Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/FtsJC1Sw-kZrD3Jlsjjf8y8nLtE.roa
File: FtsJC1Sw-kZrD3Jlsjjf8y8nLtE.roa (raw, json)
Hash identifier: WsOpEKL11CeutbvA3ggZoJXro21jf6RDZGet3IB9ZAw=
Subject key identifier: 16:DB:09:0B:54:B0:FA:46:6B:0F:72:65:B2:38:DF:F3:2F:27:2E:D1
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 018AA7BE21B47E012E719DC010145B2F152A
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/FtsJC1Sw-kZrD3Jlsjjf8y8nLtE.roa
Signing time: Mon 18 Sep 2023 10:02:50 +0000
ROA not before: Mon 18 Sep 2023 10:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6750
IP address blocks: 185.130.200.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:be:21:b4:7e:01:2e:71:9d:c0:10:14:5b:2f:15:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Sep 18 10:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16db090b54b0fa466b0f7265b238dff32f272ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:1d:80:20:fa:a2:31:31:4a:d0:b2:bc:aa:
1c:fe:95:42:53:29:9d:d8:82:00:4d:26:01:a5:ca:
a0:22:2e:e8:99:54:28:82:20:ff:86:7d:24:a3:b7:
e9:46:b8:af:48:81:c6:2b:a2:f3:f1:aa:3b:c2:7d:
f4:cc:ef:91:4c:26:8e:ef:69:f9:d9:56:63:38:73:
19:33:55:2f:cd:9d:2f:d4:5b:0a:38:c2:47:14:8f:
e2:08:75:30:d7:23:7c:c6:9c:c2:87:fa:d9:2c:7c:
85:35:dd:c4:f2:8a:78:55:b0:fe:8b:24:ba:16:f9:
ad:b7:91:3b:19:9b:91:b5:61:79:c2:38:57:07:cb:
28:5d:5c:d1:d5:58:56:52:af:6f:27:22:8e:3b:15:
4d:e2:f3:84:f9:aa:f7:dd:81:06:f4:22:ea:9c:45:
e9:2a:8e:d4:35:1d:88:17:d4:d5:90:9f:25:8d:a6:
23:63:54:27:4f:2b:f9:75:cc:7a:9c:00:c3:ff:d7:
34:b1:41:1b:75:1a:c9:13:7f:18:02:6e:95:4c:b3:
a0:91:ec:82:b7:ea:52:67:14:87:e0:6c:69:05:57:
3e:ad:9a:14:22:91:69:df:70:ad:53:7c:22:86:73:
c9:f2:35:f8:d0:54:cb:07:b9:8f:ba:1d:26:98:d8:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:09:0B:54:B0:FA:46:6B:0F:72:65:B2:38:DF:F3:2F:27:2E:D1
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/FtsJC1Sw-kZrD3Jlsjjf8y8nLtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.200.0/22
Signature Algorithm: sha256WithRSAEncryption
95:07:89:20:6d:a1:99:f5:8e:74:b2:a4:02:43:81:2e:14:8e:
da:a7:3b:20:78:08:1e:cc:1f:cb:ae:47:9c:08:87:c9:31:19:
06:e4:ee:88:72:8c:01:ec:b4:05:9d:80:e4:40:10:1c:ad:d3:
18:dc:d0:7b:df:93:0d:16:7d:36:70:aa:f6:a0:87:68:d7:f9:
ca:a8:7d:76:a6:de:1c:83:b5:c6:db:e8:cd:d1:15:d0:8f:d7:
3a:85:3b:2c:ff:71:fc:96:56:98:4c:a7:b7:6c:69:5a:9e:26:
4c:f2:ca:b4:73:11:19:19:66:a6:bf:a8:a7:98:15:1b:02:c1:
6a:c6:a5:7e:12:3b:f9:5d:2b:c8:33:90:63:ce:b7:e9:12:9e:
9f:65:6b:1a:94:a7:38:32:37:b0:e0:36:1b:00:bf:76:00:37:
da:f2:9f:65:15:b7:5e:49:af:bc:de:a1:63:5c:0a:38:86:80:
0c:5c:e1:7f:7a:b4:60:3b:a0:cd:03:f6:a1:12:39:41:fe:c6:
a5:8c:47:b7:99:4f:e4:2e:42:87:28:99:04:e3:b2:47:07:e5:
7a:cc:86:04:fc:6c:40:54:51:26:1b:89:13:75:6b:f5:27:58:
b1:d5:0c:ee:82:b4:12:dd:e7:6e:ff:51:05:94:ff:d0:86:de:
c2:ee:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:10 2025 by rpki-client