Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/FBjUpA0qe_5bZF74iQ13MTEJqpY.roa
File: FBjUpA0qe_5bZF74iQ13MTEJqpY.roa (raw, json)
Hash identifier: yQVhkGEeNAvFrG2L+s+Qjsffh5/0xRY16LHOSKwtutM=
Subject key identifier: 14:18:D4:A4:0D:2A:7B:FE:5B:64:5E:F8:89:0D:77:31:31:09:AA:96
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 05DACCEB
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/FBjUpA0qe_5bZF74iQ13MTEJqpY.roa
Signing time: Sat 01 Jan 2022 15:04:05 +0000
ROA not before: Sat 01 Jan 2022 15:04:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21100
IP address blocks: 46.21.250.0/24 maxlen: 24
212.8.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98225387 (0x5dacceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Jan 1 15:04:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1418d4a40d2a7bfe5b645ef8890d77313109aa96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:2e:b3:5d:48:1f:de:72:68:ea:6f:a6:30:
2e:46:44:5c:cb:c0:c8:6c:f9:67:46:35:bb:6a:52:
7d:48:37:b4:9f:97:93:d3:a5:ca:98:44:5a:53:32:
44:ac:69:68:25:60:75:6d:6b:ba:c0:88:28:56:d3:
0b:5d:14:7e:90:11:6a:05:cd:2a:87:48:61:6e:08:
1d:59:c8:6b:08:b9:9e:05:a3:bd:3a:1a:77:ba:7e:
8c:5d:39:c7:28:eb:0e:9d:98:eb:d0:00:32:61:6e:
bd:d2:90:52:b7:51:b3:78:c9:a9:36:87:df:96:0b:
cd:a7:0b:6f:83:d9:e6:d2:19:d4:ec:8e:53:e7:f5:
0c:83:ff:88:6a:ae:48:f4:75:be:f6:c3:75:a6:07:
3f:4e:7d:e9:89:90:3b:74:f9:72:88:0b:50:ff:d1:
a7:64:e7:6b:5a:27:c0:b8:47:e2:d7:fc:94:9a:1a:
22:9b:5d:4c:7c:dc:1b:19:92:b0:b4:ac:ee:88:be:
73:f7:b3:ad:3b:a1:1c:d9:0d:c6:5c:71:8e:c7:5e:
40:a5:db:c7:84:0d:3c:46:a7:69:0c:8d:a8:e7:9e:
9c:87:0c:87:97:38:95:ef:e3:b6:80:0e:05:54:3f:
44:25:01:b7:a7:88:6f:f1:6e:bb:f5:84:be:c8:3a:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:18:D4:A4:0D:2A:7B:FE:5B:64:5E:F8:89:0D:77:31:31:09:AA:96
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/FBjUpA0qe_5bZF74iQ13MTEJqpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.21.250.0/24
212.8.245.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:e6:09:4b:02:f2:a8:19:06:2a:0c:f3:90:35:2d:bc:11:85:
5a:df:d5:aa:58:c9:4f:e0:11:c5:b9:a9:99:24:cb:9a:ee:99:
e7:08:2e:ac:9f:80:80:0c:53:7c:5f:d2:69:6c:e9:31:82:8d:
5d:49:16:70:fb:13:97:20:6a:85:b0:c3:87:04:91:3d:14:07:
99:43:e1:8d:b7:a3:70:7e:b1:e1:12:23:2f:0d:65:93:57:4a:
22:56:71:0f:24:ca:3f:79:48:7f:2e:75:b8:86:a8:53:be:95:
b2:af:66:66:0b:4e:58:03:ad:75:72:5d:c8:a5:51:57:76:4f:
c6:0f:b2:9b:2c:69:00:ee:38:c2:f9:fd:b4:6d:97:a0:6c:81:
49:dc:29:e3:8e:e7:3e:3f:b8:c2:a9:8d:9c:d4:ac:93:4f:f5:
ca:26:46:3f:54:86:88:65:0c:c8:b4:c4:57:52:28:82:2e:24:
21:b5:50:11:67:0c:b1:02:f9:a7:f1:ad:c0:05:20:64:2c:38:
b3:a9:31:cc:0c:69:76:df:84:f7:72:46:76:d2:c3:11:e6:8c:
3d:a7:0c:2c:48:ec:46:51:32:f6:dd:04:de:f6:f3:0e:c3:dc:
b5:75:77:30:f4:50:14:ab:27:bf:65:d9:66:dd:1a:30:0a:61:
2d:70:49:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:01:01 2025 by rpki-client