Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/F9FOH4KzQEO_Ck8tRsIzlD6KadA.roa
File: F9FOH4KzQEO_Ck8tRsIzlD6KadA.roa (raw, json)
Hash identifier: 7r1XloupecrxEc5IcB2USChNt9AdNqsb7CjaOJRlr/Q=
Subject key identifier: 17:D1:4E:1F:82:B3:40:43:BF:0A:4F:2D:46:C2:33:94:3E:8A:69:D0
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 01F5762D
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/F9FOH4KzQEO_Ck8tRsIzlD6KadA.roa
Signing time: Sat 01 Jan 2022 15:59:42 +0000
ROA not before: Sat 01 Jan 2022 15:59:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 86.106.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32863789 (0x1f5762d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: Jan 1 15:59:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d14e1f82b34043bf0a4f2d46c233943e8a69d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:c5:2c:16:c0:cf:12:b1:0e:14:69:55:14:
27:e7:f3:45:96:0a:fd:f8:00:86:7c:26:c5:04:5a:
16:36:47:ec:bd:e0:af:24:4d:fa:96:64:b0:90:ef:
72:4e:ba:13:79:b8:c6:83:2b:64:08:ef:b5:76:a0:
66:7d:49:30:7a:32:74:73:12:de:3a:4e:e6:aa:65:
08:b6:c8:1f:62:b2:f7:f3:7c:d1:c3:cc:40:95:36:
24:4b:8b:b8:fa:36:49:7d:9d:50:cc:0a:3a:85:a9:
1f:f9:32:a0:ae:b4:0b:47:bd:e4:55:10:3f:1d:2d:
32:b0:17:6b:90:85:69:ee:14:fb:b9:1d:cb:49:f4:
8d:75:e6:c9:92:67:f5:ce:c6:91:d8:4e:3c:30:73:
70:af:85:23:f9:10:aa:f2:56:cb:d5:73:ad:02:84:
7e:06:d4:51:44:8a:02:07:08:8b:32:b9:d1:8c:57:
fc:5f:80:7b:1c:13:37:07:78:3d:f9:22:3c:42:30:
2c:70:9b:5e:5d:41:f9:a3:fc:55:a5:b8:6a:fd:ff:
3a:3a:17:37:f3:4c:de:8a:0e:67:a7:10:0e:85:f7:
01:b2:07:f1:60:ac:7f:17:1f:bc:6a:b7:b7:20:39:
da:7f:5e:a6:8f:4a:34:7c:35:64:18:ef:f1:34:3f:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:4E:1F:82:B3:40:43:BF:0A:4F:2D:46:C2:33:94:3E:8A:69:D0
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/F9FOH4KzQEO_Ck8tRsIzlD6KadA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.24.0/24
Signature Algorithm: sha256WithRSAEncryption
46:53:0e:93:03:9a:85:bf:8a:aa:26:50:67:ca:ae:e6:7f:15:
9a:3a:aa:48:5f:11:9f:c2:95:18:aa:f6:c7:b2:31:0a:52:22:
f3:6e:df:e7:b5:a0:fd:45:ef:31:5a:21:70:c2:a4:af:7e:31:
80:d9:5f:dd:10:17:8d:53:a7:a5:99:26:ac:b6:ac:de:2c:c6:
8c:f4:d6:85:71:dc:c1:72:d0:c5:05:ee:23:d6:12:fe:94:28:
80:9d:a7:25:6f:50:59:19:ac:87:80:32:b7:b7:35:1d:fd:b6:
70:f9:cd:d4:34:e3:59:07:3f:2f:22:c8:da:ad:26:42:7f:39:
e0:19:4e:34:12:72:b9:aa:02:ba:15:23:f7:ae:d1:23:90:de:
a8:12:41:4e:ac:41:0b:63:55:2c:88:10:76:26:98:66:4d:68:
0d:a8:8f:09:ee:30:74:d7:4a:72:28:91:21:17:75:ae:4a:04:
d1:b6:ca:56:cf:06:49:55:21:eb:c3:8a:1a:b7:ba:16:91:bf:
bb:b5:3a:91:86:3c:f6:6c:66:92:e9:23:fb:73:c7:f3:e1:8d:
03:93:0b:1a:3a:37:21:72:31:ce:71:ad:15:a4:22:3e:1e:be:
6f:ec:d8:50:e2:ec:6f:15:c5:e0:6a:3c:dd:5b:c8:29:39:56:
6d:0f:21:68
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAfV2LTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MGNjN2E0NDc0ODJlNTdiMDYwNGJhYmI4MmE1MjQwOWNkZTNiMzZkMB4XDTIyMDEw
MTE1NTk0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTdkMTRlMWY4MmIz
NDA0M2JmMGE0ZjJkNDZjMjMzOTQzZThhNjlkMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJnIxSwWwM8SsQ4UaVUUJ+fzRZYK/fgAhnwmxQRaFjZH7L3g
ryRN+pZksJDvck66E3m4xoMrZAjvtXagZn1JMHoydHMS3jpO5qplCLbIH2Ky9/N8
0cPMQJU2JEuLuPo2SX2dUMwKOoWpH/kyoK60C0e95FUQPx0tMrAXa5CFae4U+7kd
y0n0jXXmyZJn9c7GkdhOPDBzcK+FI/kQqvJWy9VzrQKEfgbUUUSKAgcIizK50YxX
/F+AexwTNwd4PfkiPEIwLHCbXl1B+aP8VaW4av3/OjoXN/NM3ooOZ6cQDoX3AbIH
8WCsfxcfvGq3tyA52n9epo9KNHw1ZBjv8TQ/QNsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQX0U4fgrNAQ78KTy1GwjOUPopp0DAfBgNVHSMEGDAWgBTwzHpEdILlewYE
uruCpSQJzeOzbTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhNeDZSSFNDNVhzR0JMcTdncVVrQ2MzanMyMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjIvMGU1OGRjLTdjOTAtNDlkNy04ODU1LWZhMzJkMmQ1Mjk2OC8x
L0Y5Rk9INEt6UUVPX0NrOHRSc0l6bEQ2S2FkQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIv
MGU1OGRjLTdjOTAtNDlkNy04ODU1LWZhMzJkMmQ1Mjk2OC8xLzhNeDZSSFNDNVhz
R0JMcTdncVVrQ2MzanMyMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFZqGDANBgkqhkiG9w0BAQsFAAOC
AQEARlMOkwOahb+KqiZQZ8qu5n8VmjqqSF8Rn8KVGKr2x7IxClIi827f57Wg/UXv
MVohcMKkr34xgNlf3RAXjVOnpZkmrLas3izGjPTWhXHcwXLQxQXuI9YS/pQogJ2n
JW9QWRmsh4Ayt7c1Hf22cPnN1DTjWQc/LyLI2q0mQn854BlONBJyuaoCuhUj967R
I5DeqBJBTqxBC2NVLIgQdiaYZk1oDaiPCe4wdNdKciiRIRd1rkoE0bbKVs8GSVUh
68OKGre6FpG/u7U6kYY89mxmkukj+3PH8+GNA5MLGjo3IXIxznGtFaQiPh6+b+zY
UOLsbxXF4Go83VvIKTlWbQ8haA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-fra.rpki-client.org