Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/FdDrrQUwsv1EgBNxe_VPbgKjjXk.roa
File: FdDrrQUwsv1EgBNxe_VPbgKjjXk.roa (raw, json)
Hash identifier: 1UQQB9JvQWJheoSlJuYHIS/DHy4GvsDfk9cI8qPxKz0=
Subject key identifier: 15:D0:EB:AD:05:30:B2:FD:44:80:13:71:7B:F5:4F:6E:02:A3:8D:79
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 018323065F4DBEC57566312EBCC6D8CD0BBD
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/FdDrrQUwsv1EgBNxe_VPbgKjjXk.roa
Signing time: Fri 09 Sep 2022 16:12:43 +0000
ROA not before: Fri 09 Sep 2022 16:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 197451
IP address blocks: 147.229.192.0/19 maxlen: 19
147.229.0.0/17 maxlen: 17
147.229.224.0/19 maxlen: 19
147.229.128.0/18 maxlen: 18
185.62.108.0/23 maxlen: 23
2001:67c:1220::/46 maxlen: 46
2a03:2e0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:23:06:5f:4d:be:c5:75:66:31:2e:bc:c6:d8:cd:0b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Sep 9 16:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15d0ebad0530b2fd448013717bf54f6e02a38d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:13:ea:3f:58:5f:e6:8d:41:99:38:1e:f4:
84:04:b7:20:5f:85:dc:df:53:89:e6:a8:2b:a5:03:
48:4c:ec:aa:3a:9d:f7:7c:23:0d:e0:e1:8a:ec:14:
ce:cf:f9:7f:4f:dc:b7:c7:b8:c5:33:02:ef:33:9c:
7b:5c:14:58:a2:b3:df:bf:e3:a8:1c:95:57:89:95:
bd:f3:82:da:f4:00:97:d2:94:a6:5b:c0:d5:df:07:
60:25:67:51:20:75:d0:5b:31:1d:6a:cb:9f:9d:df:
70:07:55:8d:8c:8a:ee:26:eb:cd:99:e7:40:2d:77:
b4:b5:e3:3e:25:98:29:b0:19:96:62:9e:b8:e2:97:
86:60:38:24:3c:bc:e6:ba:56:05:be:77:56:7f:38:
12:24:ee:34:44:70:73:2b:db:1e:59:58:08:93:fc:
e6:96:99:f2:0c:22:53:17:52:50:f9:ce:31:45:0a:
66:e2:17:17:df:9a:d3:9b:39:42:ea:ac:15:12:20:
e5:46:46:f3:74:b1:fa:f1:d2:13:7c:00:df:4a:5c:
72:25:36:86:57:f9:cd:63:e2:24:7c:11:db:f0:9e:
f2:e1:76:83:13:63:dd:23:16:0f:cc:09:0e:49:63:
34:ec:86:d4:d4:3c:4f:eb:fa:c7:aa:b6:38:d2:a4:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:EB:AD:05:30:B2:FD:44:80:13:71:7B:F5:4F:6E:02:A3:8D:79
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/FdDrrQUwsv1EgBNxe_VPbgKjjXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.229.0.0/16
185.62.108.0/23
IPv6:
2001:67c:1220::/46
2a03:2e0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:5b:5d:52:bb:33:40:95:e9:3c:40:34:8c:05:4e:61:5f:fa:
c2:62:9f:09:1e:97:bf:19:d1:ba:f3:3b:88:de:c1:8c:78:a0:
95:44:26:7d:37:d2:7b:ac:6f:7f:86:f3:2f:10:69:64:a7:41:
8b:5b:d1:22:83:a2:2e:a3:8e:67:83:1d:49:a4:6f:c6:64:74:
cd:15:70:02:46:24:77:ce:45:e1:f6:f3:1c:cc:b9:ba:d4:7e:
1a:97:8f:69:34:a0:28:8b:df:bf:1b:bb:7e:ef:08:5a:4b:00:
1a:62:ef:68:c9:74:5a:2e:e3:f1:40:b7:39:50:ce:f0:63:fb:
8d:e1:91:ea:b9:a7:70:82:7e:8d:cf:09:ac:e5:1c:ea:57:01:
8f:51:06:9c:49:a9:5e:60:30:b1:61:2e:e2:26:ef:89:b7:0f:
14:05:0d:2c:ac:88:73:3e:56:cd:5b:42:7c:6f:a1:b1:bc:69:
57:7c:07:08:24:05:3f:29:8a:8e:a1:78:24:5d:49:0c:fe:80:
11:5a:ae:2b:07:37:bb:aa:e1:60:d5:fc:73:50:1b:f3:02:b5:
0a:5a:d7:3d:6b:e3:ab:1d:7d:8d:bf:ac:3b:00:e8:78:d1:f7:
aa:a2:8a:d1:46:ed:a7:5f:a7:15:d2:9e:34:2b:0b:b2:24:fa:
1c:6e:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:16 2025 by rpki-client