Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/FLaHb_9U6oyYYk_Thp-cI05zaSM.roa
File: FLaHb_9U6oyYYk_Thp-cI05zaSM.roa (raw, json)
Hash identifier: YeuciufqRFLlUwGxqQeGS8BDOgYLjcM6bFyy0IuQ1K8=
Subject key identifier: 14:B6:87:6F:FF:54:EA:8C:98:62:4F:D3:86:9F:9C:23:4E:73:69:23
Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Certificate serial: 0513F1B3
Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/FLaHb_9U6oyYYk_Thp-cI05zaSM.roa
Signing time: Sat 01 Jan 2022 16:10:26 +0000
ROA not before: Sat 01 Jan 2022 16:10:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197763
IP address blocks: 195.22.120.0/24 maxlen: 24
2001:67c:2f00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85193139 (0x513f1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e
Validity
Not Before: Jan 1 16:10:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14b6876fff54ea8c98624fd3869f9c234e736923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:65:c5:cc:64:dc:ab:28:f7:65:14:f8:10:
69:48:75:36:6f:3e:27:e8:bd:ae:d8:10:89:a0:86:
ad:5c:75:18:24:91:b4:42:9a:89:65:b0:3e:db:91:
be:55:86:45:5e:cb:48:79:23:90:b5:67:69:c1:32:
24:13:7a:65:41:52:68:ea:f3:71:9a:46:56:1a:53:
15:31:4b:51:a1:0a:7e:0d:3e:d4:7e:80:d1:7c:15:
79:91:47:92:98:73:92:dc:29:a7:36:52:24:a9:b8:
fc:fd:e6:c3:4b:54:c5:ee:50:a9:ac:a9:2e:56:02:
f2:ff:ef:70:b2:a1:04:aa:4d:13:4b:6d:02:de:67:
9b:72:21:54:52:eb:6c:74:22:d9:0e:de:e8:e2:0b:
c4:c6:75:40:9a:9f:ba:52:f1:26:30:14:cf:68:77:
f3:a8:24:35:ca:b7:6d:a6:63:7d:03:40:f5:be:f1:
70:3b:45:c1:bf:0d:0f:b8:9c:c3:04:b5:62:55:59:
54:fd:0d:97:98:98:cd:2d:06:6f:72:bd:b2:2b:30:
41:66:20:5f:1a:58:f6:75:f3:56:8e:4c:0f:f7:df:
68:eb:65:92:7e:93:60:94:d9:c3:e9:3f:32:89:4e:
b2:1f:b6:2f:e2:7d:3c:11:37:ed:8a:ef:9d:01:68:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B6:87:6F:FF:54:EA:8C:98:62:4F:D3:86:9F:9C:23:4E:73:69:23
X509v3 Authority Key Identifier:
keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/FLaHb_9U6oyYYk_Thp-cI05zaSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.120.0/24
IPv6:
2001:67c:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
53:53:23:af:ed:d4:76:3f:83:5f:45:d7:63:f0:48:66:e6:b2:
fa:45:8b:5d:d9:43:1b:92:c7:f2:f2:e8:32:f6:e0:7c:e9:c9:
9e:7c:8b:c5:f3:9f:aa:ba:d7:9b:44:dd:b3:f8:c2:9e:7e:9e:
be:cc:79:d0:28:4d:1e:79:5e:fd:c0:6c:4f:13:5e:ca:00:21:
fd:1e:9e:7d:5e:84:8d:4d:98:26:ad:3a:ee:a7:24:5e:f0:0d:
65:91:51:05:81:71:45:e3:76:8a:12:8e:18:86:23:a2:7a:3d:
8f:f6:a6:61:62:30:16:df:aa:f0:4a:05:a8:f0:4d:a5:4f:07:
03:71:4b:e0:dd:37:9f:ad:0b:2d:d9:38:11:40:00:08:d7:b9:
77:b1:f8:1f:12:d2:6e:72:b6:b4:7f:05:72:69:10:09:85:f6:
7d:36:1e:3d:59:84:71:be:29:cc:06:62:34:99:71:d7:d6:23:
17:d8:f5:2f:65:ac:85:bc:19:c4:76:ad:2d:44:7f:19:c9:51:
c5:06:2e:b2:c7:56:5a:7a:c9:d1:50:38:f5:14:5f:b5:41:c6:
cf:50:da:79:2d:b8:e6:82:be:59:05:df:b7:54:6f:47:ff:4d:
37:97:62:3e:21:d5:49:2a:1b:60:db:e6:a2:67:93:2e:3c:42:
f6:e6:8a:ca
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBRPxszANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
N2QzYzBjMTE1MzI4YzNkMjhjMGY1NzIxYjAwOTgyYjJjZDQyMTVlMB4XDTIyMDEw
MTE2MTAyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTRiNjg3NmZmZjU0
ZWE4Yzk4NjI0ZmQzODY5ZjljMjM0ZTczNjkyMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANxDZcXMZNyrKPdlFPgQaUh1Nm8+J+i9rtgQiaCGrVx1GCSR
tEKaiWWwPtuRvlWGRV7LSHkjkLVnacEyJBN6ZUFSaOrzcZpGVhpTFTFLUaEKfg0+
1H6A0XwVeZFHkphzktwppzZSJKm4/P3mw0tUxe5QqaypLlYC8v/vcLKhBKpNE0tt
At5nm3IhVFLrbHQi2Q7e6OILxMZ1QJqfulLxJjAUz2h386gkNcq3baZjfQNA9b7x
cDtFwb8ND7icwwS1YlVZVP0Nl5iYzS0Gb3K9siswQWYgXxpY9nXzVo5MD/ffaOtl
kn6TYJTZw+k/MolOsh+2L+J9PBE37YrvnQFoGskCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQUtodv/1TqjJhiT9OGn5wjTnNpIzAfBgNVHSMEGDAWgBQH08DBFTKMPSjA
9XIbAJgrLNQhXjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I5UEF3UlV5akQwb3dQVnlHd0NZS3l6VUlWNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvMzc2ZjVhLWMwMjYtNGJhZS04ODQ3LTJiMWQ0MzliMjIyNy8x
L0ZMYUhiXzlVNm95WVlrX1RocC1jSTA1emFTTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
Mzc2ZjVhLWMwMjYtNGJhZS04ODQ3LTJiMWQ0MzliMjIyNy8xL0I5UEF3UlV5akQw
b3dQVnlHd0NZS3l6VUlWNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMMWeDAPBAIAAjAJAwcAIAEGfC8A
MA0GCSqGSIb3DQEBCwUAA4IBAQBTUyOv7dR2P4NfRddj8Ehm5rL6RYtd2UMbksfy
8ugy9uB86cmefIvF85+qutebRN2z+MKefp6+zHnQKE0eeV79wGxPE17KACH9Hp59
XoSNTZgmrTrupyRe8A1lkVEFgXFF43aKEo4YhiOiej2P9qZhYjAW36rwSgWo8E2l
TwcDcUvg3TefrQst2TgRQAAI17l3sfgfEtJucra0fwVyaRAJhfZ9Nh49WYRxvinM
BmI0mXHX1iMX2PUvZayFvBnEdq0tRH8ZyVHFBi6yx1ZaesnRUDj1FF+1QcbPUNp5
Lbjmgr5ZBd+3VG9H/003l2I+IdVJKhtg2+aiZ5MuPEL25orK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:44 2024 by rpki-client on console-ams.rpki-client.org