Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/_fro9DQ5xZULDeTtdKdQ52fieS4.roa
File: _fro9DQ5xZULDeTtdKdQ52fieS4.roa (raw, json)
Hash identifier: DKWxo4xDK+1eYtJ/+oSUTYFfMwKlOjXwFUZDGLB2BKE=
Subject key identifier: FD:FA:E8:F4:34:39:C5:95:0B:0D:E4:ED:74:A7:50:E7:67:E2:79:2E
Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Certificate serial: 011997
Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/_fro9DQ5xZULDeTtdKdQ52fieS4.roa
Signing time: Wed 27 Apr 2022 20:59:31 +0000
ROA not before: Wed 27 Apr 2022 20:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203606
IP address blocks: 185.123.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72087 (0x11997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781
Validity
Not Before: Apr 27 20:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdfae8f43439c5950b0de4ed74a750e767e2792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:01:4d:d3:31:bd:7d:07:ea:25:0f:0c:1f:4d:
d0:e9:0f:cd:9c:12:e1:46:78:e8:ac:d2:4a:82:57:
16:96:10:84:06:fb:46:00:16:86:e1:e7:75:fd:47:
2b:4d:d2:b6:50:64:bb:11:c2:ed:bf:e7:62:73:e4:
2f:a7:29:7f:6a:fd:6e:8c:0c:92:b8:78:5c:64:34:
7e:06:df:88:c1:04:1e:df:d4:33:8d:af:c9:26:2a:
0b:14:d7:e6:28:f1:d7:d4:8f:ff:8d:b6:c7:10:66:
11:0f:c5:c2:50:5d:a5:7c:ee:38:ce:e3:cd:22:20:
2e:6f:83:a5:b5:96:ca:1a:21:38:ee:26:af:57:cd:
2a:1d:35:1a:10:b9:23:0f:cb:c5:2c:ea:2a:8d:b8:
d9:3c:cb:99:f5:da:19:3b:9c:cc:be:69:87:0b:7f:
27:95:86:40:dc:77:67:18:df:54:f6:dc:d7:25:50:
7e:d5:37:5c:7c:fa:a8:3f:a9:0c:40:29:3e:c5:03:
16:22:71:e1:45:db:4d:af:3f:8a:cd:4d:c1:95:fd:
51:78:00:5b:7d:65:5b:1e:94:0f:a6:c5:c0:05:c9:
c3:71:04:eb:12:f9:e4:b9:8f:90:f3:9b:ed:4f:ae:
60:14:87:97:79:83:d7:62:db:96:c4:c3:a7:76:11:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:E8:F4:34:39:C5:95:0B:0D:E4:ED:74:A7:50:E7:67:E2:79:2E
X509v3 Authority Key Identifier:
keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/_fro9DQ5xZULDeTtdKdQ52fieS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.104.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:36:2a:09:12:de:14:b9:f4:7f:15:5a:ae:db:53:21:e6:85:
44:4d:24:13:28:82:0c:fb:31:19:eb:df:b0:6b:a7:84:e8:67:
ea:9b:a6:73:0e:1b:60:a0:14:4d:55:bc:1d:b4:f7:d6:f8:f4:
e5:a5:2f:3a:52:cc:dd:2f:c4:73:3f:ef:74:f4:cc:12:04:e8:
2f:85:e2:17:25:81:6c:31:ee:a4:ff:7d:8d:c7:78:9a:39:a4:
83:49:ff:49:e3:54:9e:a7:79:f4:ff:a3:e2:85:1c:8b:a9:9e:
a4:88:2e:63:df:38:41:ed:1e:26:87:cc:54:9f:96:05:73:62:
b3:a2:b4:ae:56:d7:f5:71:8c:4f:aa:3b:67:d5:5d:9e:10:be:
d6:00:d9:80:8c:7a:e4:8b:34:2d:66:12:24:55:7c:25:0c:5f:
e6:bc:56:1a:38:28:44:91:1d:36:7e:4e:aa:9b:70:7f:3c:61:
a0:d0:bc:f1:e6:7b:8d:7d:82:2d:72:14:83:30:0b:67:c6:a6:
f0:18:74:6e:91:de:b5:99:54:c5:33:a2:82:7c:ba:36:68:9f:
97:11:ed:36:b2:66:34:8d:3c:ce:c5:e7:e1:54:62:2b:97:0c:
a1:ac:5f:74:14:f2:83:25:62:f2:71:25:6f:62:91:d1:72:b8:
19:f5:0d:f3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDARmXMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg2
ODFiZGE2OTEwNzlmN2FiMjM1Zjc5ZDljMGVmNzUyYmZjMDM3ODEwHhcNMjIwNDI3
MjA1OTMxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmZGZhZThmNDM0Mzlj
NTk1MGIwZGU0ZWQ3NGE3NTBlNzY3ZTI3OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA+AFN0zG9fQfqJQ8MH03Q6Q/NnBLhRnjorNJKglcWlhCEBvtG
ABaG4ed1/UcrTdK2UGS7EcLtv+dic+Qvpyl/av1ujAySuHhcZDR+Bt+IwQQe39Qz
ja/JJioLFNfmKPHX1I//jbbHEGYRD8XCUF2lfO44zuPNIiAub4OltZbKGiE47iav
V80qHTUaELkjD8vFLOoqjbjZPMuZ9doZO5zMvmmHC38nlYZA3HdnGN9U9tzXJVB+
1TdcfPqoP6kMQCk+xQMWInHhRdtNrz+KzU3Blf1ReABbfWVbHpQPpsXABcnDcQTr
EvnkuY+Q85vtT65gFIeXeYPXYtuWxMOndhHXewIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFP366PQ0OcWVCw3k7XSnUOdn4nkuMB8GA1UdIwQYMBaAFIaBvaaRB596sjX3
nZwO91K/wDeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0LzEv
X2ZybzlEUTV4WlVMRGVUdGRLZFE1MmZpZVM0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8w
MGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0LzEvaG9HOXBwRUhuM3F5
TmZlZG5BNzNVcl9BTjRFLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXtoMA0GCSqGSIb3DQEBCwUAA4IB
AQBsNioJEt4UufR/FVqu21Mh5oVETSQTKIIM+zEZ69+wa6eE6Gfqm6ZzDhtgoBRN
VbwdtPfW+PTlpS86UszdL8RzP+909MwSBOgvheIXJYFsMe6k/32Nx3iaOaSDSf9J
41Sep3n0/6PihRyLqZ6kiC5j3zhB7R4mh8xUn5YFc2KzorSuVtf1cYxPqjtn1V2e
EL7WANmAjHrkizQtZhIkVXwlDF/mvFYaOChEkR02fk6qm3B/PGGg0Lzx5nuNfYIt
chSDMAtnxqbwGHRukd61mVTFM6KCfLo2aJ+XEe02smY0jTzOxefhVGIrlwyhrF90
FPKDJWLycSVvYpHRcrgZ9Q3z
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:51 2024 by rpki-client on console-ams.rpki-client.org