Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/t718c27kZT1YOdBxreZWCa7peIo.roa
File: t718c27kZT1YOdBxreZWCa7peIo.roa (raw, json)
Hash identifier: qd3FbOt3vqj4CqRWvz9bLDp1a6h1GCMENMlAK6p5BJM=
Subject key identifier: B7:BD:7C:73:6E:E4:65:3D:58:39:D0:71:AD:E6:56:09:AE:E9:78:8A
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 01836B391DFEA1AF5C4D61ADCE4BC2529935
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/t718c27kZT1YOdBxreZWCa7peIo.roa
Signing time: Fri 23 Sep 2022 16:40:48 +0000
ROA not before: Fri 23 Sep 2022 16:40:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 194.50.234.0/23 maxlen: 23
194.50.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6b:39:1d:fe:a1:af:5c:4d:61:ad:ce:4b:c2:52:99:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Sep 23 16:40:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7bd7c736ee4653d5839d071ade65609aee9788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:77:75:66:b3:ca:82:73:e5:9c:5c:4b:6d:06:
c1:69:d0:55:fe:db:9a:ce:dd:39:f5:d1:46:ff:af:
dc:39:b5:d8:b6:38:46:23:79:dc:de:4b:b6:af:2f:
f8:25:71:9e:b0:2f:49:e3:6d:1f:c0:bc:f7:5b:67:
fa:37:2d:11:a8:72:fb:77:7a:05:8d:c6:84:26:c3:
c9:bd:16:af:14:f0:14:46:d2:9b:24:c7:f4:ec:9a:
99:e5:19:0b:48:d8:69:10:ad:8e:76:89:42:52:df:
b2:33:a4:09:39:46:98:47:ce:63:89:01:a8:c2:cb:
00:50:27:03:27:95:e8:89:a1:28:b5:90:3b:06:f4:
57:35:3d:45:57:e8:f8:34:9e:75:a9:98:87:ac:50:
7d:5e:b7:de:77:30:18:99:33:1f:21:ea:a8:79:f7:
df:eb:6a:06:77:e1:5c:3d:3a:1f:4e:cb:5c:93:2c:
fe:e4:5c:a5:68:fd:71:1e:8b:ac:ae:df:01:0f:b4:
72:63:7e:78:db:b4:10:ee:59:38:e0:c5:e6:ce:0e:
65:15:c4:d8:46:05:fb:1b:bb:2f:73:6b:b8:49:fa:
40:f7:eb:f6:8d:9e:f5:b3:93:f7:01:86:11:e9:f6:
6b:3d:69:d7:80:f7:a9:d7:8b:15:c3:5f:9e:0b:3f:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:7C:73:6E:E4:65:3D:58:39:D0:71:AD:E6:56:09:AE:E9:78:8A
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/t718c27kZT1YOdBxreZWCa7peIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.234.0/23
194.50.250.0/23
Signature Algorithm: sha256WithRSAEncryption
53:cd:a4:05:6a:3f:c2:8c:2a:e8:04:7a:38:50:d2:f6:01:c0:
f8:98:19:d2:e4:09:05:0d:84:64:2e:b9:ec:94:de:84:49:c8:
e0:c9:be:1a:68:48:61:9f:47:7e:ec:2a:50:fd:ac:2d:1a:16:
c7:d9:5c:2b:30:d5:67:95:a2:a6:53:b2:ee:f3:b2:87:76:9c:
96:0d:5f:de:51:ae:d0:f8:4d:de:8c:4c:44:3c:dc:25:90:3b:
7d:0a:dd:eb:84:d1:bc:5e:ce:58:09:4c:d2:f8:b8:af:76:23:
15:a7:df:da:1d:5a:d7:5b:c6:af:d0:cd:f0:7a:1e:7a:64:c6:
57:dd:38:e8:3c:38:c9:df:1b:7f:4d:f5:f0:48:81:63:27:71:
13:18:a3:3c:bf:0c:8e:03:b1:42:0f:42:cf:07:c2:55:56:77:
62:15:4a:7c:95:38:9b:ff:f8:3c:18:12:5e:91:da:cc:0f:c9:
2b:5d:85:6b:41:9c:57:83:b8:85:e9:c7:ea:b0:33:ba:40:69:
8e:51:8c:37:e4:ba:f3:71:d7:05:f6:ca:0d:3e:3f:78:98:b6:
f5:26:60:15:49:aa:7b:51:c1:80:f8:bc:5c:98:2f:66:65:b6:
85:f1:d8:dd:86:22:fa:2f:5f:bc:da:de:b8:f7:a2:1c:8c:bf:
3c:db:63:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYNrOR3+oa9cTWGtzkvCUpk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4
M2FjOTcwHhcNMjIwOTIzMTY0MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2JkN2M3MzZlZTQ2NTNkNTgzOWQwNzFhZGU2NTYwOWFlZTk3ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xd1ZrPKgnPlnFxLbQbBadBV/tua
zt059dFG/6/cObXYtjhGI3nc3ku2ry/4JXGesC9J420fwLz3W2f6Ny0RqHL7d3oF
jcaEJsPJvRavFPAURtKbJMf07JqZ5RkLSNhpEK2OdolCUt+yM6QJOUaYR85jiQGo
wssAUCcDJ5XoiaEotZA7BvRXNT1FV+j4NJ51qZiHrFB9XrfedzAYmTMfIeqoefff
62oGd+FcPTofTstckyz+5FylaP1xHousrt8BD7RyY35427QQ7lk44MXmzg5lFcTY
RgX7G7svc2u4SfpA9+v2jZ71s5P3AYYR6fZrPWnXgPep14sVw1+eCz9AhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLe9fHNu5GU9WDnQca3mVgmu6XiKMB8GA1UdIwQY
MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt
N2UwNWFiNDFiNmU0LzEvdDcxOGMyN2taVDFZT2RCeHJlWldDYTdwZUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0
LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwjLqAwQB
wjL6MA0GCSqGSIb3DQEBCwUAA4IBAQBTzaQFaj/CjCroBHo4UNL2AcD4mBnS5AkF
DYRkLrnslN6EScjgyb4aaEhhn0d+7CpQ/awtGhbH2VwrMNVnlaKmU7Lu87KHdpyW
DV/eUa7Q+E3ejExEPNwlkDt9Ct3rhNG8Xs5YCUzS+LivdiMVp9/aHVrXW8av0M3w
eh56ZMZX3TjoPDjJ3xt/TfXwSIFjJ3ETGKM8vwyOA7FCD0LPB8JVVndiFUp8lTib
//g8GBJekdrMD8krXYVrQZxXg7iF6cfqsDO6QGmOUYw35LrzcdcF9soNPj94mLb1
JmAVSap7UcGA+LxcmC9mZbaF8djdhiL6L1+82t6496IcjL8822PI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:00 2024 by rpki-client on console-fra.rpki-client.org