Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/flkw2__xhR5F5EHaYizUihHTaSI.roa
File: flkw2__xhR5F5EHaYizUihHTaSI.roa (raw, json)
Hash identifier: Faysi66/76Suh1lgg0UFXW5IslnihAEL/WHAIscMTrw=
Subject key identifier: 7E:59:30:DB:FF:F1:85:1E:45:E4:41:DA:62:2C:D4:8A:11:D3:69:22
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 0711EA16
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/flkw2__xhR5F5EHaYizUihHTaSI.roa
Signing time: Tue 17 May 2022 13:48:29 +0000
ROA not before: Tue 17 May 2022 13:48:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20568
IP address blocks: 45.88.204.0/22 maxlen: 22
45.88.204.0/24 maxlen: 24
45.88.206.0/24 maxlen: 24
45.88.205.0/24 maxlen: 24
91.144.100.0/24 maxlen: 24
45.88.207.0/24 maxlen: 24
2a03:9900:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118614550 (0x711ea16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: May 17 13:48:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e5930dbfff1851e45e441da622cd48a11d36922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1c:5e:15:22:cb:9b:75:43:c6:82:d0:0e:5a:
70:e8:a3:09:fa:09:ee:41:8d:f1:9a:94:5c:37:d3:
33:83:47:81:f1:3c:0e:24:f0:af:3b:42:f8:85:b9:
0a:9d:60:f0:e1:57:e6:6d:f3:e9:dd:7c:6a:bf:b1:
58:e4:94:50:a8:3b:ad:d5:47:ee:76:4f:ef:f4:3b:
5e:ff:e1:22:81:21:76:73:eb:ef:37:b3:db:b4:9d:
8e:8c:2b:d2:d6:23:1c:0c:86:ba:0a:f3:84:50:8c:
5a:8b:5b:47:ff:1f:50:be:58:46:2e:5e:85:dd:0e:
2d:09:a3:36:8d:49:94:0f:cd:79:b1:40:a4:60:23:
2b:aa:dc:f5:ae:28:f7:30:5a:9f:7b:51:c8:2d:48:
10:7b:f8:99:8d:35:22:46:74:0a:79:c4:26:c5:08:
b9:74:5f:f8:32:68:85:93:b5:be:cc:36:a4:d2:c8:
9d:db:ee:d7:c6:90:91:99:7a:22:14:77:37:d1:3f:
ed:f7:e7:73:63:f5:a6:18:c0:ec:7c:e5:53:cb:9c:
83:42:28:00:0e:38:58:a5:75:77:75:90:09:d2:74:
ed:51:08:65:d7:c4:3f:ac:a9:00:cd:34:df:78:55:
fa:eb:7f:32:d3:35:d1:98:08:4d:32:bb:3c:5f:53:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:30:DB:FF:F1:85:1E:45:E4:41:DA:62:2C:D4:8A:11:D3:69:22
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/flkw2__xhR5F5EHaYizUihHTaSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.204.0/22
91.144.100.0/24
IPv6:
2a03:9900:100::/48
Signature Algorithm: sha256WithRSAEncryption
a8:fb:7b:2c:8d:d5:f2:14:b5:05:d0:78:4e:a8:b3:35:bd:12:
7a:a2:98:a5:23:26:11:0a:40:87:45:46:d7:33:e1:47:80:c0:
8d:8d:04:69:69:a8:06:9a:ff:e4:69:5a:fa:eb:25:e9:f3:bc:
57:89:3e:a6:2d:76:61:37:68:9d:62:eb:e8:96:80:96:98:ab:
e1:ea:dd:e6:f7:54:09:32:ef:a9:d3:72:6b:d1:4c:06:a8:71:
84:c1:b5:1a:04:33:79:b6:eb:41:e5:32:1c:91:9d:9d:27:10:
30:25:c4:f9:28:e2:4b:94:9d:22:3f:45:6c:b3:c0:b7:e7:fd:
e2:30:c7:40:25:4b:4d:b9:1a:b5:9d:96:80:bb:71:ae:88:eb:
e7:6c:96:98:d5:0f:0b:7d:d6:8e:d4:b5:7c:ab:51:be:34:a4:
51:8d:eb:ec:0f:7c:1f:a9:d0:b1:8b:a2:d1:c4:4c:9e:ed:e6:
42:51:af:f3:5e:e2:8a:ed:c6:48:40:02:bf:a1:e4:02:b2:6e:
13:3d:6b:36:9c:52:85:df:12:d3:d3:6a:55:41:e3:eb:a5:10:
1e:38:44:77:f5:5c:f5:0d:15:c4:ab:09:84:a9:32:04:e7:f8:
78:cd:ca:77:2d:b6:ef:88:bf:41:4e:ce:03:65:d1:76:31:80:
a8:2c:bd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:21 2025 by rpki-client