Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/FMGTP3DqNN1wcfOKxcNTym7b-uc.roa
File: FMGTP3DqNN1wcfOKxcNTym7b-uc.roa (raw, json)
Hash identifier: HmDHoAgsDcfunFBOPbVYAVTkNpKV6ZIjIUJF65AkkV4=
Subject key identifier: 14:C1:93:3F:70:EA:34:DD:70:71:F3:8A:C5:C3:53:CA:6E:DB:FA:E7
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 018815CBFF3820BD1F62552F5012F14E12C9
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/FMGTP3DqNN1wcfOKxcNTym7b-uc.roa
Signing time: Sat 13 May 2023 15:47:50 +0000
ROA not before: Sat 13 May 2023 15:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49666
IP address blocks: 2.188.0.0/24 maxlen: 24
2.188.1.0/24 maxlen: 24
2.188.0.0/16 maxlen: 24
2.188.9.0/24 maxlen: 24
2.188.7.0/24 maxlen: 24
2.188.17.0/24 maxlen: 24
2.188.12.0/22 maxlen: 22
2.188.22.0/24 maxlen: 24
2.188.23.0/24 maxlen: 24
2.188.30.0/24 maxlen: 24
2.188.28.0/24 maxlen: 24
2.176.0.0/17 maxlen: 17
78.39.155.0/24 maxlen: 24
217.218.67.0/24 maxlen: 24
2.188.64.0/21 maxlen: 21
2.176.128.0/17 maxlen: 17
2.188.76.0/24 maxlen: 24
195.146.63.0/24 maxlen: 24
2.185.0.0/16 maxlen: 16
78.38.245.0/24 maxlen: 24
78.38.253.0/24 maxlen: 24
2.189.3.0/24 maxlen: 24
2.189.1.0/24 maxlen: 24
2.189.0.0/16 maxlen: 24
2.188.179.0/24 maxlen: 24
2.188.186.0/24 maxlen: 24
2.188.181.0/24 maxlen: 24
2.188.185.0/24 maxlen: 24
2.188.184.0/24 maxlen: 24
2.188.187.0/24 maxlen: 24
2.177.0.0/16 maxlen: 16
2.189.72.0/24 maxlen: 24
217.218.0.0/16 maxlen: 16
2.189.44.0/24 maxlen: 24
2.189.63.0/24 maxlen: 24
2001:4188:2::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:15:cb:ff:38:20:bd:1f:62:55:2f:50:12:f1:4e:12:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: May 13 15:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14c1933f70ea34dd7071f38ac5c353ca6edbfae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:11:f8:d4:7f:a1:0f:d7:6b:7e:9d:ff:07:9e:
72:cc:2a:72:42:ab:e3:91:7f:cc:16:f9:0e:27:f9:
bb:2e:31:1f:61:80:81:5b:ed:a1:97:82:94:49:ee:
a8:53:58:bc:99:ec:41:06:8f:4e:62:73:59:bc:c7:
f4:6d:4b:03:9d:c7:eb:14:83:ad:fa:96:93:c8:53:
aa:a1:8f:4d:4f:d6:5d:f5:a1:e3:26:fb:cf:8e:c8:
c7:3f:be:2f:ce:45:e3:cb:06:64:43:77:e8:07:8c:
ee:fa:31:0c:09:54:e2:39:d1:16:a1:6b:fd:3e:0c:
97:16:56:8a:63:d6:17:21:aa:65:67:1a:d0:1c:e8:
d2:42:b2:52:10:1c:d8:a8:7a:45:c6:a5:13:d7:6b:
bc:44:1c:ea:52:c7:b8:66:79:1c:fb:00:a3:a7:e7:
1d:b8:25:8f:63:61:c5:c4:9b:ca:f8:c7:d6:36:58:
58:9a:07:a9:75:31:e7:01:63:66:8e:2b:62:2e:20:
aa:75:63:9d:3b:52:f6:eb:a4:26:38:44:96:d3:ad:
27:b6:3b:41:55:f2:bf:10:e6:69:5f:13:00:42:16:
50:1b:b9:0d:e9:69:87:8d:26:82:c2:27:ce:a6:04:
6c:d0:c1:9c:72:9f:7f:bf:1a:d0:ac:e0:7c:70:eb:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:93:3F:70:EA:34:DD:70:71:F3:8A:C5:C3:53:CA:6E:DB:FA:E7
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/FMGTP3DqNN1wcfOKxcNTym7b-uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.176.0.0/15
2.185.0.0/16
2.188.0.0/15
78.38.245.0/24
78.38.253.0/24
78.39.155.0/24
195.146.63.0/24
217.218.0.0/16
IPv6:
2001:4188:2::/48
Signature Algorithm: sha256WithRSAEncryption
46:b7:e1:36:43:e3:8a:c6:65:c8:fd:e5:96:a1:2b:b8:fc:bc:
d5:5e:24:a1:a4:cb:55:8f:0b:cd:2a:62:ae:39:7b:b0:d8:e7:
cb:9b:15:bb:13:68:85:0b:cf:12:c8:35:95:d8:c2:ce:64:21:
b3:c7:74:59:0a:5b:0e:bb:61:01:da:47:73:26:fe:48:ab:5c:
29:1b:f3:a7:e9:d5:c1:2b:ac:94:53:65:3a:d7:b1:ec:75:a7:
cb:66:2e:6e:82:0d:dd:97:34:9d:ac:c5:99:fa:da:63:78:9e:
fd:b3:da:69:d9:ce:ce:18:fe:18:3a:95:a0:64:ee:65:0a:fd:
00:13:64:cb:9f:31:68:4e:73:96:88:1a:e4:70:bd:ca:0a:fa:
84:e4:7c:f0:41:22:75:1c:33:e9:da:ba:df:85:90:72:c5:f0:
e8:41:25:97:13:3e:44:9e:17:20:8b:1d:45:a1:53:db:b9:17:
b8:f8:c0:87:cb:e7:21:a3:77:b5:a6:26:9f:2e:e9:99:4e:76:
f1:b8:a2:7b:4e:ac:aa:b0:f1:b3:53:20:aa:d6:64:31:d7:14:
c4:a4:25:5c:9f:49:02:7b:31:75:38:d2:6e:db:c4:f9:6b:37:
29:e0:01:c1:90:71:8e:e7:83:3f:81:a2:9d:92:f2:63:06:3b:
07:59:22:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:34 2025 by rpki-client