Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FSka_i5yRPKr5zuDZn9Dg9S06X0.roa
File: FSka_i5yRPKr5zuDZn9Dg9S06X0.roa (raw, json)
Hash identifier: yMFJihCqrvNwCPW2RU+p2qesILIIU+wBVhoSE8Xz8Yk=
Subject key identifier: 15:29:1A:FE:2E:72:44:F2:AB:E7:3B:83:66:7F:43:83:D4:B4:E9:7D
Certificate issuer: /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial: 018573F198AA3465071CEE0E29E7879A6FF0
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FSka_i5yRPKr5zuDZn9Dg9S06X0.roa
Signing time: Mon 02 Jan 2023 19:24:51 +0000
ROA not before: Mon 02 Jan 2023 19:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205665
IP address blocks: 185.209.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:f1:98:aa:34:65:07:1c:ee:0e:29:e7:87:9a:6f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Validity
Not Before: Jan 2 19:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15291afe2e7244f2abe73b83667f4383d4b4e97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5f:4d:b6:55:f0:65:87:2b:00:06:88:ba:10:
56:ec:fa:1a:e8:f0:b0:be:27:89:3a:94:96:73:22:
91:f0:5a:80:60:73:a0:96:22:7c:73:bf:00:d1:ab:
a6:0b:00:12:0d:3a:83:42:b8:f9:a5:b9:18:a3:91:
5c:8d:c8:94:a8:67:3a:e5:1d:71:a4:ab:c5:7c:bc:
5c:8f:fb:be:77:c1:cc:b2:c9:37:33:fc:e3:cf:27:
6c:9d:95:e2:0c:80:39:3b:ff:35:fc:ae:46:94:8a:
68:75:c6:33:c4:ff:02:11:51:94:35:67:7a:5e:99:
d5:a5:0e:ad:b6:54:37:8b:00:b8:d0:92:dd:68:11:
23:0a:cd:c7:d7:97:eb:45:68:83:70:72:a1:61:0d:
51:99:d8:8f:cc:d2:8b:46:bc:af:56:54:54:9f:36:
b7:55:93:92:30:81:44:6e:54:d9:c5:52:04:42:a3:
cc:1d:16:9a:71:30:bf:38:cf:3c:ba:94:63:9f:d6:
c0:08:78:47:5e:65:62:08:d8:fb:f9:39:42:8c:20:
dc:92:4a:87:fe:7e:9b:21:0c:12:c5:ee:ab:06:bf:
f8:b4:02:44:5d:82:d3:26:99:93:1d:a1:0f:b5:a3:
75:5c:3a:26:ad:c1:d5:44:bb:42:d7:9d:7a:e5:15:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:29:1A:FE:2E:72:44:F2:AB:E7:3B:83:66:7F:43:83:D4:B4:E9:7D
X509v3 Authority Key Identifier:
keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FSka_i5yRPKr5zuDZn9Dg9S06X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:29:44:0d:05:fd:81:75:b1:fc:d1:9d:62:e2:50:f9:6c:79:
12:cd:d9:89:c8:c8:23:5c:0e:7f:a6:c9:34:52:9c:6f:af:fe:
23:0d:87:22:5d:e4:32:ae:ba:33:c2:e1:63:29:d9:14:76:8d:
65:96:c4:31:30:02:ae:ec:e6:66:e7:2d:71:ec:5d:0b:71:e1:
3f:79:91:ce:7b:e3:33:bc:3a:a4:5f:3c:a2:5d:32:ce:88:89:
3b:7f:c7:22:af:7c:80:37:86:d5:cb:0f:28:2f:6e:fd:6f:74:
f0:7e:61:18:50:36:f1:02:9f:75:84:37:bb:b0:40:db:ac:68:
b2:0b:5e:8e:bd:c3:dc:26:4a:a3:58:a7:f2:88:8f:be:25:d9:
1e:93:33:a2:d6:1a:ae:e3:04:31:0e:5b:dc:07:0f:eb:19:d5:
19:67:32:c6:31:63:58:cf:8e:e1:75:be:28:9c:06:05:c8:1a:
78:e3:49:5a:b2:09:af:77:a3:e1:57:bd:c3:5a:e0:a9:22:16:
17:1d:c2:d5:8d:8d:6f:a4:16:21:d6:e5:da:ea:91:a8:d9:bd:
96:b3:a0:a6:e9:7c:f0:67:f6:54:f2:49:15:6e:cb:e1:9f:73:
05:e5:03:eb:02:ce:99:8f:86:3b:5f:47:73:cb:03:4a:3c:74:
9c:dd:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:07 2025 by rpki-client