Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FZYFX3z86uLsp793qNkQqi4ypU8.roa
File: FZYFX3z86uLsp793qNkQqi4ypU8.roa (raw, json)
Hash identifier: foxP7maOH86Vi2VcRkoC4qYlNO7pxZt1nWAdx9CWReE=
Subject key identifier: 15:96:05:5F:7C:FC:EA:E2:EC:A7:BF:77:A8:D9:10:AA:2E:32:A5:4F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095992B26AD5C3C804315C9369A7604
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FZYFX3z86uLsp793qNkQqi4ypU8.roa
Signing time: Mon 02 Jan 2023 03:45:30 +0000
ROA not before: Mon 02 Jan 2023 03:45:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204584
IP address blocks: 92.38.41.0/24 maxlen: 24
93.171.214.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:99:2b:26:ad:5c:3c:80:43:15:c9:36:9a:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1596055f7cfceae2eca7bf77a8d910aa2e32a54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:0c:88:a8:7e:e1:5e:be:65:70:0d:83:a1:
2e:c6:f8:d5:e9:ec:c2:90:68:97:f5:9d:df:85:e5:
1b:f3:98:66:92:e7:e3:ef:b6:83:69:05:fb:66:00:
99:de:6a:54:2b:9c:9e:b9:95:cd:d4:b2:b7:22:a9:
9a:83:6e:da:c7:a2:d2:59:98:f4:51:24:a4:ba:f5:
17:39:b9:7b:a2:24:8c:25:f4:35:cc:46:a7:bd:0f:
0e:77:6f:5e:c5:96:3c:65:9d:40:47:86:75:66:42:
f8:f2:fd:da:bc:c1:5c:f9:4e:36:c6:78:23:8a:35:
50:9e:98:68:1a:11:a1:1a:33:ac:c8:8c:bd:6d:61:
15:8c:6b:7e:2c:76:7c:65:a5:23:fe:2c:c3:ae:dd:
06:8d:da:46:e0:9b:3e:16:d6:b6:39:88:d0:e2:a4:
68:a4:e7:b2:46:5d:61:bb:6f:bf:8b:c9:3a:68:11:
86:26:42:ec:32:9a:fb:e3:1e:ac:cd:15:87:f2:54:
08:81:1f:47:c3:6f:9c:4d:b5:ba:8f:1f:4c:f2:5f:
85:89:be:b0:56:b7:cb:15:50:25:f3:82:ea:01:13:
34:2c:e1:20:24:f0:d6:af:fd:ce:dc:c3:ce:63:ea:
7f:08:66:b7:74:82:6f:73:48:74:d1:bc:c8:23:6f:
b7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:05:5F:7C:FC:EA:E2:EC:A7:BF:77:A8:D9:10:AA:2E:32:A5:4F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FZYFX3z86uLsp793qNkQqi4ypU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.41.0/24
93.171.214.0/24
Signature Algorithm: sha256WithRSAEncryption
24:44:c0:e8:18:31:31:d2:e7:c1:7c:eb:5c:bb:b4:c3:b1:a0:
00:f3:87:28:f3:6b:0a:fb:83:1c:bc:6b:55:2d:b3:62:2b:97:
59:ca:67:c5:11:b0:9c:8e:0e:7d:35:ce:96:96:4b:8d:9c:b9:
17:37:7e:e6:69:ad:eb:2e:2d:f8:87:d7:b7:ae:29:d5:c4:7f:
db:9c:49:ab:4a:fa:8c:cd:90:3a:e9:61:48:65:9d:c5:26:97:
0f:4b:a3:d9:12:7b:e2:8a:aa:93:8a:e2:30:67:c0:c8:1a:d7:
b7:7d:b5:0a:29:a7:de:80:0b:33:d4:fa:d6:6b:47:b3:de:14:
d4:a6:99:35:a8:1a:c6:dc:2f:c3:91:13:fa:0d:9a:76:ec:5b:
20:0e:15:eb:43:7f:55:fe:5e:38:32:8a:cd:40:bd:fd:30:41:
fd:1f:36:31:c7:16:7c:e1:bf:29:3a:19:a1:7a:46:e4:43:fc:
b0:ef:a3:80:58:86:88:0b:51:25:4d:95:22:a2:db:8f:25:f3:
15:f7:7c:07:ac:13:fe:21:08:6a:62:06:ee:c7:44:f9:87:6d:
80:07:a5:71:50:97:98:9d:63:b0:dc:fc:73:23:9d:00:3d:3b:
cc:26:07:49:54:38:7c:58:5e:4b:ce:19:73:d5:5e:77:a3:e6:
98:ee:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:55 2025 by rpki-client