Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/3wBSP5EEHNTHL9EgPPwuUqlSa9w.roa
File: 3wBSP5EEHNTHL9EgPPwuUqlSa9w.roa (raw, json)
Hash identifier: TgpJpPauuMZrZFtROpulkG/6RFnSHAEJp50kloSO1FQ=
Subject key identifier: DF:00:52:3F:91:04:1C:D4:C7:2F:D1:20:3C:FC:2E:52:A9:52:6B:DC
Certificate issuer: /CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Certificate serial: 086CFA5F
Authority key identifier: FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/3wBSP5EEHNTHL9EgPPwuUqlSa9w.roa
Signing time: Sat 01 Jan 2022 10:55:02 +0000
ROA not before: Sat 01 Jan 2022 10:55:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47295
IP address blocks: 93.90.128.0/20 maxlen: 20
194.48.144.0/22 maxlen: 22
2a03:2400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141359711 (0x86cfa5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbb5e2e0fd9832d73b1ef8f9e486ffd00b3d789
Validity
Not Before: Jan 1 10:55:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=df00523f91041cd4c72fd1203cfc2e52a9526bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:e7:b9:58:69:08:bf:10:19:94:b5:25:fc:
b2:d9:33:bc:99:cc:af:53:ce:d0:d2:8b:57:df:fb:
0e:bf:5f:0a:09:b7:65:ee:c0:26:35:a9:76:c9:f5:
46:69:bb:00:e4:d4:c5:ac:37:0f:56:52:5a:97:99:
6e:ba:fe:94:c3:d0:c4:ef:36:53:58:6e:34:06:e4:
c8:0b:47:e1:93:2e:f2:24:c7:59:34:36:f7:93:d5:
f8:b0:89:35:de:c8:70:99:5c:bc:b5:1a:8f:cb:94:
74:4f:ca:ab:d0:27:aa:13:c2:59:37:84:e7:16:df:
49:39:42:a5:5b:2c:fe:fd:4b:1a:3c:f7:40:e9:97:
f0:e3:b9:ea:b3:2e:74:6b:d4:dc:07:f8:cc:3c:b1:
64:07:0f:41:2e:fb:fb:2e:9c:76:bf:81:cc:4a:9c:
d7:6e:21:95:b5:9a:35:9e:6a:4d:a7:b7:5a:65:0f:
ee:36:98:ec:93:92:a6:0b:41:d5:52:ba:9a:23:09:
90:04:19:f7:ea:bd:aa:77:de:1a:8c:b1:8c:b8:46:
b9:71:a2:c3:e2:78:4d:54:09:c5:05:f9:2c:01:aa:
ce:92:8a:65:a4:a2:fc:0a:0c:d6:d2:0b:15:d1:b8:
e1:2e:f1:22:e1:55:a1:80:0a:23:ce:3a:b6:82:92:
2c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:00:52:3F:91:04:1C:D4:C7:2F:D1:20:3C:FC:2E:52:A9:52:6B:DC
X509v3 Authority Key Identifier:
keyid:FC:BB:5E:2E:0F:D9:83:2D:73:B1:EF:8F:9E:48:6F:FD:00:B3:D7:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LteLg_Zgy1zse-Pnkhv_QCz14k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/3wBSP5EEHNTHL9EgPPwuUqlSa9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/353f3d-6afa-4e31-91a9-5e6a92e7f68f/1/_LteLg_Zgy1zse-Pnkhv_QCz14k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.128.0/20
194.48.144.0/22
IPv6:
2a03:2400::/29
Signature Algorithm: sha256WithRSAEncryption
4a:9b:5e:1c:d4:ea:96:b5:8f:54:6e:c1:a1:20:0b:f8:50:a9:
49:42:c6:2f:dd:6c:e1:10:57:14:c1:54:3e:6b:2f:88:c7:dd:
75:f8:68:02:f6:4e:74:42:c3:a5:6d:9e:3f:69:d2:77:15:51:
e0:d8:5b:f1:dd:9b:59:e5:50:87:ac:7e:3f:a9:57:e8:19:b1:
f8:76:12:9d:87:f8:b6:96:2f:5f:7f:b9:68:b3:b7:cb:ab:f7:
31:66:fd:66:5f:b0:b6:4c:ad:24:29:21:74:8a:5f:47:db:df:
0d:4e:ba:b6:98:78:42:f0:01:f2:3e:ca:41:5f:04:0b:c8:86:
8e:ad:01:fc:6e:ee:3e:29:b0:10:34:21:8a:07:b4:13:a1:5c:
88:ea:3e:fb:3e:db:3a:6b:13:a0:9c:78:12:b2:0b:78:49:8f:
3e:6c:23:ec:57:b1:ea:d8:0d:5d:d4:ea:b9:5e:6e:86:84:14:
30:c4:ae:fa:23:24:c0:57:2d:d2:8d:42:71:ef:ca:8c:4c:c0:
e8:09:81:59:4d:ff:ed:7c:e7:14:ea:00:ab:df:05:eb:79:eb:
c6:9c:32:6c:76:54:60:32:ef:01:c0:d4:6a:e5:69:5b:89:29:
d7:53:55:16:88:1f:cf:6d:0a:a3:5d:86:2d:a1:c8:f2:32:9d:
69:ce:e9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:33:01 2025 by rpki-client