Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/fcu7oYKGZqdHuckrku3kbBeV6CE.roa
File: fcu7oYKGZqdHuckrku3kbBeV6CE.roa (raw, json)
Hash identifier: ztWJUaOwY8D/NTUanX8C1gWUPoLxb9TUkIz/a9dVtRE=
Subject key identifier: 7D:CB:BB:A1:82:86:66:A7:47:B9:C9:2B:92:ED:E4:6C:17:95:E8:21
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 01872DC8D5E4C3F3691C290E5316C9D400F2
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/fcu7oYKGZqdHuckrku3kbBeV6CE.roa
Signing time: Wed 29 Mar 2023 14:32:29 +0000
ROA not before: Wed 29 Mar 2023 14:32:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149767
IP address blocks: 46.20.109.0/24 maxlen: 24
46.20.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:c8:d5:e4:c3:f3:69:1c:29:0e:53:16:c9:d4:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Mar 29 14:32:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dcbbba1828666a747b9c92b92ede46c1795e821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f6:3f:af:35:ce:95:b3:04:42:6e:9a:a4:04:
84:bc:73:25:2b:8c:76:9c:2a:45:0f:e4:d4:c7:6a:
5a:e8:78:fe:8f:40:73:2d:a2:a9:2a:ca:1c:51:71:
a5:3d:17:f7:54:fa:91:e9:4e:c8:44:bc:9b:ce:62:
12:93:93:00:8a:43:6f:90:83:38:e1:02:0a:e8:da:
3b:ed:7f:2c:1f:48:5d:b2:b3:ee:10:9f:03:3c:f3:
fc:79:14:f2:56:1c:8a:b8:78:2b:db:94:6a:cc:c5:
1d:5a:d8:e2:dd:8f:b6:0e:72:80:8a:45:a6:45:2d:
de:58:bc:6d:91:99:e2:d8:97:51:3e:5e:cc:ea:49:
38:97:81:69:66:3d:1f:ea:ba:d4:f9:e5:48:eb:13:
01:41:bc:07:40:38:b0:9b:3b:92:d7:41:8f:d6:25:
a7:a7:16:46:c9:b6:fd:7b:c9:fd:9d:a2:bf:10:55:
40:0e:99:6d:6d:7e:40:52:6a:06:bb:39:07:9c:52:
ed:7c:c0:e3:25:67:c6:36:f5:e2:90:bd:32:da:8e:
d8:ea:89:c4:32:ed:8a:3f:4e:62:e6:c8:3d:87:48:
ae:fe:3a:41:04:5d:76:75:46:b6:65:f9:7d:b6:34:
d3:86:cc:b9:76:42:ac:ce:6a:39:46:4b:46:2f:14:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:BB:A1:82:86:66:A7:47:B9:C9:2B:92:ED:E4:6C:17:95:E8:21
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/fcu7oYKGZqdHuckrku3kbBeV6CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.99.0/24
46.20.109.0/24
Signature Algorithm: sha256WithRSAEncryption
02:58:48:40:6e:66:d8:21:ac:e5:98:22:bb:c9:c7:7a:af:f6:
0a:ff:2d:45:7f:0a:cb:04:9b:87:b0:26:6d:96:52:4a:82:c3:
2c:fc:70:79:4e:c0:26:0b:96:a1:b5:f3:77:cb:b2:d0:bb:af:
ff:7a:41:6a:fd:64:44:31:79:8e:00:5d:76:dd:31:69:bb:ff:
f0:29:5f:d8:ac:39:76:20:4c:29:61:5f:40:d0:81:9f:9a:76:
1a:43:8f:cd:7b:76:0f:58:97:ba:ef:3c:13:6b:76:b8:fa:f8:
a5:97:72:bc:14:29:03:78:e2:2c:42:5f:44:c0:f8:c1:97:72:
df:e0:88:0d:e8:87:16:ed:3b:b6:57:c5:d0:26:17:8a:28:79:
9d:27:2b:bf:d5:b7:b5:4b:ca:2e:e3:d9:58:2c:cb:a4:25:80:
55:79:45:9a:2b:3f:9f:47:a6:91:60:5c:7e:7b:49:56:38:d0:
e1:be:a5:35:2b:d9:71:a7:ec:ae:be:b9:ea:c0:49:47:a6:04:
cd:ab:0c:93:30:19:be:f2:fe:1e:99:01:7c:50:0e:3e:dd:ea:
e4:06:3b:fe:da:c5:da:8a:72:b6:c0:45:40:6d:ec:41:db:ae:
5f:62:fb:cf:31:ef:fb:0d:81:f6:ce:68:4e:ab:2a:63:dc:fc:
50:10:fe:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYctyNXkw/NpHCkOUxbJ1ADyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx
ZTllNjUwHhcNMjMwMzI5MTQzMjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGNiYmJhMTgyODY2NmE3NDdiOWM5MmI5MmVkZTQ2YzE3OTVlODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfY/rzXOlbMEQm6apASEvHMlK4x2
nCpFD+TUx2pa6Hj+j0BzLaKpKsocUXGlPRf3VPqR6U7IRLybzmISk5MAikNvkIM4
4QIK6No77X8sH0hdsrPuEJ8DPPP8eRTyVhyKuHgr25RqzMUdWtji3Y+2DnKAikWm
RS3eWLxtkZni2JdRPl7M6kk4l4FpZj0f6rrU+eVI6xMBQbwHQDiwmzuS10GP1iWn
pxZGybb9e8n9naK/EFVADpltbX5AUmoGuzkHnFLtfMDjJWfGNvXikL0y2o7Y6onE
Mu2KP05i5sg9h0iu/jpBBF12dUa2Zfl9tjTThsy5dkKszmo5RktGLxSOowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH3Lu6GChmanR7nJK5Lt5GwXleghMB8GA1UdIwQY
MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct
MzU1MDgwNDE2NTJkLzEvZmN1N29ZS0dacWRIdWNrcmt1M2tiQmVWNkNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk
LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhRjAwQA
LhRtMA0GCSqGSIb3DQEBCwUAA4IBAQACWEhAbmbYIazlmCK7ycd6r/YK/y1FfwrL
BJuHsCZtllJKgsMs/HB5TsAmC5ahtfN3y7LQu6//ekFq/WREMXmOAF123TFpu//w
KV/YrDl2IEwpYV9A0IGfmnYaQ4/Ne3YPWJe67zwTa3a4+vill3K8FCkDeOIsQl9E
wPjBl3Lf4IgN6IcW7Tu2V8XQJheKKHmdJyu/1be1S8ou49lYLMukJYBVeUWaKz+f
R6aRYFx+e0lWONDhvqU1K9lxp+yuvrnqwElHpgTNqwyTMBm+8v4emQF8UA4+3erk
Bjv+2sXainK2wEVAbexB265fYvvPMe/7DYH2zmhOqypj3PxQEP5P
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:37 2025 by rpki-client