Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/fc6_tVEy0qZv77Q4p-2rUrauXHQ.roa
File: fc6_tVEy0qZv77Q4p-2rUrauXHQ.roa (raw, json)
Hash identifier: zJUgMgD21h92r9QLRzLl5epyvkHBgAJSp5zBQrS5Lsc=
Subject key identifier: 7D:CE:BF:B5:51:32:D2:A6:6F:EF:B4:38:A7:ED:AB:52:B6:AE:5C:74
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 048C9BD9
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/fc6_tVEy0qZv77Q4p-2rUrauXHQ.roa
Signing time: Sat 01 Jan 2022 06:58:49 +0000
ROA not before: Sat 01 Jan 2022 06:58:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 212.104.208.0/24 maxlen: 24
185.83.20.0/22 maxlen: 22
185.175.91.0/24 maxlen: 24
31.25.8.0/23 maxlen: 23
2a11:bd80::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76323801 (0x48c9bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Jan 1 06:58:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dcebfb55132d2a66fefb438a7edab52b6ae5c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:1b:72:0c:28:c3:3f:5c:be:c1:0b:10:d9:
30:8a:8f:59:1c:08:f7:35:b3:0f:45:23:a9:51:11:
cf:95:58:78:85:aa:10:b9:4a:ab:fb:c4:ae:81:15:
78:36:71:31:98:bc:02:91:d9:dd:90:db:98:1a:2a:
5c:06:47:22:d6:50:74:54:70:fd:40:15:9e:b8:c2:
bf:81:9d:c7:f6:dd:67:6f:62:12:90:cc:31:86:e9:
a2:4e:fd:da:10:71:03:ad:58:bc:d6:01:d4:86:76:
76:c2:22:b5:eb:f1:4b:8f:20:f3:01:bc:cc:3f:4b:
0f:f7:9f:45:60:f5:36:b0:a6:a9:15:47:fd:4d:a1:
42:e1:0d:20:38:c3:8c:84:40:9b:60:4f:0b:0f:a9:
43:3b:95:0b:d1:01:26:e5:92:18:56:d6:24:33:68:
fb:bf:6c:49:09:fe:8a:7e:23:c1:fc:a9:b6:2d:4b:
53:61:89:2f:7e:dc:f5:5d:45:ef:66:61:0e:e4:5d:
2b:7e:07:54:a3:f7:eb:69:6a:b7:5c:08:e6:96:1d:
83:e9:d3:9a:bd:2c:51:20:c3:de:61:e8:36:00:dd:
ef:72:45:25:70:f9:ea:3b:c8:c6:22:34:5d:10:d5:
11:20:08:8e:a3:83:83:e3:cf:2e:09:25:04:49:20:
99:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CE:BF:B5:51:32:D2:A6:6F:EF:B4:38:A7:ED:AB:52:B6:AE:5C:74
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/fc6_tVEy0qZv77Q4p-2rUrauXHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.8.0/23
185.83.20.0/22
185.175.91.0/24
212.104.208.0/24
IPv6:
2a11:bd80::/32
Signature Algorithm: sha256WithRSAEncryption
0b:f2:eb:aa:66:e3:33:d2:b7:02:e9:1c:de:a4:fb:d3:1a:82:
b2:1a:6e:2c:9c:35:30:29:ef:47:2b:38:13:c5:c3:41:19:fb:
54:41:2b:1f:8c:5c:1d:fe:ad:ee:2b:2a:dd:16:5e:11:03:39:
