Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/FGQzaK13LUt38iZUY8CYs2Ub6I8.roa
File: FGQzaK13LUt38iZUY8CYs2Ub6I8.roa (raw, json)
Hash identifier: /I5uM5HCnrOO4AuRrUVHv6TQowddESqF/NBnOa/PWjw=
Subject key identifier: 14:64:33:68:AD:77:2D:4B:77:F2:26:54:63:C0:98:B3:65:1B:E8:8F
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 01827D1A5ED17C6D7980D39AC79417E4B436
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/FGQzaK13LUt38iZUY8CYs2Ub6I8.roa
Signing time: Mon 08 Aug 2022 10:57:36 +0000
ROA not before: Mon 08 Aug 2022 10:57:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206766
IP address blocks: 193.109.217.0/24 maxlen: 24
45.153.72.0/23 maxlen: 23
185.183.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:1a:5e:d1:7c:6d:79:80:d3:9a:c7:94:17:e4:b4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Aug 8 10:57:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14643368ad772d4b77f2265463c098b3651be88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:5d:74:49:18:ac:52:f5:de:95:0a:11:3f:
97:d7:d5:06:1f:ef:ed:5b:c1:97:71:78:f8:97:24:
d4:c5:43:1c:80:18:62:4d:17:5d:f5:c4:d8:62:37:
be:3a:6b:2a:37:af:28:01:e6:17:76:c2:fc:26:4c:
c3:a0:b5:d4:00:09:bc:26:47:f1:1a:a7:79:d7:a1:
e6:b5:72:29:36:94:fd:a7:8a:08:c7:5f:f1:72:65:
14:29:78:71:eb:eb:b3:01:0e:fe:07:81:80:e6:cf:
73:16:51:4a:2f:01:bf:e6:0c:67:4a:d1:62:6f:01:
da:88:b9:53:06:6f:5f:e3:0c:98:eb:de:03:08:5a:
53:b5:1a:ec:0a:1a:19:eb:09:36:b6:44:05:a6:ab:
73:b1:5d:1c:18:80:4b:df:e8:35:00:8f:59:f4:7b:
40:c1:3b:ca:c7:3a:aa:a6:4e:cf:12:0c:fc:c9:11:
2b:8c:4d:f7:20:c4:74:6a:f4:20:0d:2a:44:e3:02:
4b:8c:a5:48:51:d4:b2:cf:f0:d9:0f:22:38:11:10:
31:f6:39:f9:8a:d2:2f:96:c3:7b:26:5c:16:fa:a6:
c3:ea:a4:67:d4:48:9d:59:32:2d:88:1d:2b:49:cc:
10:7b:61:ca:c6:11:95:bc:da:68:83:a5:13:a0:8e:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:33:68:AD:77:2D:4B:77:F2:26:54:63:C0:98:B3:65:1B:E8:8F
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/FGQzaK13LUt38iZUY8CYs2Ub6I8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.72.0/23
185.183.160.0/22
193.109.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:dc:bd:d5:ba:a4:15:60:b9:d1:18:88:a2:00:59:77:2a:d9:
2d:f0:f8:cc:16:07:e2:6d:1e:da:8b:6b:c5:10:07:d3:58:4e:
ea:85:95:94:0b:5d:f0:fa:56:7e:30:7e:9a:72:2d:02:b3:10:
4a:1a:32:83:27:82:d4:d8:2b:bb:6a:7a:89:70:0a:f1:0b:b6:
f5:9a:af:3a:60:27:d7:a6:65:db:0b:92:d7:1d:05:2a:09:f5:
bd:be:a8:d3:3c:42:d7:91:f7:27:5b:48:90:35:8e:f1:17:b2:
6b:e1:c1:70:55:95:49:6f:64:fe:3b:0e:06:75:c8:46:65:a5:
4a:56:e8:ca:ba:06:45:04:bb:e3:97:7b:0e:73:01:3c:cf:d0:
5b:0a:70:27:76:64:be:11:77:72:23:31:1a:c3:b7:1e:ea:36:
ab:b0:73:fb:6b:40:12:93:a4:c8:cb:e2:cb:51:c3:e4:06:ad:
7a:c2:32:af:20:0b:ab:bd:15:3d:05:de:f3:5d:49:6a:83:8c:
89:61:30:7b:47:02:34:b0:36:b3:21:9f:81:6a:67:99:d4:e5:
16:a9:19:7f:b6:4d:fa:ce:9d:6b:63:d8:af:2c:36:a7:bc:e0:
94:90:b8:ff:58:b3:2b:ca:6b:fc:6f:36:02:e1:90:0c:0c:dd:
a6:1d:04:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:23 2025 by rpki-client