Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/FZHWFV_QaUW1Bb0wgIB75RRF5VQ.roa
File: FZHWFV_QaUW1Bb0wgIB75RRF5VQ.roa (raw, json)
Hash identifier: ELgU6N+uhHw4FYyLaAUV9jfWSG8BmDAUgkPEmRyNlks=
Subject key identifier: 15:91:D6:15:5F:D0:69:45:B5:05:BD:30:80:80:7B:E5:14:45:E5:54
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 0185734CBBCC9269FF1233B8F4F9B2347744
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/FZHWFV_QaUW1Bb0wgIB75RRF5VQ.roa
Signing time: Mon 02 Jan 2023 16:24:46 +0000
ROA not before: Mon 02 Jan 2023 16:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 45.157.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:bb:cc:92:69:ff:12:33:b8:f4:f9:b2:34:77:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jan 2 16:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1591d6155fd06945b505bd3080807be51445e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:74:34:2e:d2:7a:9b:23:c5:d5:65:3f:0e:
2f:ac:58:33:f0:14:3f:15:9e:a9:c3:8a:cf:d4:5f:
84:68:dc:cd:78:d5:a2:c2:a6:96:c2:99:9d:fc:28:
0d:b8:ca:04:88:0d:f3:91:ee:a5:49:0b:df:e3:71:
97:ce:33:e3:9d:82:c7:76:16:e3:41:aa:32:d1:ff:
d9:43:78:b5:8e:6b:56:a4:d3:56:ae:26:8e:97:3b:
e7:40:bd:10:7a:c9:05:c5:b6:a4:0b:a8:31:86:f1:
af:22:f2:bc:25:4f:65:2e:e0:43:cf:7c:6a:e1:43:
e8:e6:ad:2b:fa:54:7b:93:53:90:9f:76:9f:ef:a2:
5e:5c:9f:19:cd:e8:d4:d7:fd:05:fe:ac:da:ba:53:
f2:ea:6d:5d:6b:63:96:79:8c:3a:c4:72:1b:d9:11:
fa:9c:da:8d:31:1a:d5:ce:fc:b1:32:f0:69:8d:51:
ad:f7:dc:aa:8b:bf:50:ee:6c:0e:b4:7c:30:af:dd:
49:fc:06:0a:10:dd:04:9b:f9:92:1a:cc:32:50:73:
56:0a:71:6d:28:ca:d8:32:9a:d0:ac:80:3a:a6:f5:
c9:59:99:db:a2:46:4d:c7:00:e3:ca:47:9e:b5:db:
34:1f:9e:3b:46:9a:9c:d8:6d:2b:55:08:d4:ca:f9:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:D6:15:5F:D0:69:45:B5:05:BD:30:80:80:7B:E5:14:45:E5:54
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/FZHWFV_QaUW1Bb0wgIB75RRF5VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.204.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:ab:c1:e0:5f:27:62:f5:8d:40:c4:e3:87:04:d0:8f:97:69:
98:ed:52:2d:f9:25:c3:7d:86:31:98:78:2d:53:32:8a:2c:ff:
5b:8a:47:48:a2:f4:8e:22:69:0c:12:71:70:30:e5:c9:09:a3:
a0:d5:bf:e7:bf:88:ed:fe:36:ee:3f:9b:dd:a7:f4:49:ba:4d:
b7:50:f6:75:b6:03:dc:dd:3f:20:76:4c:12:66:50:61:4c:68:
e0:4f:b6:1c:28:16:92:e6:20:04:d9:f4:e1:c2:ab:4c:43:0b:
f7:33:3f:c1:a7:1c:70:a8:a7:db:ca:48:c7:95:6f:2f:6f:1a:
44:d8:12:1b:dd:6b:11:ae:19:16:9b:76:18:2b:af:2d:04:98:
a4:ff:1b:1b:0c:af:65:ba:41:fb:1a:03:b1:43:ff:6c:5e:6a:
d5:99:0d:79:7d:eb:c4:dc:16:b9:84:2f:8b:0f:96:8a:fc:d1:
68:c7:3e:24:61:07:ae:0a:b0:23:b3:77:c2:78:53:6b:08:e2:
7d:0b:9c:45:0f:0a:fc:aa:b9:32:10:02:5c:db:62:03:a5:a5:
2d:27:3d:2e:dd:70:ff:d0:a7:46:21:19:79:22:58:c9:36:74:
de:12:4d:70:08:99:44:e6:fa:52:f9:01:ac:58:e6:f9:ee:d7:
73:4f:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:21 2025 by rpki-client