Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/FL8u_wuEJqbEMYpkf89te0T0-FE.roa
File: FL8u_wuEJqbEMYpkf89te0T0-FE.roa (raw, json)
Hash identifier: bhUdFvCXpYdQAmrXbb78G8/OVgbKrp6TSi96aflFHsk=
Subject key identifier: 14:BF:2E:FF:0B:84:26:A6:C4:31:8A:64:7F:CF:6D:7B:44:F4:F8:51
Certificate issuer: /CN=b780b3b9e096221629fe47e102ac522da03979c4
Certificate serial: 0E789B23
Authority key identifier: B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/FL8u_wuEJqbEMYpkf89te0T0-FE.roa
Signing time: Sat 01 Jan 2022 03:55:15 +0000
ROA not before: Sat 01 Jan 2022 03:55:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205617
IP address blocks: 37.208.112.0/21 maxlen: 21
185.150.208.0/22 maxlen: 22
2a00:c7c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242785059 (0xe789b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b780b3b9e096221629fe47e102ac522da03979c4
Validity
Not Before: Jan 1 03:55:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14bf2eff0b8426a6c4318a647fcf6d7b44f4f851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:d9:94:e1:26:9f:c6:ae:1c:8b:80:3f:5e:
18:e0:04:b5:95:e6:4c:09:6b:4e:aa:f3:b6:dc:99:
87:1d:94:3a:6f:cd:41:b9:a1:a7:ab:d5:c2:c4:e5:
db:6b:9a:83:14:b2:32:6a:73:77:c1:a7:7c:4c:17:
5d:76:d2:96:1d:54:ef:f8:62:7f:51:53:67:57:a9:
7c:dc:70:62:0f:40:5f:40:6e:17:47:47:7a:27:a4:
96:34:af:82:ec:ca:bd:9d:73:71:20:31:41:55:a1:
4d:d0:c8:77:c9:84:da:54:67:53:5a:d1:df:11:05:
59:68:4e:24:8f:9a:66:8c:50:b0:c5:ba:4f:f8:04:
4e:f4:0e:b1:56:7f:b3:2e:da:77:95:0e:ec:12:a1:
48:9d:76:52:d5:3c:bb:92:8a:56:42:4e:94:8b:fb:
d2:fe:de:65:1c:8e:e5:a0:10:8a:24:24:b9:9b:d4:
d5:21:75:1e:12:78:ef:36:a0:99:5e:c3:a2:ad:61:
62:2a:bd:df:1b:8d:11:d2:2f:da:c8:72:e6:9f:83:
cb:5a:ad:a7:34:55:04:51:ba:ff:da:28:92:22:27:
65:5c:b3:9f:8b:92:b8:bf:f5:2b:3f:a4:ee:75:6d:
6a:70:76:05:a9:57:5c:0a:dc:85:7e:27:f7:1b:40:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BF:2E:FF:0B:84:26:A6:C4:31:8A:64:7F:CF:6D:7B:44:F4:F8:51
X509v3 Authority Key Identifier:
keyid:B7:80:B3:B9:E0:96:22:16:29:FE:47:E1:02:AC:52:2D:A0:39:79:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4CzueCWIhYp_kfhAqxSLaA5ecQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/FL8u_wuEJqbEMYpkf89te0T0-FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1f3117-f2a1-4322-b63d-f7edb2688652/1/t4CzueCWIhYp_kfhAqxSLaA5ecQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.208.112.0/21
185.150.208.0/22
IPv6:
2a00:c7c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:d5:f0:04:bd:59:ff:af:37:22:7c:3c:fd:f8:75:1a:2b:83:
