Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/FBxeV1EtNDI8bxhY97LGtNgzG8Y.roa
File: FBxeV1EtNDI8bxhY97LGtNgzG8Y.roa (raw, json)
Hash identifier: vJWVDvKIogmm784JiXQWMGI/ZaoLwoTUUH9scpnyRHI=
Subject key identifier: 14:1C:5E:57:51:2D:34:32:3C:6F:18:58:F7:B2:C6:B4:D8:33:1B:C6
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 018BF2090D973EBFFB2CAEF928194FFAB9B4
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/FBxeV1EtNDI8bxhY97LGtNgzG8Y.roa
Signing time: Tue 21 Nov 2023 13:19:21 +0000
ROA not before: Tue 21 Nov 2023 13:19:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29644
IP address blocks: 185.69.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:09:0d:97:3e:bf:fb:2c:ae:f9:28:19:4f:fa:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Nov 21 13:19:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=141c5e57512d34323c6f1858f7b2c6b4d8331bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:38:c7:72:d6:4f:d8:15:75:00:a1:b1:22:
6e:50:88:f8:39:1e:ff:7d:89:f8:48:6e:af:78:69:
bd:96:e8:30:b1:7f:af:de:6c:28:bc:45:31:5a:6e:
76:50:58:3e:11:1b:ff:e7:76:bc:3f:f9:cd:c0:68:
02:7e:54:ee:79:76:33:e1:ff:d5:29:73:84:42:93:
ba:0b:f4:f9:96:d5:a2:77:cf:01:3c:21:c7:bb:81:
48:d1:78:5c:c1:e9:0a:b1:1a:be:32:81:3b:dd:b3:
c7:72:3a:16:49:d7:c4:14:c6:d5:eb:79:79:36:b7:
e5:c7:a2:de:76:02:c7:15:3e:1b:9b:c4:51:b0:a7:
40:3f:d9:72:ce:72:a3:bd:5a:56:c2:e7:c0:4f:15:
6e:18:51:03:11:08:0e:33:6b:f3:1d:f8:8b:99:d8:
da:2d:50:d8:4d:b5:11:4a:d0:eb:8e:18:0b:21:b5:
a8:15:fb:8f:d0:8e:26:47:fa:fd:0e:d9:7a:6e:e8:
88:3f:5b:ad:54:7a:d1:13:97:59:6b:98:8b:7a:23:
53:4b:c1:5b:e8:a1:fa:4b:b4:f4:54:f7:fa:35:df:
53:8c:29:a7:f4:8c:26:e3:d1:2f:1c:a2:36:17:5e:
0d:ca:74:e4:f6:23:d8:fd:77:4e:82:95:72:5d:bc:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1C:5E:57:51:2D:34:32:3C:6F:18:58:F7:B2:C6:B4:D8:33:1B:C6
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/FBxeV1EtNDI8bxhY97LGtNgzG8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.212.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:c5:ce:cb:7e:9d:c2:52:bf:e8:12:5e:65:50:66:6b:c7:f9:
b5:b6:76:89:a2:8f:9b:c6:fe:ca:fa:d6:83:79:c5:76:4d:70:
6a:c3:83:79:80:d1:c0:3e:19:92:e3:1f:4f:6f:43:d3:bc:4d:
3a:a2:f2:a4:af:c7:cb:b4:d4:24:3c:b4:4e:db:00:cd:a1:65:
23:31:38:b2:97:95:fb:10:df:26:32:86:0a:69:ff:c8:d2:6a:
e4:3d:4f:a1:4a:cc:87:cc:b9:13:a4:00:f6:e8:2f:44:4a:66:
20:83:0a:76:e4:f1:c8:1c:ef:99:00:75:a2:ad:d3:12:59:3a:
f9:6c:fc:21:0f:86:e4:d6:7a:17:97:ad:01:6c:bd:7a:ae:de:
d6:fc:91:b2:22:af:fc:d4:ef:c2:b0:8a:b9:04:52:b6:f6:fc:
bc:9b:e8:96:6c:2c:fd:5f:a1:e6:98:f3:a3:75:79:ac:a7:94:
97:32:c6:20:c5:c5:de:62:7d:a3:77:44:db:d2:bb:48:2a:6b:
9d:d0:fd:07:de:ee:f9:18:5e:53:e0:3e:36:ce:b9:ac:77:3d:
cb:83:4f:b3:74:b1:94:03:38:ab:7c:7e:eb:7d:a4:79:36:46:
02:7f:ed:27:a4:f1:b9:5f:a8:ca:af:65:d6:cc:e1:46:88:90:
b4:1c:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:52 2025 by rpki-client