Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/FU_Bc9gkTYt_0cGsEDkIbSxqS7o.roa
File: FU_Bc9gkTYt_0cGsEDkIbSxqS7o.roa (raw, json)
Hash identifier: oldlVMtnDCXmnjwpKRTreQvWShV1qx0dMmbG3hY8uzg=
Subject key identifier: 15:4F:C1:73:D8:24:4D:8B:7F:D1:C1:AC:10:39:08:6D:2C:6A:4B:BA
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018B5370FE2E323B20074591B2A18DDB035E
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/FU_Bc9gkTYt_0cGsEDkIbSxqS7o.roa
Signing time: Sat 21 Oct 2023 18:13:15 +0000
ROA not before: Sat 21 Oct 2023 18:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.43.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:70:fe:2e:32:3b:20:07:45:91:b2:a1:8d:db:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Oct 21 18:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=154fc173d8244d8b7fd1c1ac1039086d2c6a4bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:6a:03:34:39:f4:6f:a4:26:c8:b2:93:41:
7a:cb:82:01:55:54:43:bb:cd:ef:76:d8:5d:34:e0:
e7:49:c1:32:3d:69:57:f0:d1:a9:18:d8:0b:fa:c5:
eb:05:2d:88:86:62:a9:09:b0:fe:bc:ad:20:4e:17:
d6:20:fe:ba:f1:75:0a:d5:d5:93:bf:11:4a:cd:02:
7b:f0:a5:cf:c0:a2:b1:bf:ea:e7:4a:c3:93:bc:52:
2c:d7:96:c2:89:01:62:45:df:6e:7f:6f:78:fc:a1:
93:5f:f1:c5:05:c3:d7:fb:53:83:3a:89:f6:89:60:
a2:8c:70:7f:e1:cd:ed:3b:ab:fa:0f:ae:1e:e9:b8:
95:e0:18:f4:87:ac:a8:f0:c2:73:a7:34:ca:03:a9:
f1:3b:f2:32:2a:21:b5:c5:af:72:65:89:7e:9e:99:
a8:3a:ba:67:e2:60:fd:e4:15:25:92:0c:9c:a3:b5:
91:bc:c4:d1:37:00:1e:d5:97:92:1e:df:d1:22:86:
a6:60:8b:28:14:9c:03:84:5d:c2:5e:e8:f8:2f:19:
00:43:bc:03:a6:94:cb:0f:7f:7f:8c:3f:10:bd:a1:
26:bc:5f:7b:61:11:c2:32:10:0d:60:16:ef:a8:7e:
b4:61:0a:4f:7c:fe:81:f1:9c:35:44:48:2e:55:f8:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:C1:73:D8:24:4D:8B:7F:D1:C1:AC:10:39:08:6D:2C:6A:4B:BA
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/FU_Bc9gkTYt_0cGsEDkIbSxqS7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9c:dc:0c:34:a7:17:c1:df:29:c0:21:22:10:a9:cc:12:ca:
5e:69:d9:6c:73:25:07:56:5e:77:62:76:c0:4c:c0:34:b3:a3:
49:df:db:df:3d:a0:3b:9f:ea:62:38:ae:42:f2:c4:c6:70:b9:
22:68:c0:d9:73:9f:ad:23:da:2d:28:81:28:9d:29:d1:f7:ac:
bd:97:ce:5e:6c:3b:81:5d:9a:31:46:1a:df:cb:4a:d4:ce:95:
25:ba:85:c3:1c:b8:6f:bc:75:86:37:b9:ca:bf:8b:3c:9c:a7:
c1:87:01:25:03:05:f9:1f:03:3d:a8:f7:ac:c6:ad:e9:94:4b:
4d:48:7b:5e:6a:30:ff:76:69:d0:40:d5:67:7b:83:d7:86:7a:
c2:76:05:39:c1:af:2b:80:cf:eb:b3:ce:ec:34:6b:85:2d:12:
4c:bb:cb:40:18:f5:90:b1:9e:79:bb:71:14:90:05:36:f9:5a:
47:78:e5:83:60:bd:e0:99:ee:26:07:a2:55:2c:53:b9:e6:01:
a9:30:f9:3d:67:04:b2:55:b8:09:92:d0:a3:fb:b4:d4:62:ee:
72:93:94:c3:0a:86:dd:f9:aa:46:bc:03:f8:82:9f:07:b6:cf:
e5:35:07:41:c0:61:fe:6e:f1:8a:cc:c1:d5:7f:d0:2a:47:7b:
a8:a3:d0:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtTcP4uMjsgB0WRsqGN2wNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjMxMDIxMTgxMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTRmYzE3M2Q4MjQ0ZDhiN2ZkMWMxYWMxMDM5MDg2ZDJjNmE0YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUdqAzQ59G+kJsiyk0F6y4IBVVRD
u83vdthdNODnScEyPWlX8NGpGNgL+sXrBS2IhmKpCbD+vK0gThfWIP668XUK1dWT
vxFKzQJ78KXPwKKxv+rnSsOTvFIs15bCiQFiRd9uf294/KGTX/HFBcPX+1ODOon2
iWCijHB/4c3tO6v6D64e6biV4Bj0h6yo8MJzpzTKA6nxO/IyKiG1xa9yZYl+npmo
Orpn4mD95BUlkgyco7WRvMTRNwAe1ZeSHt/RIoamYIsoFJwDhF3CXuj4LxkAQ7wD
ppTLD39/jD8QvaEmvF97YRHCMhANYBbvqH60YQpPfP6B8Zw1REguVfi0TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVPwXPYJE2Lf9HBrBA5CG0saku6MB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvRlVfQmM5Z2tUWXRfMGNHc0VEa0liU3hxUzdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSuKMA0G
CSqGSIb3DQEBCwUAA4IBAQCHnNwMNKcXwd8pwCEiEKnMEspeadlscyUHVl53YnbA
TMA0s6NJ39vfPaA7n+piOK5C8sTGcLkiaMDZc5+tI9otKIEonSnR96y9l85ebDuB
XZoxRhrfy0rUzpUluoXDHLhvvHWGN7nKv4s8nKfBhwElAwX5HwM9qPesxq3plEtN
SHteajD/dmnQQNVne4PXhnrCdgU5wa8rgM/rs87sNGuFLRJMu8tAGPWQsZ55u3EU
kAU2+VpHeOWDYL3gme4mB6JVLFO55gGpMPk9ZwSyVbgJktCj+7TUYu5yk5TDCobd
+apGvAP4gp8Hts/lNQdBwGH+bvGKzMHVf9AqR3uoo9At
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:22 2025 by rpki-client