Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/F1b60pyqLPiZEP8_Zn-rURT17f8.roa
File: F1b60pyqLPiZEP8_Zn-rURT17f8.roa (raw, json)
Hash identifier: jUeARUlOxcbDLIrM/X8n049m0Vj8RrmJVyPkLF2Y/H8=
Subject key identifier: 17:56:FA:D2:9C:AA:2C:F8:99:10:FF:3F:66:7F:AB:51:14:F5:ED:FF
Certificate issuer: /CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Certificate serial: 018570CC1303B3BD60490AA94FD4A1B2DBD2
Authority key identifier: FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/F1b60pyqLPiZEP8_Zn-rURT17f8.roa
Signing time: Mon 02 Jan 2023 04:45:00 +0000
ROA not before: Mon 02 Jan 2023 04:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57407
IP address blocks: 195.88.108.0/23 maxlen: 23
185.217.80.0/22 maxlen: 22
2001:67c:24f8::/48 maxlen: 48
2a0b:c6c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cc:13:03:b3:bd:60:49:0a:a9:4f:d4:a1:b2:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5ca4e2a0a180eb2f29cc88740aa707b8821d7c
Validity
Not Before: Jan 2 04:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1756fad29caa2cf89910ff3f667fab5114f5edff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:a3:4c:11:69:54:1e:46:31:36:a2:87:15:
39:c6:6f:0a:39:32:e4:8f:9e:fa:6c:d6:a3:63:01:
14:fc:d8:35:1f:ae:80:cf:81:a7:9b:bd:cc:e5:2c:
3a:9f:c4:1e:9f:26:c2:fc:76:bc:61:04:04:c0:4b:
2a:82:ed:98:fe:f9:9e:7b:65:79:92:9f:9b:f7:a1:
89:b6:ca:51:0a:ff:49:c6:48:e9:5d:54:83:7f:6b:
fa:66:1f:44:d3:7e:7c:90:15:f1:56:62:c5:6d:05:
12:d4:bb:64:e9:f2:c1:4e:60:e1:4a:ea:c5:d2:d9:
84:af:3b:58:42:5b:84:3d:20:0e:a9:36:46:f7:b2:
8b:28:3d:1f:76:b7:03:f5:82:86:7a:a8:c6:be:5c:
a1:be:0e:24:80:b7:19:2c:d3:d3:cb:11:e5:42:9b:
ad:bb:b7:dd:f6:26:45:55:59:ce:3c:f7:a5:78:63:
12:47:39:bb:c0:37:c0:ac:d0:42:4b:73:b7:7e:ec:
85:51:90:94:47:bb:54:f7:a3:07:88:24:26:bf:55:
45:1d:bd:15:d0:bd:49:1e:d5:43:3e:e1:2f:02:0b:
dd:7a:5f:9f:5a:00:fa:9d:60:30:9b:e0:61:48:4f:
9d:a7:06:0b:dc:2f:23:88:56:d1:0c:41:10:92:15:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:FA:D2:9C:AA:2C:F8:99:10:FF:3F:66:7F:AB:51:14:F5:ED:FF
X509v3 Authority Key Identifier:
keyid:FE:5C:A4:E2:A0:A1:80:EB:2F:29:CC:88:74:0A:A7:07:B8:82:1D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lyk4qChgOsvKcyIdAqnB7iCHXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/F1b60pyqLPiZEP8_Zn-rURT17f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9c7aa4-a4c9-447a-8bc1-68c105d2f0db/1/_lyk4qChgOsvKcyIdAqnB7iCHXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.80.0/22
195.88.108.0/23
IPv6:
2001:67c:24f8::/48
2a0b:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:c0:ca:c5:29:46:fb:f4:37:31:d3:7f:8a:12:4b:33:4c:af:
00:44:ca:19:5a:e2:f3:22:9f:3e:e1:7c:c9:43:26:2f:24:9f:
25:54:39:57:8e:ee:e0:06:d1:31:78:0e:f7:51:b3:ee:4b:42:
d5:7b:af:2f:1c:41:d2:f7:7f:79:e6:89:7a:8b:32:7c:ff:db:
4c:b4:2d:f8:dd:a3:3b:79:5a:ce:2c:59:08:06:ee:2f:06:3e:
44:97:fd:61:e4:c6:f1:dc:11:1b:83:0c:b0:e5:01:aa:46:fe:
55:87:7c:11:d9:0e:45:d2:a0:6e:ea:2a:c0:01:62:3a:ed:82:
41:c6:9d:7c:a4:c4:c6:e1:0a:37:b7:3a:3e:63:37:c6:d7:c1:
2f:7e:da:a7:ac:5e:c9:30:1c:a1:a7:9b:fc:17:f2:e6:d1:b2:
d5:a7:d6:35:f7:53:0e:ab:fe:d2:93:4e:1e:2e:9e:5f:04:44:
10:55:40:5f:5c:09:f4:9e:69:8c:68:ce:e4:67:fc:39:88:f2:
81:64:96:5b:1e:0c:8f:e1:44:45:64:68:1c:dd:9c:9b:79:aa:
0d:82:1c:d3:8a:ab:12:b0:64:e2:43:e2:13:eb:5f:8e:96:c7:
3c:fc:5f:9d:ce:e1:2f:7f:8d:c3:17:af:d8:96:1f:68:50:27:
de:a3:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:28:49 2025 by rpki-client