Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/FFDgr6ayqyOBoXh-U303FzGSd_w.roa
File: FFDgr6ayqyOBoXh-U303FzGSd_w.roa (raw, json)
Hash identifier: QfGy9wRDZaN4LaZJRtHbINDYjq8wK5S47qJzsWWn+Qo=
Subject key identifier: 14:50:E0:AF:A6:B2:AB:23:81:A1:78:7E:53:7D:37:17:31:92:77:FC
Certificate issuer: /CN=acfbbca852b957385909f6bd288cdf363f218b06
Certificate serial: 042A717D
Authority key identifier: AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/FFDgr6ayqyOBoXh-U303FzGSd_w.roa
Signing time: Tue 08 Mar 2022 13:10:48 +0000
ROA not before: Tue 08 Mar 2022 13:10:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203901
IP address blocks: 185.101.28.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69890429 (0x42a717d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfbbca852b957385909f6bd288cdf363f218b06
Validity
Not Before: Mar 8 13:10:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1450e0afa6b2ab2381a1787e537d3717319277fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:f0:57:54:e9:2a:d0:b8:5d:da:50:70:57:
a1:f5:82:2a:fb:33:9d:1c:20:0f:3c:92:7c:bb:a3:
b9:70:1d:31:5c:56:46:cb:f6:15:ec:c1:3e:d5:c0:
24:7e:9b:fd:e4:3a:c2:93:84:55:11:a4:29:55:10:
bc:45:dd:31:66:3e:b8:32:47:a0:06:de:47:81:7a:
cc:5c:41:b1:ba:3a:3f:ef:fc:cd:69:05:aa:af:ad:
b3:aa:24:dc:94:bd:05:40:2f:83:f4:e3:40:d6:f4:
ef:48:c9:3d:99:9c:c9:97:71:41:2c:8b:ef:4a:09:
0d:79:e9:64:12:f3:7a:22:f9:65:4c:fa:c8:14:10:
4d:0c:bf:fb:8c:cf:3a:a9:bd:09:57:f1:f1:52:87:
d2:20:88:d5:d4:de:ca:5a:7a:e8:47:dd:de:03:80:
91:ea:6a:de:95:a1:a9:a2:b2:1a:c3:df:63:fc:03:
fe:9c:4f:a4:de:c9:84:18:f5:b7:4b:b4:71:cf:c6:
f1:f0:9a:de:ae:7e:49:cc:65:ca:a5:e4:05:30:79:
c1:2c:41:ef:b1:7d:ab:48:d3:0c:52:7c:1c:dc:73:
7c:cd:34:b6:1c:f6:c9:15:41:41:bf:88:28:81:3a:
27:63:a3:8c:d9:26:68:ce:aa:62:e3:20:3c:cd:ce:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:50:E0:AF:A6:B2:AB:23:81:A1:78:7E:53:7D:37:17:31:92:77:FC
X509v3 Authority Key Identifier:
keyid:AC:FB:BC:A8:52:B9:57:38:59:09:F6:BD:28:8C:DF:36:3F:21:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPu8qFK5VzhZCfa9KIzfNj8hiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/FFDgr6ayqyOBoXh-U303FzGSd_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5247b3-6067-436d-ae19-cba722ecb2db/1/rPu8qFK5VzhZCfa9KIzfNj8hiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:2b:97:43:0f:ef:c5:29:d0:f0:72:51:09:b3:a2:9a:09:fa:
41:72:39:e8:aa:91:18:a1:3b:70:1c:5e:58:c5:4c:68:33:c2:
b6:cd:f8:b9:e0:08:2a:48:0c:b7:27:bf:ce:10:d1:e0:4d:75:
50:46:46:fc:6e:b9:93:77:54:ca:a0:61:de:39:9d:0a:fd:1e:
9f:a0:df:8c:4d:8e:86:bc:b3:3c:78:7d:f8:40:38:74:0f:58:
18:5b:24:3e:f5:2a:cb:8c:53:8b:ae:a1:99:86:96:9c:5e:75:
aa:f6:e5:c2:4e:92:1d:ab:14:cc:4a:ee:2b:fe:ac:1f:92:00:
d0:b4:7f:18:ed:e2:64:42:d0:ec:1b:62:fd:2c:ff:40:94:cf:
4c:1a:70:2a:32:e1:6e:b8:62:87:6d:5a:1d:35:fd:b1:0b:d0:
f3:6d:53:19:20:d2:e1:9a:15:fd:a2:d4:c8:29:40:0b:93:7e:
05:2f:e9:2d:27:34:a8:83:96:66:09:eb:c3:2b:02:57:b3:10:
9c:0d:33:47:eb:f5:ac:e9:35:0f:1e:54:61:61:95:b7:00:6e:
71:0b:d7:08:b5:76:ee:1d:e7:55:ef:09:e1:4e:ae:1d:67:a9:
4a:f6:4e:16:7c:c3:59:21:b3:25:1a:e7:5a:cb:58:86:1a:1f:
d1:13:3d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:39:44 2025 by rpki-client