Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/FG1qlRU38Jg9uzMK_feWk5fOZVM.roa
File: FG1qlRU38Jg9uzMK_feWk5fOZVM.roa (raw, json)
Hash identifier: 1FEKcr0yM6PX9X67gQjzCT6UonyrpFGUduqB/w+mWD8=
Subject key identifier: 14:6D:6A:95:15:37:F0:98:3D:BB:33:0A:FD:F7:96:93:97:CE:65:53
Certificate issuer: /CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Certificate serial: 0297E879
Authority key identifier: 27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/FG1qlRU38Jg9uzMK_feWk5fOZVM.roa
Signing time: Sat 01 Jan 2022 05:57:59 +0000
ROA not before: Sat 01 Jan 2022 05:57:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50252
IP address blocks: 194.102.140.0/23 maxlen: 23
194.102.140.0/24 maxlen: 24
194.102.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43509881 (0x297e879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27391ae28a91d5991346aedaf17bf8605c8cf22e
Validity
Not Before: Jan 1 05:57:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=146d6a951537f0983dbb330afdf7969397ce6553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:54:54:cc:0c:52:60:e9:6f:1b:f3:92:2b:
be:2e:81:b2:cf:7a:f4:3e:5b:5c:e4:8f:8a:4a:75:
69:cc:40:21:75:f5:76:99:7c:69:ad:fb:8d:86:0c:
21:e4:22:59:18:57:05:05:e6:3d:a5:2c:de:7c:a9:
31:39:f3:77:66:66:88:b3:cb:15:cf:b6:af:3e:9a:
e3:3e:da:2f:22:94:e4:d9:18:ac:04:1e:b9:b5:dd:
79:9d:94:18:64:1a:9f:5a:85:89:9a:f1:94:1d:9f:
a7:cf:bd:60:21:e4:83:af:d4:a0:45:17:11:2c:58:
47:4e:29:4b:70:a8:e8:08:e6:cd:8f:4d:4e:c1:b6:
ed:ac:d1:1c:b1:82:f6:27:6a:1b:d2:52:66:26:d7:
29:bc:d1:9d:98:be:2d:4c:57:22:5a:1c:55:19:16:
08:ee:49:17:2e:a0:57:b6:35:ad:e8:2e:c9:98:e5:
7c:13:f6:5f:77:59:a0:b6:a1:e6:67:dc:72:85:8c:
42:68:5f:40:83:41:e2:99:74:62:7b:89:cc:0d:52:
5e:3a:27:1b:53:d6:e1:be:ac:78:5f:3d:20:7d:02:
79:71:da:ba:45:fe:ee:84:dd:e8:65:af:f2:92:91:
94:44:30:4e:fd:63:6a:7b:a5:db:a8:10:19:53:7f:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6D:6A:95:15:37:F0:98:3D:BB:33:0A:FD:F7:96:93:97:CE:65:53
X509v3 Authority Key Identifier:
keyid:27:39:1A:E2:8A:91:D5:99:13:46:AE:DA:F1:7B:F8:60:5C:8C:F2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/FG1qlRU38Jg9uzMK_feWk5fOZVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/66578f-e8bf-40e0-ab30-a4c128075862/1/Jzka4oqR1ZkTRq7a8Xv4YFyM8i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.140.0/23
Signature Algorithm: sha256WithRSAEncryption
35:64:8f:0f:e9:64:28:9d:f5:53:05:c9:7b:1b:6f:68:d2:e9:
