Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/_ys4UDavOBAZlQe8Pq9_kn910Og.roa
File: _ys4UDavOBAZlQe8Pq9_kn910Og.roa (raw, json)
Hash identifier: N4UN+gH1IXUKi8JOfWSvfaxh+CNIeSn3o8VLekhMksk=
Subject key identifier: FF:2B:38:50:36:AF:38:10:19:95:07:BC:3E:AF:7F:92:7F:75:D0:E8
Certificate issuer: /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial: 0181F4557BA1065310ABE598C02B6494B929
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/_ys4UDavOBAZlQe8Pq9_kn910Og.roa
Signing time: Tue 12 Jul 2022 21:34:11 +0000
ROA not before: Tue 12 Jul 2022 21:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 94.158.191.0/24 maxlen: 24
194.32.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:55:7b:a1:06:53:10:ab:e5:98:c0:2b:64:94:b9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Validity
Not Before: Jul 12 21:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff2b385036af3810199507bc3eaf7f927f75d0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:fd:f4:d0:31:ed:bc:41:59:73:63:f3:1b:
93:d2:2e:54:79:f8:df:eb:c1:fd:59:90:61:07:96:
4e:99:c5:4c:b1:ce:de:4f:5c:1b:86:c8:9e:b4:43:
90:9a:06:a3:28:da:d7:e9:a0:0d:06:ba:08:3a:43:
eb:25:a0:a6:50:ca:3b:8e:44:93:51:ba:f8:0b:0a:
80:2c:f8:71:2b:8c:34:eb:42:21:14:e6:9e:0f:d0:
94:d0:02:de:52:6d:ef:3c:77:27:29:4d:ac:67:05:
82:9b:b6:43:46:88:37:07:64:7e:6c:c9:33:95:f8:
45:25:d3:eb:ce:da:e0:a2:b2:9d:4c:c4:ad:a3:10:
6a:0f:db:81:63:cf:40:b4:dd:b5:fe:c4:8c:ac:58:
89:83:48:bf:22:fc:00:cc:de:5e:a7:4a:ea:1e:8c:
d4:8c:6f:5c:c1:11:08:7f:72:12:16:ac:9c:99:63:
30:76:b6:43:30:b6:ed:21:35:db:5e:33:b2:0c:3d:
82:0f:9c:d2:8f:31:a9:2c:85:ea:62:2a:26:30:4f:
cc:a5:b3:4c:ae:97:49:bf:5d:b2:a1:39:7e:e0:2f:
f3:6d:93:f4:4e:58:ee:32:46:b9:49:72:7d:15:39:
40:03:6d:1b:6d:ad:94:d4:68:65:f4:ba:a3:54:91:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2B:38:50:36:AF:38:10:19:95:07:BC:3E:AF:7F:92:7F:75:D0:E8
X509v3 Authority Key Identifier:
keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/_ys4UDavOBAZlQe8Pq9_kn910Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.191.0/24
194.32.243.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a6:c2:e4:74:7f:0e:c4:58:6b:f9:b9:c1:5a:c8:cf:1b:79:
05:5b:c7:5e:da:5a:d2:a1:37:60:44:86:2d:e7:0f:a4:a0:3e:
af:8f:53:6b:09:6b:f4:f4:da:b1:22:32:9c:2c:cb:bb:c9:1d:
19:a1:75:0d:3a:52:a5:e3:2f:9d:7a:da:5a:7d:e8:85:51:75:
c9:03:f2:81:bc:5c:18:a8:64:ed:f6:ec:ae:22:0b:cb:77:c2:
8e:30:6c:f5:1d:7a:c4:3d:90:e3:5f:da:94:fe:53:9b:42:96:
18:3e:09:f9:54:48:12:78:14:ea:03:56:f7:05:af:40:9b:d2:
b9:54:90:7f:0d:1a:f1:65:4e:ed:f0:a7:94:bc:60:94:a3:9f:
75:d3:18:5b:4b:06:f2:64:1b:33:6c:fb:61:50:79:09:89:64:
9d:ff:fa:f3:31:db:cb:ab:14:99:42:77:44:bb:10:db:75:9d:
86:dc:77:0d:94:56:79:5c:71:c9:0c:c1:34:59:86:5e:f1:45:
05:d0:3d:1c:98:95:fd:9d:a6:f9:10:f4:4e:ac:97:c9:64:d0:
40:97:40:a2:5c:4d:b2:ab:be:d8:39:ab:9a:6b:70:6a:a3:6f:
1d:f4:1a:53:da:fd:eb:6c:f4:20:29:a0:ea:ba:95:37:4f:79:
e9:2c:c7:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYH0VXuhBlMQq+WYwCtklLkpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI5NWY5ZDFiNWMzZWM5MzRmZjg0ZDZmZjdmMDEyNDJk
YTg0MmEwHhcNMjIwNzEyMjEzNDExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjJiMzg1MDM2YWYzODEwMTk5NTA3YmMzZWFmN2Y5MjdmNzVkMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE/99NAx7bxBWXNj8xuT0i5Uefjf
68H9WZBhB5ZOmcVMsc7eT1wbhsietEOQmgajKNrX6aANBroIOkPrJaCmUMo7jkST
Ubr4CwqALPhxK4w060IhFOaeD9CU0ALeUm3vPHcnKU2sZwWCm7ZDRog3B2R+bMkz
lfhFJdPrztrgorKdTMStoxBqD9uBY89AtN21/sSMrFiJg0i/IvwAzN5ep0rqHozU
jG9cwREIf3ISFqycmWMwdrZDMLbtITXbXjOyDD2CD5zSjzGpLIXqYiomME/MpbNM
rpdJv12yoTl+4C/zbZP0TljuMka5SXJ9FTlAA20bba2U1Ghl9LqjVJET5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP8rOFA2rzgQGZUHvD6vf5J/ddDoMB8GA1UdIwQY
MBaAFPTblfnRtcPsk0/4TW/38BJC2oQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjIt
MTRiMzhiNmUwMGE3LzEvX3lzNFVEYXZPQkFabFFlOFBxOV9rbjkxME9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjItMTRiMzhiNmUwMGE3
LzEvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXp6/AwQA
wiDzMA0GCSqGSIb3DQEBCwUAA4IBAQBBpsLkdH8OxFhr+bnBWsjPG3kFW8de2lrS
oTdgRIYt5w+koD6vj1NrCWv09NqxIjKcLMu7yR0ZoXUNOlKl4y+detpafeiFUXXJ
A/KBvFwYqGTt9uyuIgvLd8KOMGz1HXrEPZDjX9qU/lObQpYYPgn5VEgSeBTqA1b3
Ba9Am9K5VJB/DRrxZU7t8KeUvGCUo5910xhbSwbyZBszbPthUHkJiWSd//rzMdvL
qxSZQndEuxDbdZ2G3HcNlFZ5XHHJDME0WYZe8UUF0D0cmJX9nab5EPROrJfJZNBA
l0CiXE2yq77YOauaa3Bqo28d9BpT2v3rbPQgKaDqupU3T3npLMc6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-fra.rpki-client.org