Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/FSbULD3tfcbOYff41EXzwWFBcX8.roa
File: FSbULD3tfcbOYff41EXzwWFBcX8.roa (raw, json)
Hash identifier: 5QmR8DN/8jH2Z3m6sfE0bzilTw5rj7oblMoGyzm5/Hw=
Subject key identifier: 15:26:D4:2C:3D:ED:7D:C6:CE:61:F7:F8:D4:45:F3:C1:61:41:71:7F
Certificate issuer: /CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Certificate serial: 01857227E743B270621AD34512E4787EA5C6
Authority key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/FSbULD3tfcbOYff41EXzwWFBcX8.roa
Signing time: Mon 02 Jan 2023 11:04:55 +0000
ROA not before: Mon 02 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56911
IP address blocks: 176.119.217.0/24 maxlen: 24
45.117.232.0/22 maxlen: 22
2a07:9340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e7:43:b2:70:62:1a:d3:45:12:e4:78:7e:a5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Validity
Not Before: Jan 2 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1526d42c3ded7dc6ce61f7f8d445f3c16141717f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:53:84:c8:9d:6e:62:13:43:22:c2:9b:2b:
8b:61:ac:df:be:ba:6d:1d:d9:5d:30:a4:2a:2c:59:
04:48:80:47:f5:ef:80:de:19:ef:ae:7b:39:e4:94:
5a:67:45:9d:80:e8:86:26:d8:bd:53:55:af:e8:30:
72:2c:01:69:20:d5:ca:02:65:c8:b6:58:a0:41:32:
24:34:1f:9d:36:a1:b0:e4:bd:72:8e:4b:a5:1c:2b:
0f:1e:d6:6f:92:ac:ed:2a:6b:a8:14:73:46:c4:8f:
ad:98:c5:6c:b6:33:fe:05:8e:d0:f7:d9:42:c6:b1:
bb:7c:49:dd:e5:fe:b5:d4:c9:aa:8d:fe:8b:c4:40:
f7:5d:8c:8d:22:2c:e1:a5:b1:42:a2:b0:b7:09:e0:
a1:34:0e:d7:e5:77:7d:dd:a1:3d:ce:25:5f:1d:de:
09:ce:9e:3b:54:bc:fd:45:d4:f5:42:5b:b8:20:51:
f9:66:7f:c4:3d:e7:2c:58:d2:ad:6b:46:82:03:da:
7c:ae:f7:48:0e:3e:65:b6:72:d8:1f:45:c6:b0:db:
f0:02:7a:1d:53:dc:52:66:da:ea:4d:7f:de:4b:8b:
fc:5b:fb:86:f6:d8:5b:af:a4:53:b3:bc:e2:da:02:
cd:e3:0b:ef:71:d4:71:13:0d:fc:c3:44:74:9e:60:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:D4:2C:3D:ED:7D:C6:CE:61:F7:F8:D4:45:F3:C1:61:41:71:7F
X509v3 Authority Key Identifier:
keyid:72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/FSbULD3tfcbOYff41EXzwWFBcX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.232.0/22
176.119.217.0/24
IPv6:
2a07:9340::/32
Signature Algorithm: sha256WithRSAEncryption
18:1a:93:21:0d:3c:c6:80:50:de:26:06:2f:99:85:76:cd:4e:
2a:67:a9:e0:47:ed:7d:74:d1:ac:4d:14:b8:da:6d:02:6e:82:
8c:18:24:db:bc:e3:ff:7c:bb:66:3f:b4:cf:b8:fa:b9:c0:81:
80:09:2c:66:02:18:dd:d2:b8:9b:7d:6b:aa:7e:ba:9f:ca:7b:
7c:f6:c0:28:5a:da:e2:aa:ba:67:99:6e:91:bf:d0:cd:26:8f:
8e:b3:72:5d:cf:2a:58:63:28:75:6d:f1:6d:20:4d:75:16:10:
a5:df:ed:39:ba:90:41:ed:4b:fd:fc:ff:3d:f9:38:27:72:8f:
76:c4:fa:27:ac:51:9c:99:18:bd:c2:d0:8d:dd:eb:be:95:21:
5b:6c:d1:94:3d:31:0c:50:cc:81:b3:de:07:ab:4c:75:f6:aa:
af:f5:00:42:e6:12:42:d7:5b:31:73:22:e3:8c:e2:58:5b:d8:
9d:10:42:6b:69:3a:01:66:f6:f4:7f:2c:ff:da:8a:81:91:34:
82:9e:82:83:37:25:e4:2b:04:1c:b2:a8:07:01:97:81:76:0c:
f3:1d:2f:7f:d0:4d:f0:22:4a:c0:7b:9f:95:00:d3:9e:83:fc:
1c:e3:35:e7:78:89:10:93:49:45:52:3d:71:e5:6d:f0:1c:16:
33:5c:5a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:49:10 2025 by rpki-client