Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/FwdtyNROsUfRcd9YdkoROXCIyXY.roa
File: FwdtyNROsUfRcd9YdkoROXCIyXY.roa (raw, json)
Hash identifier: RwPNqjLBHou3fI9vsqrIqXF1rRg+hElErcKIMw5T7Zk=
Subject key identifier: 17:07:6D:C8:D4:4E:B1:47:D1:71:DF:58:76:4A:11:39:70:88:C9:76
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 0185E90C45894FC65650BC5B6C4EA9C88847
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/FwdtyNROsUfRcd9YdkoROXCIyXY.roa
Signing time: Wed 25 Jan 2023 13:09:33 +0000
ROA not before: Wed 25 Jan 2023 13:09:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:0c:45:89:4f:c6:56:50:bc:5b:6c:4e:a9:c8:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 25 13:09:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17076dc8d44eb147d171df58764a11397088c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:ff:55:1c:49:e0:66:aa:9e:26:52:74:db:
9e:65:25:f5:aa:e1:8e:7b:34:e6:f3:7b:c1:2e:f3:
50:05:64:aa:eb:b4:0b:2a:a6:a4:8c:69:f7:3d:72:
90:cc:31:b7:72:19:bf:36:31:88:13:b4:17:43:07:
33:e2:a5:3f:0c:a8:0b:9b:df:60:a6:49:59:1e:95:
36:21:d3:3f:4e:c1:79:73:51:9f:df:d2:bf:c2:1b:
dc:74:f0:51:7c:e7:c0:4d:9b:40:fb:13:38:b4:1a:
6e:ce:cd:72:6a:dc:81:2f:e2:e9:32:cd:0c:04:84:
98:84:06:e0:ac:62:fe:4f:d3:33:d0:25:73:a9:06:
3b:ec:75:b3:5c:2f:aa:31:e9:93:c7:e3:54:6a:c5:
61:a0:0e:d3:4b:f6:78:80:c1:f0:af:ff:1f:9a:c8:
4b:49:67:10:6b:2c:29:06:ce:c0:21:1f:4c:46:58:
f8:77:2b:2b:dd:d9:ad:9a:4d:f4:11:ce:47:50:20:
23:10:3f:de:f1:d8:ed:55:8a:f9:b9:10:12:f9:c2:
6d:bc:3f:6d:45:35:cc:84:12:e8:9d:b7:ce:8e:d1:
2f:29:54:9f:25:18:7a:bb:75:50:9a:a0:a5:b0:e2:
bb:a8:6d:96:f7:9e:83:7e:7b:e7:1a:2e:5d:c9:af:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:07:6D:C8:D4:4E:B1:47:D1:71:DF:58:76:4A:11:39:70:88:C9:76
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/FwdtyNROsUfRcd9YdkoROXCIyXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/24
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e8:8d:d1:bf:19:9d:2a:1d:05:a5:2e:7f:b2:fa:15:73:f5:
d2:0e:13:5d:1a:7c:84:53:8f:78:55:cf:24:2f:71:48:e2:bb:
6c:c3:6c:6a:38:5d:41:aa:40:cd:b1:e2:76:ed:79:1b:22:f2:
24:4a:56:87:ca:4b:77:b4:e4:55:d0:5f:e6:99:d9:a2:86:91:
ad:2f:fd:dc:f1:1f:e9:f9:5f:23:50:df:72:12:4e:17:e0:f7:
45:43:36:1f:e4:43:6e:aa:95:95:68:1d:46:88:67:43:2a:1d:
d1:ea:48:e9:48:ec:fb:01:80:16:df:cf:67:46:77:df:c6:9a:
8a:30:04:9e:19:28:cc:43:9c:c2:fa:aa:85:10:7d:55:e5:06:
f5:bd:5e:cc:f3:3a:3e:f9:7b:fd:63:b4:76:c2:79:df:0b:e8:
50:40:65:7b:f0:2c:e5:e1:c4:7b:ef:3b:0c:11:c6:86:9c:ac:
b7:d6:05:e8:0b:b3:7f:82:93:4e:77:3d:ef:88:c0:de:cd:aa:
f7:8a:f0:aa:24:4e:21:ce:8d:15:82:32:27:43:7b:ae:ef:5b:
dc:90:be:a7:59:51:11:d4:37:c0:65:d7:c0:58:b4:b8:25:8c:
8a:dc:87:47:d9:42:f6:06:77:99:c4:9a:11:20:a1:89:96:8d:
59:fa:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:04:49 2025 by rpki-client