e1:68:c1:91:81:a2:bf:73:0f:c8:8e:7e:9b:0f:6c:a4:43:f4:
af:23:31:7e:c4:8d:f7:91:83:81:e5:2d:6d:8b:56:db:ca:e0:
e8:16:11:30:d3:43:6b:d3:94:a9:3a:9e:c1:2e:ae:4b:6a:68:
2c:0d:ef:b4:9b:e9:70:c0:41:7d:62:dd:59:54:16:10:53:01:
d7:c5:87:d2:3f:8e:b7:82:9b:12:41:48:ec:41:7f:95:17:a9:
25:1e:3d:14:9c:96:90:d6:88:13:7f:80:44:9c:88:8a:08:93:
c7:43:dd:00:9d:ff:3e:91:96:b1:ca:ec:3a:41:d9:ab:b3:e7:
4d:08:79:f1:58:cc:4e:d5:d3:28:dd:fb:81:d4:ba:19:8f:36:
c0:87:0c:38:8d:9e:06:2a:e5:a1:a5:ee:f0:d8:6b:aa:ed:0a:
a4:88:7c:94:95:98:28:87:fa:c8:ab:17:9b:cf:43:7c:b5:f6:
85:58:8d:82:85:bd:51:6e:22:0f:96:63:60:a7:4d:a1:62:99:
3a:c3:0c:70
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIEBIyb2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZmRlODViYmQ0NzhmNWU4NDJmNGM0ZjhkODUyMjVkMTAwZTBmNGRmMB4XDTIyMDEw
MTA2NTg0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2RjZWJmYjU1MTMy
ZDJhNjZmZWZiNDM4YTdlZGFiNTJiNmFlNWM3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJkZG3IMKMM/XL7BCxDZMIqPWRwI9zWzD0UjqVERz5VYeIWq
ELlKq/vEroEVeDZxMZi8ApHZ3ZDbmBoqXAZHItZQdFRw/UAVnrjCv4Gdx/bdZ29i
EpDMMYbpok792hBxA61YvNYB1IZ2dsIitevxS48g8wG8zD9LD/efRWD1NrCmqRVH
/U2hQuENIDjDjIRAm2BPCw+pQzuVC9EBJuWSGFbWJDNo+79sSQn+in4jwfypti1L
U2GJL37c9V1F72ZhDuRdK34HVKP362lqt1wI5pYdg+nTmr0sUSDD3mHoNgDd73JF
JXD56jvIxiI0XRDVESAIjqODg+PPLgklBEkgmQsCAwEAAaOCAiowggImMB0GA1Ud
DgQWBBR9zr+1UTLSpm/vtDin7atStq5cdDAfBgNVHSMEGDAWgBTP3oW71Hj16EL0
xPjYUiXRAOD03zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3o5NkZ1OVI0OWVoQzlNVDQyRklsMFFEZzlOOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvNWUyNjE5LWQ3MmItNDEwYi1iOWU4LWY5M2QxZjgxNWI3ZC8x
L2ZjNl90VkV5MHFadjc3UTRwLTJyVXJhdVhIUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
NWUyNjE5LWQ3MmItNDEwYi1iOWU4LWY5M2QxZjgxNWI3ZC8xL3o5NkZ1OVI0OWVo
QzlNVDQyRklsMFFEZzlOOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAR8ZCAMEArlTFAMEALmvWwMEANRo
0DANBAIAAjAHAwUAKhG9gDANBgkqhkiG9w0BAQsFAAOCAQEAC/LrqmbjM9K3Aukc
3qT70xqCshpuLJw1MCnvRys4E8XDQRn7VEErH4xcHf6t7isq3RZeEQM54WjBkYGi
v3MPyI5+mw9spEP0ryMxfsSN95GDgeUtbYtW28rg6BYRMNNDa9OUqTqewS6uS2po
LA3vtJvpcMBBfWLdWVQWEFMB18WH0j+Ot4KbEkFI7EF/lRepJR49FJyWkNaIE3+A
RJyIigiTx0PdAJ3/PpGWscrsOkHZq7PnTQh58VjMTtXTKN37gdS6GY82wIcMOI2e
BirloaXu8Nhrqu0KpIh8lJWYKIf6yKsXm89DfLX2hViNgoW9UW4iD5ZjYKdNoWKZ
OsMMcA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org