2e:05:04:0e:05:d6:a3:92:44:f4:9a:bc:49:ef:ca:07:36:23:
6f:40:e1:77:37:b1:37:4b:32:9e:9f:7e:8d:27:b4:3c:e3:84:
e9:c2:44:0e:48:9c:4d:e9:b9:5e:92:4a:bc:5f:44:9e:b4:66:
33:ec:bb:16:99:fe:3a:a5:27:3b:a4:da:a1:ee:20:61:64:34:
91:f8:da:0f:67:51:25:46:0b:db:7c:72:80:97:ff:fd:75:88:
d4:51:7e:1a:9d:40:94:7d:6d:d9:fb:fd:e0:07:2e:7b:ed:73:
0d:84:19:64:04:30:db:28:77:36:54:8f:27:65:2b:89:65:0e:
92:5b:46:b5:dc:4f:1a:61:26:08:4f:12:aa:87:66:75:51:22:
e6:40:f6:45:19:cf:6a:eb:3f:6c:df:1e:87:53:a8:34:87:d4:
cc:6a:99:7f:7f:8f:85:bd:cd:ee:1b:7c:d4:ab:5e:ec:50:33:
4b:84:a0:09:da:7d:d6:73:a6:a1:6c:4c:7a:64:7a:6e:5b:ed:
11:58:10:ef:c9:10:72:9a:0e:a4:fa:d4:5c:62:4e:c7:5d:97:
f7:f2:95:ae:0c:d1:e5:30:5a:9e:f4:b6:58:0e:23:27:ec:55:
28:51:fc:34
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEApfoeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NzM5MWFlMjhhOTFkNTk5MTM0NmFlZGFmMTdiZjg2MDVjOGNmMjJlMB4XDTIyMDEw
MTA1NTc1OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQ2ZDZhOTUxNTM3
ZjA5ODNkYmIzMzBhZmRmNzk2OTM5N2NlNjU1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ0cVFTMDFJg6W8b85Irvi6Bss969D5bXOSPikp1acxAIXX1
dpl8aa37jYYMIeQiWRhXBQXmPaUs3nypMTnzd2ZmiLPLFc+2rz6a4z7aLyKU5NkY
rAQeubXdeZ2UGGQan1qFiZrxlB2fp8+9YCHkg6/UoEUXESxYR04pS3Co6AjmzY9N
TsG27azRHLGC9idqG9JSZibXKbzRnZi+LUxXIlocVRkWCO5JFy6gV7Y1reguyZjl
fBP2X3dZoLah5mfccoWMQmhfQINB4pl0YnuJzA1SXjonG1PW4b6seF89IH0CeXHa
ukX+7oTd6GWv8pKRlEQwTv1janul26gQGVN/CH0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQUbWqVFTfwmD27Mwr995aTl85lUzAfBgNVHSMEGDAWgBQnORriipHVmRNG
rtrxe/hgXIzyLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0p6a2E0b3FSMVprVFJxN2E4WHY0WUZ5TThpNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzgvNjY1NzhmLWU4YmYtNDBlMC1hYjMwLWE0YzEyODA3NTg2Mi8x
L0ZHMXFsUlUzOEpnOXV6TUtfZmVXazVmT1pWTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgv
NjY1NzhmLWU4YmYtNDBlMC1hYjMwLWE0YzEyODA3NTg2Mi8xL0p6a2E0b3FSMVpr
VFJxN2E4WHY0WUZ5TThpNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcJmjDANBgkqhkiG9w0BAQsFAAOC
AQEANWSPD+lkKJ31UwXJextvaNLpLgUEDgXWo5JE9Jq8Se/KBzYjb0DhdzexN0sy
np9+jSe0POOE6cJEDkicTem5XpJKvF9EnrRmM+y7Fpn+OqUnO6Taoe4gYWQ0kfja
D2dRJUYL23xygJf//XWI1FF+Gp1AlH1t2fv94Acue+1zDYQZZAQw2yh3NlSPJ2Ur
iWUOkltGtdxPGmEmCE8SqodmdVEi5kD2RRnPaus/bN8eh1OoNIfUzGqZf3+Phb3N
7ht81Kte7FAzS4SgCdp91nOmoWxMemR6blvtEVgQ78kQcpoOpPrUXGJOx12X9/KV
rgzR5TBanvS2WA4jJ+xVKFH8NA==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:09 2023 by rpki-client on console.sobornost.net