Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/cFLL-XCLC-83c7mf_JpSiPbkKQ8.roa
File: cFLL-XCLC-83c7mf_JpSiPbkKQ8.roa (raw, json)
Hash identifier: uORNLZuc+CWxy6PsXULNoY/hzn1auHuH4NMbSRLmfbU=
Subject key identifier: 70:52:CB:F9:70:8B:0B:EF:37:73:B9:9F:FC:9A:52:88:F6:E4:29:0F
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 02B0AEFC
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/cFLL-XCLC-83c7mf_JpSiPbkKQ8.roa
Signing time: Tue 26 Apr 2022 10:11:19 +0000
ROA not before: Tue 26 Apr 2022 10:11:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12325
IP address blocks: 194.8.80.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45133564 (0x2b0aefc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 26 10:11:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7052cbf9708b0bef3773b99ffc9a5288f6e4290f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:71:c7:1d:79:1b:e7:ca:b0:21:89:51:8a:
eb:ee:5e:0e:47:e9:de:09:f1:5c:00:5f:92:3b:cd:
2c:d9:0b:df:17:ea:0f:c2:3e:47:6e:01:11:e6:18:
d9:68:1d:93:e5:66:d2:a1:7d:b4:6d:bc:58:fe:36:
01:d6:5d:0a:9f:73:1d:6b:37:04:b4:4b:05:ec:9a:
82:fd:a6:1b:44:b4:ae:62:95:10:99:67:38:a7:de:
9e:1b:5d:d5:cf:b2:a8:e9:1d:c8:4d:c3:15:29:dd:
fb:b9:ab:79:5c:88:84:55:a6:de:fa:36:7b:09:33:
6d:b9:f1:a7:7c:fb:04:ed:b7:f9:63:72:17:25:b8:
86:2b:4d:b2:ae:84:8f:a8:80:20:f4:13:32:ae:ac:
4a:0d:b4:52:fc:66:46:56:33:16:cc:c9:7b:d4:fa:
df:81:52:70:8f:d5:a3:6b:1f:a7:07:93:18:bf:69:
9e:d7:d3:25:25:18:6c:39:7b:1f:b5:bb:d5:65:49:
19:a4:81:69:09:96:e3:e1:eb:47:36:6e:ec:d9:76:
1d:20:5e:1e:49:a3:72:8a:c2:e6:cc:17:35:9f:85:
ec:8b:3c:00:9d:e9:21:31:08:32:54:5d:81:7d:73:
f9:b3:74:10:96:39:aa:3b:74:22:c1:d3:2e:8f:17:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:CB:F9:70:8B:0B:EF:37:73:B9:9F:FC:9A:52:88:F6:E4:29:0F
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/cFLL-XCLC-83c7mf_JpSiPbkKQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f8:02:4a:45:a4:23:8f:64:02:ab:da:00:ea:f4:66:7e:08:
b5:9a:19:16:5c:ab:c0:f7:4a:62:cd:02:4e:7d:cc:46:11:06:
32:27:09:e9:60:39:45:e6:f4:1e:64:da:40:30:6b:00:ee:88:
45:a8:88:f8:f7:89:6c:aa:2d:20:47:ba:37:df:c0:57:42:ed:
1a:f4:bc:7e:40:1e:e9:a7:79:07:77:23:5f:11:bf:4c:b8:f5:
51:f5:9c:f6:33:84:08:1f:d5:db:46:ee:58:c0:c7:ed:72:d6:
b2:fa:94:a2:9f:58:1e:d7:6f:07:68:c2:7e:0b:4f:6a:2a:08:
cd:1f:66:fb:37:e6:d4:db:d5:bf:a5:32:c0:aa:08:e5:41:af:
2b:6d:f1:61:53:3e:e0:db:70:e6:5e:9e:76:b0:08:f1:6f:f3:
62:4e:71:7d:e4:14:74:7a:3b:95:38:0c:b5:98:57:0a:57:e6:
0b:8e:1c:8e:77:8d:57:a0:fc:d6:43:b3:de:96:90:78:55:93:
c8:11:d3:91:73:c9:79:ad:be:a9:bb:bb:e7:80:02:06:03:90:
4d:d0:d1:ee:a0:82:29:85:12:0c:e3:81:db:15:a0:50:f7:b8:
89:4e:96:a0:ef:28:b2:64:3d:db:9e:0b:73:0a:a0:3b:63:2c:
3f:2f:34:24
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEArCu/DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MDRkYjc2MjMyNDFkN2U2Njc4ZmMyNTc1MWZhNGUwYjY2NjUxODZiMB4XDTIyMDQy
NjEwMTExOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzA1MmNiZjk3MDhi
MGJlZjM3NzNiOTlmZmM5YTUyODhmNmU0MjkwZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL3dcccdeRvnyrAhiVGK6+5eDkfp3gnxXABfkjvNLNkL3xfq
D8I+R24BEeYY2Wgdk+Vm0qF9tG28WP42AdZdCp9zHWs3BLRLBeyagv2mG0S0rmKV
EJlnOKfenhtd1c+yqOkdyE3DFSnd+7mreVyIhFWm3vo2ewkzbbnxp3z7BO23+WNy
FyW4hitNsq6Ej6iAIPQTMq6sSg20UvxmRlYzFszJe9T634FScI/Vo2sfpweTGL9p
ntfTJSUYbDl7H7W71WVJGaSBaQmW4+HrRzZu7Nl2HSBeHkmjcorC5swXNZ+F7Is8
AJ3pITEIMlRdgX1z+bN0EJY5qjt0IsHTLo8XsqMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRwUsv5cIsL7zdzuZ/8mlKI9uQpDzAfBgNVHSMEGDAWgBTATbdiMkHX5meP
wldR+k4LZmUYazAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dFMjNZakpCMS1abmo4SlhVZnBPQzJabEdHcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDgvNmU4NzRlLTczZmUtNGRiYi1iNzRjLTA0MjNmMjYzZjJjYi8x
L2NGTEwtWENMQy04M2M3bWZfSnBTaVBia0tROC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDgv
NmU4NzRlLTczZmUtNGRiYi1iNzRjLTA0MjNmMjYzZjJjYi8xL3dFMjNZakpCMS1a
bmo4SlhVZnBPQzJabEdHcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIIUDANBgkqhkiG9w0BAQsFAAOC
AQEASvgCSkWkI49kAqvaAOr0Zn4ItZoZFlyrwPdKYs0CTn3MRhEGMicJ6WA5Reb0
HmTaQDBrAO6IRaiI+PeJbKotIEe6N9/AV0LtGvS8fkAe6ad5B3cjXxG/TLj1UfWc
9jOECB/V20buWMDH7XLWsvqUop9YHtdvB2jCfgtPaioIzR9m+zfm1NvVv6UywKoI
5UGvK23xYVM+4Ntw5l6edrAI8W/zYk5xfeQUdHo7lTgMtZhXClfmC44cjneNV6D8
1kOz3paQeFWTyBHTkXPJea2+qbu754ACBgOQTdDR7qCCKYUSDOOB2xWgUPe4iU6W
oO8osmQ9254LcwqgO2MsPy80JA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org