f2:bd:4b:74:f9:f7:84:97:a6:ba:84:4b:c1:2f:61:83:ee:4c:
2a:55:4d:4b:11:23:80:c2:11:18:ac:8a:32:9f:48:44:80:58:
12:30:67:d7:3d:c5:d9:e5:c4:5d:f7:09:eb:8a:c4:dc:28:bb:
66:30:df:00:7c:20:7e:0b:5d:54:a4:16:9f:6e:b5:50:86:5d:
93:e4:e9:78:e7:c0:28:8b:8b:ee:10:2b:df:42:e9:c6:cf:5a:
a0:fd:4f:f8:19:3a:f2:a2:3d:ec:d0:61:96:e9:86:92:1c:54:
67:4e:6d:ef:9d:d3:38:d1:af:ef:ba:7c:1d:a6:3d:03:c4:80:
86:5b:20:01:bd:e8:e1:21:07:d9:c0:b2:86:5d:e0:e9:d7:73:
41:5c:b3:6d:0e:79:04:96:09:cf:df:ef:bb:64:95:ac:ad:64:
b2:c0:82:a6:08:a7:f9:0c:4a:8f:a5:80:7b:18:f3:f3:1d:81:
13:8d:b6:69:9b:73:9d:ad:ac:60:82:99:06:09:c8:e8:06:78:
50:54:f4:ea:07:21:e7:fb:9b:c3:81:40:c1:ab:97:d7:63:d4:
29:4c:1d:4f:43:c5:bd:00:b7:db:c9:5c:c1:37:c0:c3:43:77:
12:78:47:78
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEDnibIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
NzgwYjNiOWUwOTYyMjE2MjlmZTQ3ZTEwMmFjNTIyZGEwMzk3OWM0MB4XDTIyMDEw
MTAzNTUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTRiZjJlZmYwYjg0
MjZhNmM0MzE4YTY0N2ZjZjZkN2I0NGY0Zjg1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIu02ZThJp/GrhyLgD9eGOAEtZXmTAlrTqrzttyZhx2UOm/N
Qbmhp6vVwsTl22uagxSyMmpzd8GnfEwXXXbSlh1U7/hif1FTZ1epfNxwYg9AX0Bu
F0dHeiekljSvguzKvZ1zcSAxQVWhTdDId8mE2lRnU1rR3xEFWWhOJI+aZoxQsMW6
T/gETvQOsVZ/sy7ad5UO7BKhSJ12UtU8u5KKVkJOlIv70v7eZRyO5aAQiiQkuZvU
1SF1HhJ47zagmV7Doq1hYiq93xuNEdIv2shy5p+Dy1qtpzRVBFG6/9ookiInZVyz
n4uSuL/1Kz+k7nVtanB2BalXXArchX4n9xtA6VUCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQUvy7/C4QmpsQximR/z217RPT4UTAfBgNVHSMEGDAWgBS3gLO54JYiFin+
R+ECrFItoDl5xDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3Q0Q3p1ZUNXSWhZcF9rZmhBcXhTTGFBNWVjUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGIvMWYzMTE3LWYyYTEtNDMyMi1iNjNkLWY3ZWRiMjY4ODY1Mi8x
L0ZMOHVfd3VFSnFiRU1ZcGtmODl0ZTBUMC1GRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIv
MWYzMTE3LWYyYTEtNDMyMi1iNjNkLWY3ZWRiMjY4ODY1Mi8xL3Q0Q3p1ZUNXSWhZ
cF9rZmhBcXhTTGFBNWVjUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAyXQcAMEArmW0DANBAIAAjAHAwUD
KgDHwDANBgkqhkiG9w0BAQsFAAOCAQEADtXwBL1Z/683Inw8/fh1GiuD8r1LdPn3
hJemuoRLwS9hg+5MKlVNSxEjgMIRGKyKMp9IRIBYEjBn1z3F2eXEXfcJ64rE3Ci7
ZjDfAHwgfgtdVKQWn261UIZdk+TpeOfAKIuL7hAr30Lpxs9aoP1P+Bk68qI97NBh
lumGkhxUZ05t753TONGv77p8HaY9A8SAhlsgAb3o4SEH2cCyhl3g6ddzQVyzbQ55
BJYJz9/vu2SVrK1kssCCpgin+QxKj6WAexjz8x2BE422aZtzna2sYIKZBgnI6AZ4
UFT06gch5/ubw4FAwauX12PUKUwdT0PFvQC328lcwTfAw0N3EnhHeA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:31 2024 by rpki-client on console-ams.rpki-client.org