby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
MmI4MzRlLWJhZDItNDlmZi1iYTM4LWI0MzQyYmE5MWFiYy8xL1lHZUV3UVVJVzUx
cTFmYzZBN0lObWx3UlRLOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALnCHTANBgkqhkiG9w0BAQsFAAOC
AQEAHzXoumSk9M3tJ6NekJSs6QM37y17y3QuHqCl1yev0mzAc0fZQs7USFhppTXO
EggRIEJ92sXbxOz3+zBn3mRiJPERnj6MmzaJbbRcQ737gPvBDbYSNPRIpgMptJC6
+nLPKqktGfmtBR7AEEcY+cnU1wo5S1Q62KjtxAhgyjT9+qXfY8mPfxhzs0AWK1jh
TGG8RwNPnu4gu2asHh0rLG6aBOqn/sL3uZ+mzxWDTnpXX72u5+jZxT2bkHchN0ks
+0VHl6FOOb7pA5H+Zft4GG5Q4YhJzN6IvJVaifbYa4i16lsch64x9ugGXpZKlgk8
5QC5pdVIPDRbETdR94ouNEHgVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org