Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/FCDQvXM4an7RyZmsxp9N4pO0xfc.roa
File: FCDQvXM4an7RyZmsxp9N4pO0xfc.roa (raw, json)
Hash identifier: 3l1hcxVo6p5YjSuKs1aAqm2b6w7b0PCtT1zdLg5Layw=
Subject key identifier: 14:20:D0:BD:73:38:6A:7E:D1:C9:99:AC:C6:9F:4D:E2:93:B4:C5:F7
Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5
Certificate serial: 041142B6
Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/FCDQvXM4an7RyZmsxp9N4pO0xfc.roa
Signing time: Sat 01 Jan 2022 00:55:02 +0000
ROA not before: Sat 01 Jan 2022 00:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203148
IP address blocks: 46.18.32.0/24 maxlen: 24
185.59.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68240054 (0x41142b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5
Validity
Not Before: Jan 1 00:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1420d0bd73386a7ed1c999acc69f4de293b4c5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:c8:1a:b9:2f:ec:24:b7:08:eb:b2:2a:43:
fa:57:74:61:52:72:f6:82:3c:6f:5e:79:26:a4:7c:
7c:06:43:51:3a:12:ca:b1:4e:c3:86:89:c2:d3:a7:
1b:04:1c:01:96:d5:72:f2:72:29:3a:be:fb:bb:0c:
95:c3:34:71:b5:07:06:a1:ce:74:71:d5:49:3a:85:
63:b6:4d:43:9e:96:43:86:5d:11:93:e1:4b:62:86:
6a:e1:8a:34:48:0a:ec:20:8e:e4:b0:eb:6e:05:1c:
0c:c8:80:cc:dc:86:3d:d2:95:7b:83:52:3a:96:73:
cc:28:49:13:75:85:04:09:81:00:4a:3e:05:ca:0d:
2c:37:70:9d:5c:d7:02:fe:16:fa:e3:97:67:a2:58:
04:1e:6c:17:78:92:5e:8f:60:be:90:62:01:db:f9:
81:57:bd:0c:6d:f5:e2:2d:6c:4e:8f:15:4f:ab:97:
8d:d3:69:a1:be:e0:e5:c5:ed:70:c7:70:89:7b:23:
68:c7:c2:f9:b1:ca:c3:f7:67:e9:b7:61:a9:55:71:
be:e2:ed:e2:ed:03:ff:9f:b4:8b:01:c8:3f:fc:3a:
58:85:d3:69:aa:5a:84:ff:88:49:65:28:dd:99:1b:
46:c0:c0:78:48:d2:5b:80:51:1c:8b:de:bc:59:30:
49:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:20:D0:BD:73:38:6A:7E:D1:C9:99:AC:C6:9F:4D:E2:93:B4:C5:F7
X509v3 Authority Key Identifier:
keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/FCDQvXM4an7RyZmsxp9N4pO0xfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.32.0/24
185.59.16.0/22
Signature Algorithm: sha256WithRSAEncryption
af:b4:c8:cf:e1:d7:08:b6:bb:10:6f:6b:4a:22:17:56:01:d7:
69:a9:06:d6:11:cf:3f:ae:af:12:15:9c:3c:ca:42:ea:b7:5c:
13:cf:3d:37:b0:d8:12:18:9c:82:08:54:6f:2a:7c:f2:c4:d4:
76:a6:da:20:6d:43:5a:a6:d4:34:d4:8e:ff:aa:73:fe:ea:c7:
84:f6:1f:a9:11:61:ce:42:86:e7:cb:73:23:33:ad:ff:35:d6:
fa:0d:9f:a7:bb:1f:81:f6:24:a7:12:ea:65:32:16:ce:46:07:
ec:8b:de:44:56:91:66:90:11:32:3b:bc:85:82:45:e2:a2:92:
4d:5e:ae:07:ff:70:43:d5:d5:7b:8a:a0:27:89:7f:98:9f:9b:
6e:05:4f:22:28:99:93:5f:53:84:ef:e3:45:2f:41:d6:d7:78:
b9:a0:c1:f2:4f:7c:46:60:56:43:34:c5:df:2e:69:6f:dc:75:
8c:0d:b7:95:e6:2c:43:0f:16:3f:59:43:d3:33:65:5e:19:f1:
18:dc:c2:84:c6:01:85:33:77:8c:2e:f7:e6:e7:d9:6a:e9:d5:
fb:cd:0b:c5:76:7f:d1:d8:b4:f0:ea:1f:6f:a3:a9:c6:1e:ec:
26:59:31:5e:4c:bf:c7:b6:fb:ef:61:2f:02:65:0e:5d:da:8a:
96:16:36:97
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBBFCtjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
MjU2MGZjMWNmNmI5NzQ2NjczN2MzMDI3MTIzZmExMjBiMTk1NGQ1MB4XDTIyMDEw
MTAwNTUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTQyMGQwYmQ3MzM4
NmE3ZWQxYzk5OWFjYzY5ZjRkZTI5M2I0YzVmNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK9vyBq5L+wktwjrsipD+ld0YVJy9oI8b155JqR8fAZDUToS
yrFOw4aJwtOnGwQcAZbVcvJyKTq++7sMlcM0cbUHBqHOdHHVSTqFY7ZNQ56WQ4Zd
EZPhS2KGauGKNEgK7CCO5LDrbgUcDMiAzNyGPdKVe4NSOpZzzChJE3WFBAmBAEo+
BcoNLDdwnVzXAv4W+uOXZ6JYBB5sF3iSXo9gvpBiAdv5gVe9DG314i1sTo8VT6uX
jdNpob7g5cXtcMdwiXsjaMfC+bHKw/dn6bdhqVVxvuLt4u0D/5+0iwHIP/w6WIXT
aapahP+ISWUo3ZkbRsDAeEjSW4BRHIvevFkwSdECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQUINC9czhqftHJmazGn03ik7TF9zAfBgNVHSMEGDAWgBRCVg/Bz2uXRmc3
wwJxI/oSCxlU1TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1FsWVB3YzlybDBabk44TUNjU1A2RWdzWlZOVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjEvZmIwNzNmLTZiMzgtNGVjYi1iOTZmLTJjMjA3OWQ5MTZhZC8x
L0ZDRFF2WE00YW43UnlabXN4cDlONHBPMHhmYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEv
ZmIwNzNmLTZiMzgtNGVjYi1iOTZmLTJjMjA3OWQ5MTZhZC8xL1FsWVB3YzlybDBa
bk44TUNjU1A2RWdzWlZOVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC4SIAMEArk7EDANBgkqhkiG9w0B
AQsFAAOCAQEAr7TIz+HXCLa7EG9rSiIXVgHXaakG1hHPP66vEhWcPMpC6rdcE889
N7DYEhicgghUbyp88sTUdqbaIG1DWqbUNNSO/6pz/urHhPYfqRFhzkKG58tzIzOt
/zXW+g2fp7sfgfYkpxLqZTIWzkYH7IveRFaRZpARMju8hYJF4qKSTV6uB/9wQ9XV
e4qgJ4l/mJ+bbgVPIiiZk19ThO/jRS9B1td4uaDB8k98RmBWQzTF3y5pb9x1jA23
leYsQw8WP1lD0zNlXhnxGNzChMYBhTN3jC735ufZaunV+80LxXZ/0di08Oofb6Op
xh7sJlkxXky/x7b772EvAmUOXdqKlhY2lw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:32 2025 by rpki-client