Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/FxjnMnsr5CKUZCdmzdr66ApmlX8.roa
File: FxjnMnsr5CKUZCdmzdr66ApmlX8.roa (raw, json)
Hash identifier: 8yq6SRxz4K4gluDXYdGy+3xwcmaXUwjhDGeLcjO9dFE=
Subject key identifier: 17:18:E7:32:7B:2B:E4:22:94:64:27:66:CD:DA:FA:E8:0A:66:95:7F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 0249D70D
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/FxjnMnsr5CKUZCdmzdr66ApmlX8.roa
Signing time: Sat 01 Jan 2022 09:55:10 +0000
ROA not before: Sat 01 Jan 2022 09:55:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210021
IP address blocks: 185.100.23.0/24 maxlen: 24
185.100.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38393613 (0x249d70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Jan 1 09:55:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1718e7327b2be42294642766cddafae80a66957f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:db:b3:81:83:31:58:73:f6:6b:95:ef:72:
5a:8c:b5:c1:3c:bc:ea:97:0c:55:67:34:17:9d:5b:
02:9b:9c:20:f5:48:e7:dd:1f:3f:50:9c:46:e0:6a:
60:0e:8a:5f:5d:3b:a6:2c:1e:37:55:2f:95:18:16:
79:7e:59:64:4d:58:bb:7f:19:18:f1:33:fd:bd:eb:
49:49:d6:4d:ab:64:18:3d:61:8b:2e:d2:39:34:6c:
b6:44:5a:aa:d2:3c:78:96:e8:51:cb:ba:56:2c:c7:
af:49:ef:95:5a:9f:55:76:55:93:c2:44:b3:ed:17:
0a:4a:86:40:85:75:aa:94:f4:16:8b:87:53:2c:b4:
54:cb:8d:e8:30:e9:04:73:17:04:4d:4c:61:a0:42:
1a:1c:1f:15:93:3e:ec:86:6f:86:5b:2f:b4:f5:29:
52:51:fb:f2:be:8b:b5:cd:ef:e3:77:61:1c:a9:2d:
1a:f1:3b:fa:42:ac:89:ac:56:07:70:0f:a5:2c:c7:
e9:0c:f2:7a:f8:0a:7c:18:19:68:d8:cb:c3:63:50:
98:db:a4:55:19:a2:f0:23:d6:8b:43:b5:78:c0:4b:
4c:83:ac:74:63:ec:2e:21:63:e7:11:de:e7:b4:24:
3c:2c:1b:85:07:2b:ae:22:2c:08:a0:a9:f7:b1:49:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:E7:32:7B:2B:E4:22:94:64:27:66:CD:DA:FA:E8:0A:66:95:7F
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/FxjnMnsr5CKUZCdmzdr66ApmlX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.22.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:dd:33:1d:4f:17:10:97:b2:48:62:75:bc:6f:27:9d:78:6f:
33:a4:f5:ff:86:3c:d4:e6:f6:cc:a0:bf:59:29:e6:bc:1c:4d:
89:f3:36:3f:11:6d:c5:cb:bd:cf:53:fe:71:a1:2c:b6:5a:79:
82:6c:85:f8:ab:33:62:83:a7:d5:6a:3d:ba:4a:7c:40:3d:bf:
0e:23:8c:98:08:ea:6f:5f:f0:a6:71:b8:83:9e:e5:cc:49:62:
0a:6b:0b:33:8d:25:2b:c1:6b:0c:7c:77:a0:94:2e:2f:12:6b:
43:d5:85:1a:37:16:09:83:f0:98:50:82:4e:e0:14:53:c5:39:
2f:72:2d:35:ab:04:be:a3:76:bc:75:52:9e:85:59:1c:f4:48:
a6:7c:a9:ee:08:2a:bb:cc:b3:eb:b6:7d:43:dc:12:d5:e3:d8:
17:2c:d5:2f:74:71:8a:82:9c:74:bb:c1:dc:07:b0:4e:fe:41:
c4:78:85:40:81:69:7a:84:ec:ac:4a:a2:37:f4:5f:97:65:03:
b9:46:25:e5:41:68:e5:aa:9f:54:f8:1b:45:31:55:f7:47:ba:
e0:10:2f:79:ea:0c:41:15:63:a2:8a:28:07:5d:df:c4:73:64:
a3:d8:78:cc:bf:54:90:e1:52:71:8c:31:45:29:8c:7a:87:20:
5b:33:f0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:54 2025 by rpki-client