Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/FsqzyBP2NLtGzMK_ehwRk5waIvY.roa
File: FsqzyBP2NLtGzMK_ehwRk5waIvY.roa (raw, json)
Hash identifier: GzbOlmue1Ymmgd3NNq9p75Jxqg78x9wwLXhVcSObGUE=
Subject key identifier: 16:CA:B3:C8:13:F6:34:BB:46:CC:C2:BF:7A:1C:11:93:9C:1A:22:F6
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 09479DE6
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/FsqzyBP2NLtGzMK_ehwRk5waIvY.roa
Signing time: Wed 22 Jun 2022 13:01:32 +0000
ROA not before: Wed 22 Jun 2022 13:01:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51691
IP address blocks: 37.16.96.0/20 maxlen: 23
178.213.232.0/21 maxlen: 21
37.16.112.0/20 maxlen: 20
2a00:4cc1::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155688422 (0x9479de6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jun 22 13:01:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16cab3c813f634bb46ccc2bf7a1c11939c1a22f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:e4:46:a5:e9:6c:af:8b:e2:c3:e8:aa:da:
32:29:15:35:55:00:46:72:0e:d5:95:f7:16:b6:2c:
0f:f5:76:83:7f:18:25:03:60:d6:6e:07:56:33:8a:
3c:eb:e2:8a:6c:22:11:cb:57:d7:0c:ef:ed:66:3a:
ab:2f:7c:5a:da:d4:cf:eb:01:d0:8f:fc:69:97:b5:
e3:67:9d:78:2b:37:7d:84:b9:ec:f1:a0:b3:da:5b:
22:89:9e:ea:fd:6f:d4:c8:e3:be:00:10:6a:e2:72:
be:5e:8f:f5:98:5f:e1:5d:56:34:c9:c2:47:ef:86:
bb:87:9d:e9:65:83:28:5c:ee:53:60:46:1b:17:7c:
37:07:be:f0:7e:9e:e8:8c:93:be:49:b4:2b:7b:13:
11:f9:7f:4a:af:ed:ed:71:f6:e5:40:98:95:22:25:
54:f2:dc:5c:3f:fb:33:51:00:24:e4:9f:74:a4:46:
5d:0d:6f:9b:53:72:fd:4e:fc:ee:e5:46:9d:d1:56:
0e:a2:e4:a1:86:51:e0:78:e7:07:6f:95:a1:6c:b2:
ac:ca:15:36:f5:69:f7:cb:a9:3c:2e:b7:4d:ed:a4:
61:b8:68:6e:0f:9b:cd:fb:22:f2:8c:24:55:0e:b0:
40:62:84:ee:e5:27:c8:1c:9f:b8:7f:e5:6c:fc:f2:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:B3:C8:13:F6:34:BB:46:CC:C2:BF:7A:1C:11:93:9C:1A:22:F6
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/FsqzyBP2NLtGzMK_ehwRk5waIvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.96.0/19
178.213.232.0/21
IPv6:
2a00:4cc1::/32
Signature Algorithm: sha256WithRSAEncryption
0c:32:9b:90:ac:6c:58:d1:79:86:82:03:dc:8c:a4:31:d1:5b:
50:74:ca:5b:a7:ca:13:13:35:41:9e:d8:4b:53:11:1c:1e:64:
0f:2d:2d:79:70:1a:f3:e0:e0:2d:ea:de:7f:7b:22:c1:9f:17:
47:6b:74:21:25:95:a6:fb:6f:3d:b9:69:1e:5e:82:c4:b3:f0:
f2:e9:38:28:b6:c2:2e:db:bd:12:45:38:53:11:22:e6:4a:97:
31:cc:70:de:57:40:74:3b:54:1e:52:f2:11:e2:bc:cc:3e:e8:
0d:ce:f5:a0:58:b5:ac:f8:ea:66:0e:f6:a5:ed:80:fd:76:e3:
91:15:8f:df:e7:ca:36:80:67:d8:e8:65:d8:c4:f9:24:ae:ac:
25:f5:7e:c9:9d:c3:13:27:ed:2f:62:e2:3f:fc:0b:d7:6b:d6:
c0:d4:fa:6f:fe:09:90:7e:63:f2:66:4e:2e:d9:d4:5e:18:8f:
c8:dc:be:26:1c:70:30:87:da:f1:48:24:41:07:53:1e:03:3b:
11:1e:01:91:55:36:2d:ee:2d:fb:dd:b0:af:a8:e4:45:e6:76:
71:44:c1:70:a6:c6:7f:51:2d:45:b8:ec:06:4c:a2:0e:9f:e1:
33:a9:e4:87:77:b5:36:3b:50:ff:36:04:e0:ad:38:04:1d:c9:
98:16:d8:39
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIECUed5jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODc0ZTQ2YmY2MzZlYTYzZTVkMTIzNjJmNTUxYjgwYjI3NzE0NzgwMB4XDTIyMDYy
MjEzMDEzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTZjYWIzYzgxM2Y2
MzRiYjQ2Y2NjMmJmN2ExYzExOTM5YzFhMjJmNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALuz5Eal6Wyvi+LD6KraMikVNVUARnIO1ZX3FrYsD/V2g38Y
JQNg1m4HVjOKPOviimwiEctX1wzv7WY6qy98WtrUz+sB0I/8aZe142edeCs3fYS5
7PGgs9pbIome6v1v1MjjvgAQauJyvl6P9Zhf4V1WNMnCR++Gu4ed6WWDKFzuU2BG
Gxd8Nwe+8H6e6IyTvkm0K3sTEfl/Sq/t7XH25UCYlSIlVPLcXD/7M1EAJOSfdKRG
XQ1vm1Ny/U787uVGndFWDqLkoYZR4HjnB2+VoWyyrMoVNvVp98upPC63Te2kYbho
bg+bzfsi8owkVQ6wQGKE7uUnyByfuH/lbPzySvMCAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBQWyrPIE/Y0u0bMwr96HBGTnBoi9jAfBgNVHSMEGDAWgBQodORr9jbqY+XR
I2L1UbgLJ3FHgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tIVGthX1kyNm1QbDBTTmk5Vkc0Q3lkeFI0QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjgvZWRkYzA1LTQwMmQtNGRhNy05N2VmLWMxMGRhNmFhYzFiMS8x
L0ZzcXp5QlAyTkx0R3pNS19laHdSazV3YUl2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjgv
ZWRkYzA1LTQwMmQtNGRhNy05N2VmLWMxMGRhNmFhYzFiMS8xL0tIVGthX1kyNm1Q
bDBTTmk5Vkc0Q3lkeFI0QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBSUQYAMEA7LV6DANBAIAAjAHAwUA
KgBMwTANBgkqhkiG9w0BAQsFAAOCAQEADDKbkKxsWNF5hoID3IykMdFbUHTKW6fK
ExM1QZ7YS1MRHB5kDy0teXAa8+DgLeref3siwZ8XR2t0ISWVpvtvPblpHl6CxLPw
8uk4KLbCLtu9EkU4UxEi5kqXMcxw3ldAdDtUHlLyEeK8zD7oDc71oFi1rPjqZg72
pe2A/XbjkRWP3+fKNoBn2Ohl2MT5JK6sJfV+yZ3DEyftL2LiP/wL12vWwNT6b/4J
kH5j8mZOLtnUXhiPyNy+JhxwMIfa8UgkQQdTHgM7ER4BkVU2Le4t+92wr6jkReZ2
cUTBcKbGf1EtRbjsBkyiDp/hM6nkh3e1NjtQ/zYE4K04BB3JmBbYOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org