Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/FZRGpNVfkiNziL-ndXGMj8A8duE.roa
File: FZRGpNVfkiNziL-ndXGMj8A8duE.roa (raw, json)
Hash identifier: dYoV5nWN1xuNig3CbpICPussEKCx8GYcBbteGkzLp50=
Subject key identifier: 15:94:46:A4:D5:5F:92:23:73:88:BF:A7:75:71:8C:8F:C0:3C:76:E1
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 35B5A78B
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/FZRGpNVfkiNziL-ndXGMj8A8duE.roa
Signing time: Sat 01 Jan 2022 16:06:28 +0000
ROA not before: Sat 01 Jan 2022 16:06:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56912
IP address blocks: 185.75.150.0/24 maxlen: 24
185.75.149.0/24 maxlen: 24
188.74.32.0/22 maxlen: 22
2a03:4b20::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 901097355 (0x35b5a78b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 16:06:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=159446a4d55f92237388bfa775718c8fc03c76e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:4d:e5:13:76:3e:b0:22:d3:68:6b:10:d6:
c0:05:f6:35:1f:f6:68:3c:5f:e9:aa:5c:4e:cf:31:
b6:1b:90:cc:f8:bc:63:c5:d8:37:84:c9:93:65:d3:
7e:ac:76:73:f3:1d:9c:46:75:7b:dc:a1:ef:13:02:
cf:9c:b1:4d:60:25:86:0b:2c:58:b0:30:96:d0:7e:
3f:b9:76:17:d4:93:13:ef:20:82:dc:2a:f2:d5:fe:
48:78:f2:b8:23:00:7e:32:69:5d:5c:d0:11:d2:3b:
e3:02:08:cb:c8:5b:1d:b4:04:2f:ed:29:9d:b0:f6:
e3:8f:0c:93:3b:52:fa:57:4e:23:04:8c:11:07:26:
80:9e:41:11:df:fa:88:93:f2:e6:f7:04:1c:9b:fd:
93:11:b7:f7:45:fd:93:ee:06:12:4f:5c:d5:f0:e4:
38:87:74:e2:48:b3:94:9f:a3:b9:09:5c:03:6d:94:
65:91:6c:20:40:7e:04:47:9e:9d:bb:9e:8c:c9:e6:
a0:66:30:39:42:fd:23:f9:bc:dd:8c:39:db:6e:5a:
6f:10:aa:de:95:ba:0a:c2:90:25:91:2a:2d:8e:cf:
4a:cd:f9:3b:ba:26:15:d6:7d:25:db:af:52:b4:95:
d4:7d:72:8a:96:d4:50:72:d9:e3:fb:20:f2:f7:c5:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:94:46:A4:D5:5F:92:23:73:88:BF:A7:75:71:8C:8F:C0:3C:76:E1
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/FZRGpNVfkiNziL-ndXGMj8A8duE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.149.0-185.75.150.255
188.74.32.0/22
IPv6:
2a03:4b20::/32
Signature Algorithm: sha256WithRSAEncryption
00:b4:86:33:e6:01:f1:df:f0:e7:5d:52:3d:1b:ef:14:3e:fe:
9e:2e:dd:2f:df:f2:e1:0a:f9:46:5b:77:05:9b:5f:46:7e:16:
5d:e7:25:80:b7:a9:bb:53:ea:37:f7:c5:0d:cb:04:e1:2f:7e:
eb:df:5e:aa:b4:7a:ff:23:28:84:c3:64:12:c3:a9:98:48:08:
7b:42:35:5b:fd:8e:1b:e4:7f:40:1c:26:46:b7:d2:d2:d9:ec:
48:be:e3:6a:2d:08:84:a2:49:b5:ca:c1:37:ff:0b:27:9b:22:
26:63:bd:1a:35:cf:eb:db:ff:3c:5f:fd:2a:53:47:02:98:40:
c5:64:60:7d:04:78:d6:fc:3b:56:60:c1:e2:c7:cf:3a:f4:47:
8a:ab:03:72:f1:ce:21:42:3f:ce:e3:74:7c:7f:85:0c:73:10:
4f:ac:c9:c3:d1:36:49:5d:af:4a:2f:5f:00:02:4e:1b:67:d8:
e6:5a:29:87:6f:86:a5:b6:ba:17:30:72:b7:f2:09:0a:c4:b9:
58:07:7f:83:1b:28:e2:e3:ff:68:44:78:28:f1:95:16:b4:f7:
1c:3b:23:e8:97:93:d6:ba:d1:d1:4b:9b:b5:c0:91:7e:af:19:
7f:90:8f:33:3d:23:ee:da:12:9d:42:2a:c7:90:53:cb:21:c0:
47:97:3b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:55 2025 by rpki-client