Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/FvYPbkwevhgfNh2FTRagIjqiD_k.roa
File: FvYPbkwevhgfNh2FTRagIjqiD_k.roa (raw, json)
Hash identifier: 64hKnEHxaFHRJrsKcI4uieQZcxNlwlDmZOfbNw82mMM=
Subject key identifier: 16:F6:0F:6E:4C:1E:BE:18:1F:36:1D:85:4D:16:A0:22:3A:A2:0F:F9
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 0185720C5C7640B9EE72CB328F3D912010BA
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/FvYPbkwevhgfNh2FTRagIjqiD_k.roa
Signing time: Mon 02 Jan 2023 10:34:50 +0000
ROA not before: Mon 02 Jan 2023 10:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 185.148.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:5c:76:40:b9:ee:72:cb:32:8f:3d:91:20:10:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Jan 2 10:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f60f6e4c1ebe181f361d854d16a0223aa20ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:9c:2e:c3:eb:56:c5:74:8f:18:05:db:4d:
50:cc:2d:54:b1:2a:b4:4a:5e:fb:48:16:98:20:c7:
72:a6:9d:e5:21:0e:73:06:3c:c1:9b:bb:30:75:97:
da:eb:ad:95:98:56:98:87:3d:1d:17:58:73:c9:dd:
f0:ad:fd:d9:9b:4a:4b:83:07:30:b6:a8:72:38:52:
92:4a:39:6c:6c:15:d4:58:40:52:77:13:2b:e0:e4:
8d:76:46:57:16:26:bb:3e:4e:55:56:13:56:30:19:
ba:bb:a2:57:8e:53:ee:dc:38:1e:1c:75:04:82:fe:
78:c3:cf:88:cb:5e:f5:41:27:c4:72:dc:f4:cb:76:
d1:10:c5:bc:8e:f6:85:f1:a2:2e:2f:b0:14:e9:9f:
c1:0d:e4:c7:c7:01:57:16:89:78:04:f7:e4:72:ae:
b5:4a:d2:e6:89:10:09:3b:ca:b9:07:9c:91:32:65:
43:b9:76:98:cc:fd:fe:8c:2b:29:9a:b1:ae:8e:5b:
10:2b:0a:30:66:c3:4e:66:e5:ec:8b:4b:c5:b7:81:
89:44:ee:42:46:5a:b5:0c:d3:4c:dc:89:d7:8f:f9:
4d:21:d3:0c:74:a0:fb:95:65:e1:a2:fd:00:29:20:
6d:00:ca:ea:29:50:7e:7a:a9:77:8f:2a:8d:03:b0:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:0F:6E:4C:1E:BE:18:1F:36:1D:85:4D:16:A0:22:3A:A2:0F:F9
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/FvYPbkwevhgfNh2FTRagIjqiD_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:2d:59:5b:91:df:78:d7:a5:d9:ee:f0:f6:2c:ea:7b:d2:1e:
0f:5b:ae:0e:22:e5:8c:ce:51:30:5f:cd:5d:30:63:eb:68:60:
dd:a1:14:de:fe:5f:17:6b:d5:32:a7:62:59:e4:e9:69:bb:3b:
ab:f1:be:45:71:a5:68:3d:af:30:61:2a:2f:65:2f:2a:bc:6c:
ff:b1:7d:dc:73:e8:85:5f:37:7a:b6:37:dd:66:b2:ac:c6:7c:
ae:a8:0d:57:99:87:d5:7e:1b:26:d0:9d:f0:03:1a:4a:90:83:
20:4e:a4:ac:34:be:e5:1b:3d:c3:a5:97:69:a5:71:74:28:cc:
e9:95:9d:c8:7a:f7:fa:60:21:01:a7:ca:b2:d0:70:11:a7:1b:
3c:88:4e:5c:33:5a:87:64:9d:88:db:ed:b8:8d:8e:e2:0f:90:
66:99:ad:8a:bc:9e:e2:82:ae:d1:a0:af:94:c8:62:74:cc:ae:
da:f9:10:91:2e:14:4d:07:8d:9c:cf:57:14:56:89:9c:2d:52:
7d:9d:70:11:74:27:08:2a:67:74:7a:11:e7:72:65:fa:f0:c3:
9e:9c:61:33:4f:ed:ea:c7:51:3d:1b:ba:8a:74:fe:24:0d:8d:
53:f5:1d:62:17:9b:34:a9:0d:60:96:0f:83:f8:de:07:33:a9:
f8:03:80:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDFx2QLnucssyjz2RIBC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYjlmOTAwYmE2MThiZThlN2M5MjA5NjNjZGY3NTdiOTA1
MGU1MDkwHhcNMjMwMTAyMTAzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmY2MGY2ZTRjMWViZTE4MWYzNjFkODU0ZDE2YTAyMjNhYTIwZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+CcLsPrVsV0jxgF201QzC1UsSq0
Sl77SBaYIMdypp3lIQ5zBjzBm7swdZfa662VmFaYhz0dF1hzyd3wrf3Zm0pLgwcw
tqhyOFKSSjlsbBXUWEBSdxMr4OSNdkZXFia7Pk5VVhNWMBm6u6JXjlPu3DgeHHUE
gv54w8+Iy171QSfEctz0y3bREMW8jvaF8aIuL7AU6Z/BDeTHxwFXFol4BPfkcq61
StLmiRAJO8q5B5yRMmVDuXaYzP3+jCspmrGujlsQKwowZsNOZuXsi0vFt4GJRO5C
Rlq1DNNM3InXj/lNIdMMdKD7lWXhov0AKSBtAMrqKVB+eql3jyqNA7CZzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBb2D25MHr4YHzYdhU0WoCI6og/5MB8GA1UdIwQY
MBaAFEq5+QC6YYvo58kgljzfdXuQUOUJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQt
OWUwYjE5NmEwNDg3LzEvRnZZUGJrd2V2aGdmTmgyRlRSYWdJanFpRF9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iNDIwMjctNjYzNy00OGU3LWEzNTQtOWUwYjE5NmEwNDg3
LzEvU3JuNUFMcGhpLWpueVNDV1BOOTFlNUJRNVFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZR8MA0G
CSqGSIb3DQEBCwUAA4IBAQCnLVlbkd9416XZ7vD2LOp70h4PW64OIuWMzlEwX81d
MGPraGDdoRTe/l8Xa9Uyp2JZ5Olpuzur8b5FcaVoPa8wYSovZS8qvGz/sX3cc+iF
Xzd6tjfdZrKsxnyuqA1XmYfVfhsm0J3wAxpKkIMgTqSsNL7lGz3DpZdppXF0KMzp
lZ3Ievf6YCEBp8qy0HARpxs8iE5cM1qHZJ2I2+24jY7iD5Bmma2KvJ7igq7RoK+U
yGJ0zK7a+RCRLhRNB42cz1cUVomcLVJ9nXARdCcIKmd0ehHncmX68MOenGEzT+3q
x1E9G7qKdP4kDY1T9R1iF5s0qQ1glg+D+N4HM6n4A4Cv
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:38 2025 by rpki-client