Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/FC4xHOFzR0WaUQS_ONNJM1WoXbA.roa
File: FC4xHOFzR0WaUQS_ONNJM1WoXbA.roa (raw, json)
Hash identifier: FZlUeqSUaTyTfQ4vNChKLhTfX2wzHUTK4/fo8Np+n7Y=
Subject key identifier: 14:2E:31:1C:E1:73:47:45:9A:51:04:BF:38:D3:49:33:55:A8:5D:B0
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 0186218B672A17711EF205D7FD60E52BF27B
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/FC4xHOFzR0WaUQS_ONNJM1WoXbA.roa
Signing time: Sun 05 Feb 2023 12:27:09 +0000
ROA not before: Sun 05 Feb 2023 12:27:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207627
IP address blocks: 185.225.224.0/24 maxlen: 24
2a06:4740::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:8b:67:2a:17:71:1e:f2:05:d7:fd:60:e5:2b:f2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Feb 5 12:27:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=142e311ce17347459a5104bf38d3493355a85db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:40:73:21:f7:1c:a5:16:23:6b:f7:86:29:
99:51:29:6a:c6:00:c5:6a:17:c4:3c:d2:15:2f:d6:
b8:ab:05:10:f7:11:d4:5d:70:cf:0a:b9:24:62:35:
ae:3b:f7:44:e9:2e:bd:04:e6:7e:1c:46:3b:b4:2f:
b0:8c:bb:8b:fb:a1:7e:e7:60:7d:8d:0c:14:00:7b:
11:8c:d7:01:51:30:71:d9:1f:08:b4:69:fa:a6:2a:
6e:29:2c:15:82:e0:87:f9:4c:7b:1f:57:bd:09:e3:
d5:40:60:34:ce:5d:17:93:b0:e6:3c:4f:6c:03:85:
0c:b7:70:7d:18:7b:b6:58:c0:79:72:a1:af:76:26:
17:f0:0f:30:09:1f:0c:3d:98:35:07:33:3e:20:ee:
05:cb:b8:07:d5:39:70:d6:94:ac:da:b8:2e:68:c0:
c0:7f:29:7b:16:79:f7:4c:d9:6c:e5:b4:be:7e:95:
b5:b0:59:ef:b6:bf:f2:d2:35:2c:7e:72:04:97:46:
71:72:01:75:03:98:25:7c:3c:7f:69:54:f2:80:ca:
df:7d:f8:b2:9e:33:ef:9e:1b:fb:f9:37:1f:42:54:
48:b2:8e:f8:dc:ca:ab:5c:b0:61:97:6e:55:a2:a9:
3f:fa:eb:db:54:bc:99:7e:bd:55:8a:6c:a6:46:61:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2E:31:1C:E1:73:47:45:9A:51:04:BF:38:D3:49:33:55:A8:5D:B0
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/FC4xHOFzR0WaUQS_ONNJM1WoXbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.224.0/24
IPv6:
2a06:4740::/29
Signature Algorithm: sha256WithRSAEncryption
4a:45:24:99:95:bd:87:16:e5:fa:a2:96:4a:a7:ca:a3:2c:65:
f8:d2:05:17:74:5b:15:66:be:9f:89:16:cd:74:3f:d6:67:44:
ee:8b:ea:cd:c2:ac:6b:0e:bc:c2:af:8c:9d:21:f9:81:a1:9b:
c4:b9:f4:c7:b4:ce:2d:56:7b:45:c3:be:6a:0a:2f:92:31:df:
5d:6d:4d:88:f6:b0:70:3b:a2:5d:3f:ac:a1:9c:c1:de:84:68:
37:4c:1d:f4:3b:93:01:02:91:07:c9:2b:7c:97:5f:4b:11:c8:
f6:64:10:d8:5b:d0:4f:1a:8b:0b:88:ce:2e:d8:2b:0e:8b:e0:
bd:6c:8c:23:ce:fa:0d:52:92:6f:73:20:13:74:85:c6:2f:57:
8f:04:90:2a:ef:30:d4:3c:ef:ed:49:45:d7:85:2a:36:dd:3d:
e2:bf:fb:5c:07:75:eb:48:b0:fa:38:87:aa:d7:0b:52:f7:ab:
b3:67:39:da:cb:64:0b:dc:de:e3:17:9a:36:7e:8e:d0:03:6f:
d9:13:3b:ff:c2:f7:a0:e0:36:2a:ed:d2:ba:b9:03:49:cc:25:
a9:d4:b2:20:31:b5:d7:d6:78:4f:9b:9d:0d:a2:15:a2:ee:e7:
65:a5:94:a9:ff:b7:c7:27:a5:0c:d0:31:44:0c:6f:5c:72:fb:
d4:d9:08:1f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYYhi2cqF3Ee8gXX/WDlK/J7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNWEzNmEzOGU5ZTU2MjQ3NmFlNzBiOTE1MDI4ZTMwMTg3
MTI5MTkwHhcNMjMwMjA1MTIyNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDJlMzExY2UxNzM0NzQ1OWE1MTA0YmYzOGQzNDkzMzU1YTg1ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXlAcyH3HKUWI2v3himZUSlqxgDF
ahfEPNIVL9a4qwUQ9xHUXXDPCrkkYjWuO/dE6S69BOZ+HEY7tC+wjLuL+6F+52B9
jQwUAHsRjNcBUTBx2R8ItGn6pipuKSwVguCH+Ux7H1e9CePVQGA0zl0Xk7DmPE9s
A4UMt3B9GHu2WMB5cqGvdiYX8A8wCR8MPZg1BzM+IO4Fy7gH1Tlw1pSs2rguaMDA
fyl7Fnn3TNls5bS+fpW1sFnvtr/y0jUsfnIEl0ZxcgF1A5glfDx/aVTygMrfffiy
njPvnhv7+TcfQlRIso743MqrXLBhl25Voqk/+uvbVLyZfr1VimymRmHxfQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBQuMRzhc0dFmlEEvzjTSTNVqF2wMB8GA1UdIwQY
MBaAFI5aNqOOnlYkdq5wuRUCjjAYcSkZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YjI1NjctZGJhZi00NmQzLThjMDEt
ZGYwZTYxOWEwYjgyLzEvRkM0eEhPRnpSMFdhVVFTX09OTkpNMVdvWGJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83YjI1NjctZGJhZi00NmQzLThjMDEtZGYwZTYxOWEwYjgy
LzEvamxvMm80NmVWaVIycm5DNUZRS09NQmh4S1JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAueHgMA0E
AgACMAcDBQMqBkdAMA0GCSqGSIb3DQEBCwUAA4IBAQBKRSSZlb2HFuX6opZKp8qj
LGX40gUXdFsVZr6fiRbNdD/WZ0Tui+rNwqxrDrzCr4ydIfmBoZvEufTHtM4tVntF
w75qCi+SMd9dbU2I9rBwO6JdP6yhnMHehGg3TB30O5MBApEHySt8l19LEcj2ZBDY
W9BPGosLiM4u2CsOi+C9bIwjzvoNUpJvcyATdIXGL1ePBJAq7zDUPO/tSUXXhSo2
3T3iv/tcB3XrSLD6OIeq1wtS96uzZznay2QL3N7jF5o2fo7QA2/ZEzv/wveg4DYq
7dK6uQNJzCWp1LIgMbXX1nhPm50NohWi7udlpZSp/7fHJ6UM0DFEDG9ccvvU2Qgf
-----END CERTIFICATE-----
Generated at Fri Apr 18 05:51:53 2025 by rpki-client