Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/FpvSKAJ7CHdNd1pnvVZIUOBu76w.roa
File: FpvSKAJ7CHdNd1pnvVZIUOBu76w.roa (raw, json)
Hash identifier: 6Q1hGL0L9RTuc49hqUgLS+zjcxw+blxP21toK6j5dGY=
Subject key identifier: 16:9B:D2:28:02:7B:08:77:4D:77:5A:67:BD:56:48:50:E0:6E:EF:AC
Certificate issuer: /CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Certificate serial: 018398DC27BC9A92B901922C2C0D38E82AD4
Authority key identifier: 90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/FpvSKAJ7CHdNd1pnvVZIUOBu76w.roa
Signing time: Sun 02 Oct 2022 13:21:48 +0000
ROA not before: Sun 02 Oct 2022 13:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49148
IP address blocks: 95.130.240.0/24 maxlen: 24
185.160.177.0/24 maxlen: 24
185.160.178.0/24 maxlen: 24
185.160.176.0/24 maxlen: 24
185.160.176.0/22 maxlen: 22
185.160.179.0/24 maxlen: 24
95.130.242.0/24 maxlen: 24
95.130.243.0/24 maxlen: 24
95.130.240.0/21 maxlen: 21
95.130.241.0/24 maxlen: 24
95.130.246.0/24 maxlen: 24
95.130.244.0/24 maxlen: 24
95.130.245.0/24 maxlen: 24
95.130.247.0/24 maxlen: 24
2a00:b140::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:98:dc:27:bc:9a:92:b9:01:92:2c:2c:0d:38:e8:2a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9054c699a81dd962a8860f3fb0b7d03343debf76
Validity
Not Before: Oct 2 13:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=169bd228027b08774d775a67bd564850e06eefac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:f8:9c:85:cf:4d:9e:4b:82:af:52:69:19:
63:2e:46:92:55:70:37:ae:58:47:6f:12:67:21:57:
86:4d:7b:00:f7:a2:f6:96:37:89:34:fa:87:33:ba:
8d:a4:83:a8:78:65:30:29:b0:ca:1a:8c:52:44:9f:
fb:b9:1c:f1:9f:6b:2e:6c:de:fd:c6:b6:28:32:dc:
23:7a:e8:ce:a2:51:c3:df:60:36:5f:6e:be:11:d3:
bd:42:19:f3:bd:4c:61:0f:58:e3:95:c1:7c:c7:e6:
a5:f5:f5:ed:88:f6:3f:aa:67:73:08:92:19:36:9e:
86:f0:72:c1:00:12:dc:ca:ae:ac:0c:14:b6:cd:c6:
0a:bb:93:a9:de:14:62:1c:8f:87:40:db:d1:a7:22:
9c:56:11:cf:2b:51:4e:04:79:47:e1:40:61:91:18:
ba:2a:64:06:da:6e:54:31:df:40:d0:72:08:54:c6:
35:a3:cf:bc:6d:fe:32:da:5c:a7:5c:a4:16:ae:e7:
c3:eb:b7:9d:c6:83:3b:07:b8:95:3d:03:42:c0:ce:
20:c1:8b:ce:ed:9d:17:90:aa:47:60:83:6a:f0:40:
04:79:ff:68:d2:f7:fd:db:22:ba:29:df:cf:b0:6b:
27:ec:e0:db:ba:77:82:fb:86:fd:0a:d2:b7:b2:e3:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:D2:28:02:7B:08:77:4D:77:5A:67:BD:56:48:50:E0:6E:EF:AC
X509v3 Authority Key Identifier:
keyid:90:54:C6:99:A8:1D:D9:62:A8:86:0F:3F:B0:B7:D0:33:43:DE:BF:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFTGmagd2WKohg8_sLfQM0Pev3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/FpvSKAJ7CHdNd1pnvVZIUOBu76w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/69efa1-8c99-48f8-943c-2b4a16594213/1/kFTGmagd2WKohg8_sLfQM0Pev3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.130.240.0/21
