Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/FDqdOIUuAK8p_h5T4-Oad5uOME8.roa
File: FDqdOIUuAK8p_h5T4-Oad5uOME8.roa (raw, json)
Hash identifier: FWJ+e1PaD08hyrMzEk0c0U5m6q+0n8P7X+/qLrU2rnM=
Subject key identifier: 14:3A:9D:38:85:2E:00:AF:29:FE:1E:53:E3:E3:9A:77:9B:8E:30:4F
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 35A43CFB
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/FDqdOIUuAK8p_h5T4-Oad5uOME8.roa
Signing time: Sat 01 Jan 2022 08:54:56 +0000
ROA not before: Sat 01 Jan 2022 08:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49345
IP address blocks: 91.219.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 899955963 (0x35a43cfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Jan 1 08:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=143a9d38852e00af29fe1e53e3e39a779b8e304f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:b6:2c:d5:8b:06:06:05:c9:e3:c8:33:99:
a3:80:11:f8:40:ef:a5:f6:e5:38:94:db:70:2e:99:
0f:d6:5e:86:f2:18:09:bd:5c:7a:08:d2:66:97:fd:
39:79:ef:ab:a8:93:26:48:7b:0d:cc:0e:86:b4:11:
cc:b8:e9:d9:96:b0:0a:97:bd:d8:4f:f9:75:a4:f8:
e3:0d:82:92:2f:f5:f0:4a:ec:f7:f4:38:32:78:a8:
1d:34:56:6d:0b:20:39:c8:10:51:cf:80:d5:39:9d:
82:c4:9f:c2:3e:a8:31:c2:12:e8:a3:2f:6d:17:bd:
a7:c6:74:72:64:8c:63:d5:4f:4d:a2:1e:e9:eb:fb:
38:59:b0:e2:8a:f6:77:16:f7:d2:b6:a0:d3:0b:7d:
9f:13:87:53:49:23:0d:e3:58:6d:6c:27:72:a0:4a:
06:23:1a:21:67:c9:5d:8e:2a:39:f6:cc:9e:89:6e:
5a:78:2c:0a:16:eb:2b:1b:6c:31:59:ec:aa:1f:3d:
db:52:a9:2d:b8:f9:03:41:11:fa:a1:0b:8c:e1:e7:
27:42:ec:08:75:46:3a:2c:39:0d:c4:cc:16:c4:23:
c6:36:eb:14:33:43:cc:90:8e:6c:e3:91:cf:fc:f8:
1e:09:f6:ef:02:7e:05:65:79:bc:a5:68:40:3c:ce:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3A:9D:38:85:2E:00:AF:29:FE:1E:53:E3:E3:9A:77:9B:8E:30:4F
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/FDqdOIUuAK8p_h5T4-Oad5uOME8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.180.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:3a:62:e2:8d:60:85:46:e9:1e:a1:f8:74:0c:94:5c:2f:c8:
46:de:3c:a3:be:bc:e4:ed:18:b5:f4:17:da:e4:92:9a:c3:0d:
b2:e9:b9:cb:4b:40:05:06:5e:a5:ba:14:ec:f1:71:4c:7a:b3:
d9:7d:d4:a8:94:82:f5:1c:2b:af:99:bb:67:1a:33:1d:a8:72:
57:ed:44:ce:aa:9d:c5:54:4f:f2:0e:5e:39:a5:ea:5f:07:55:
28:f8:9b:21:e3:18:a5:20:d2:7d:2c:42:0c:0c:da:17:bf:1c:
72:b4:b3:91:fa:61:33:2d:20:ff:aa:4d:08:22:ac:39:73:49:
b4:8d:c1:93:2f:6c:06:65:29:f5:68:fa:52:ef:f5:7d:a9:68:
b4:ea:b0:c0:10:30:61:4b:b0:cd:49:ca:42:0e:25:11:a2:91:
e9:f0:7c:e7:d6:cf:9c:58:ee:83:69:ac:d9:b3:cd:35:35:a2:
9d:fc:b6:94:5a:7d:46:a6:b1:bb:d8:d6:a8:67:ea:ab:6b:07:
20:b4:e4:28:cb:b5:82:50:45:a3:6d:63:00:28:58:15:d0:61:
2e:9b:da:60:c4:e0:4a:2b:2c:48:2b:f8:2d:69:28:e4:06:ce:
5a:8b:01:69:14:0f:0f:e8:2b:d6:6c:aa:82:d0:30:df:d2:07:
c3:e2:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:15 2025 by rpki-client