Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/FETNeh64EHzNsJQcqInPFx5XeVM.roa
File: FETNeh64EHzNsJQcqInPFx5XeVM.roa (raw, json)
Hash identifier: BSHDePn2+0JReewvQ0dTqCztZxtOjlN+K9GoRgxRrg4=
Subject key identifier: 14:44:CD:7A:1E:B8:10:7C:CD:B0:94:1C:A8:89:CF:17:1E:57:79:53
Certificate issuer: /CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Certificate serial: 46CD38
Authority key identifier: 61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/FETNeh64EHzNsJQcqInPFx5XeVM.roa
Signing time: Thu 24 Mar 2022 03:44:32 +0000
ROA not before: Thu 24 Mar 2022 03:44:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 159.60.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4640056 (0x46cd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b3e1cab8cbf5b3c6e0fbbe1491f48da60cae6c
Validity
Not Before: Mar 24 03:44:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1444cd7a1eb8107ccdb0941ca889cf171e577953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:09:84:4c:c6:95:43:49:58:a1:b9:54:20:
32:8b:fc:ff:57:bc:4b:27:7f:3a:39:ed:30:4c:d5:
9b:40:16:90:d4:90:05:f1:5c:ee:65:cf:c6:aa:95:
8c:61:c1:8a:c1:23:88:f7:1c:6b:c1:b3:ae:89:19:
61:1f:d9:ae:84:5b:c4:de:80:0c:66:b0:12:e8:f8:
47:bb:6c:6b:ca:49:ce:ea:a6:6b:e9:d4:f5:8a:45:
f1:e8:fb:d4:54:9d:31:ee:c2:e9:2d:bb:ac:c3:7a:
f6:0b:85:c7:ef:60:80:0e:78:b2:ef:f8:1c:1e:ed:
8b:86:90:65:a9:5f:f7:c6:6c:07:8c:dd:e8:c7:35:
c8:b8:ce:13:4a:07:a8:16:9b:ed:be:07:d5:02:c3:
22:d1:83:0d:53:a8:e8:c6:06:71:98:29:1e:b6:88:
92:7d:a3:89:fe:73:eb:0e:cc:c1:56:c7:d9:0c:fa:
cc:99:52:ff:43:bc:3f:79:74:e7:60:9f:b4:7c:f0:
f3:b8:56:74:fe:f2:84:0b:e5:10:e3:07:91:4f:db:
e1:00:09:e4:e4:e0:72:8d:96:3c:2c:a4:a6:62:5c:
87:ca:5d:68:72:47:44:8a:6e:e2:90:6a:ba:7a:c6:
ea:e9:f6:50:10:0b:21:24:7b:a2:79:7f:5f:4c:c5:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:CD:7A:1E:B8:10:7C:CD:B0:94:1C:A8:89:CF:17:1E:57:79:53
X509v3 Authority Key Identifier:
keyid:61:B3:E1:CA:B8:CB:F5:B3:C6:E0:FB:BE:14:91:F4:8D:A6:0C:AE:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/FETNeh64EHzNsJQcqInPFx5XeVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9def86-b1ac-40e6-83bd-947cc54ebe02/1/YbPhyrjL9bPG4Pu-FJH0jaYMrmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.60.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:39:4e:4c:1b:e7:81:0e:11:f6:db:35:17:24:41:6c:a1:b4:
5e:40:88:10:76:d9:c3:f6:96:ca:12:4c:40:42:e6:83:fe:0d:
9d:35:9a:70:35:2a:a0:85:7a:cf:55:f9:63:c2:e5:50:2f:2b:
71:df:71:7e:42:8e:50:bb:5d:29:fa:f4:83:b1:89:ff:be:a3:
ff:cb:9a:24:36:1f:94:cc:99:0c:3a:ff:b5:16:95:c3:ce:64:
43:56:17:ea:f1:87:2e:83:dc:5d:e0:6f:4c:6a:8f:27:b4:fa:
95:05:a1:73:23:b8:42:fc:e3:57:cd:bb:39:bb:8f:39:53:e7:
d9:69:0b:f6:7e:68:b8:d6:ee:66:b0:29:c9:53:87:f8:49:9b:
78:68:90:11:b4:9c:bc:59:27:3c:5c:3c:b4:59:a6:ab:cb:6c:
b4:78:7e:fd:58:f4:79:03:30:71:03:7d:b5:ca:7a:1f:2a:2d:
b3:65:b9:e2:53:f6:80:4d:39:65:15:1f:10:49:ed:42:89:22:
4e:c6:b4:cd:81:cf:35:52:6e:17:39:33:c7:60:e8:76:1d:e5:
57:2e:64:c3:7c:75:fd:d5:88:48:28:fd:d0:bf:fc:ea:c8:e6:
1a:b1:b4:f6:4d:20:a9:95:60:80:8c:87:14:0d:a7:c2:0e:05:
2c:2c:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:58:49 2025 by rpki-client