185.160.176.0/22
IPv6:
2a00:b140::/32
Signature Algorithm: sha256WithRSAEncryption
38:cc:ca:ac:8c:db:00:51:fe:ab:7f:70:c3:f7:b2:ea:2b:0d:
4c:a2:6f:5b:97:4e:2c:69:56:1a:eb:e5:85:88:cb:b4:b9:ef:
ca:f2:13:a9:66:94:35:3f:7d:1d:f7:2c:9d:1a:0b:18:e5:8a:
d2:22:14:b9:d9:76:3a:fd:09:fc:ef:80:15:7b:1b:2a:06:32:
ff:01:11:f4:9e:f0:1c:78:1f:b8:b0:12:94:c3:6c:b6:07:77:
64:b9:5e:37:f0:32:15:dd:23:49:2d:60:be:35:f7:28:fb:8b:
88:47:61:71:f3:ed:de:77:c8:27:e6:74:15:e4:7e:45:12:da:
d1:ea:e1:47:e7:c5:a2:36:5e:e2:ca:48:ef:b0:01:7e:04:c5:
96:79:a1:9a:79:2a:12:3f:a0:f4:75:96:a2:60:bc:ba:71:8c:
4d:0d:3d:06:5d:5f:a3:ec:f5:a7:39:a7:23:37:57:46:65:f4:
7b:68:7c:69:4d:fd:b3:7c:4b:92:c9:e9:fe:b1:61:8e:6b:46:
97:3d:3d:e4:04:5a:ec:ed:33:01:ff:42:87:34:9f:77:b7:57:
4e:5f:dd:80:40:42:0b:45:45:4f:ba:e9:0f:ce:72:57:56:32:
de:d7:79:08:3d:2a:1f:dc:25:81:b9:f5:0b:c9:f1:b7:2c:bc:
05:66:88:a1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYOY3Ce8mpK5AZIsLA046CrUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNTRjNjk5YTgxZGQ5NjJhODg2MGYzZmIwYjdkMDMzNDNk
ZWJmNzYwHhcNMjIxMDAyMTMyMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjliZDIyODAyN2IwODc3NGQ3NzVhNjdiZDU2NDg1MGUwNmVlZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg/4nIXPTZ5Lgq9SaRljLkaSVXA3
rlhHbxJnIVeGTXsA96L2ljeJNPqHM7qNpIOoeGUwKbDKGoxSRJ/7uRzxn2subN79
xrYoMtwjeujOolHD32A2X26+EdO9QhnzvUxhD1jjlcF8x+al9fXtiPY/qmdzCJIZ
Np6G8HLBABLcyq6sDBS2zcYKu5Op3hRiHI+HQNvRpyKcVhHPK1FOBHlH4UBhkRi6
KmQG2m5UMd9A0HIIVMY1o8+8bf4y2lynXKQWrufD67edxoM7B7iVPQNCwM4gwYvO
7Z0XkKpHYINq8EAEef9o0vf92yK6Kd/PsGsn7ODbuneC+4b9CtK3suPTJQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBab0igCewh3TXdaZ71WSFDgbu+sMB8GA1UdIwQY
MBaAFJBUxpmoHdliqIYPP7C30DND3r92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2Mt
MmI0YTE2NTk0MjEzLzEvRnB2U0tBSjdDSGROZDFwbnZWWklVT0J1NzZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82OWVmYTEtOGM5OS00OGY4LTk0M2MtMmI0YTE2NTk0MjEz
LzEva0ZUR21hZ2QyV0tvaGc4X3NMZlFNMFBldjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4LwAwQC
uaCwMA0EAgACMAcDBQAqALFAMA0GCSqGSIb3DQEBCwUAA4IBAQA4zMqsjNsAUf6r
f3DD97LqKw1Mom9bl04saVYa6+WFiMu0ue/K8hOpZpQ1P30d9yydGgsY5YrSIhS5
2XY6/Qn874AVexsqBjL/ARH0nvAceB+4sBKUw2y2B3dkuV438DIV3SNJLWC+Nfco
+4uIR2Fx8+3ed8gn5nQV5H5FEtrR6uFH58WiNl7iykjvsAF+BMWWeaGaeSoSP6D0
dZaiYLy6cYxNDT0GXV+j7PWnOacjN1dGZfR7aHxpTf2zfEuSyen+sWGOa0aXPT3k
BFrs7TMB/0KHNJ93t1dOX92AQEILRUVPuukPznJXVjLe13kIPSof3CWBufULyfG3
LLwFZoih
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:58 2024 by rpki-client on console-fra.rpki-client.org