Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/FPcQo9u9aaj7M58993sHzUqRZio.roa
File: FPcQo9u9aaj7M58993sHzUqRZio.roa (raw, json)
Hash identifier: EiwIBuQ37a5E/vzbkM6eWryZHoArtvdLsmX9weH0bCA=
Subject key identifier: 14:F7:10:A3:DB:BD:69:A8:FB:33:9F:3D:F7:7B:07:CD:4A:91:66:2A
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A160B01409D8AB44A1CF4645EA42E
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/FPcQo9u9aaj7M58993sHzUqRZio.roa
Signing time: Sun 01 Jan 2023 04:14:49 +0000
ROA not before: Sun 01 Jan 2023 04:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210490
IP address blocks: 46.229.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:16:0b:01:40:9d:8a:b4:4a:1c:f4:64:5e:a4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f710a3dbbd69a8fb339f3df77b07cd4a91662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:84:82:41:f6:2f:1c:2d:b8:98:c0:35:71:
01:83:5f:90:67:f8:a1:da:34:c7:aa:7e:ca:d9:8e:
09:55:25:86:a6:78:5a:02:df:42:3c:87:a6:45:61:
6e:1c:bd:18:18:1f:4e:72:8c:aa:69:b5:4d:62:a6:
be:2e:e5:99:f5:eb:e3:0f:31:fc:bc:90:f9:74:06:
a0:62:10:05:b8:a4:19:ef:d8:12:f0:d3:97:7a:24:
1c:6d:80:12:39:51:d0:ee:9a:b8:86:30:0c:c3:d1:
9d:cf:fe:78:cc:a2:f8:93:52:5d:dc:9c:fa:60:11:
ec:0d:11:d9:80:30:a3:d9:aa:60:1d:5e:74:8a:1e:
14:28:af:58:c9:4a:ac:b6:77:74:15:ac:3e:88:65:
21:05:1a:a4:7d:90:4a:f0:9b:d8:eb:47:85:d3:7d:
dc:39:09:3b:5f:f8:42:6a:a7:ab:cb:07:82:b1:8d:
e5:e3:fd:2f:66:a3:be:c1:da:21:87:6b:8d:76:06:
ba:5b:4f:d3:3e:69:6e:48:16:70:ac:26:7c:82:74:
4e:e2:5c:ef:0c:a1:fe:3b:fc:36:1b:f7:13:9e:45:
33:80:3e:01:e1:7c:37:ea:4b:4f:8b:4c:95:84:ba:
7d:7d:e1:8a:ce:82:23:37:d8:69:da:ea:9e:5b:a1:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F7:10:A3:DB:BD:69:A8:FB:33:9F:3D:F7:7B:07:CD:4A:91:66:2A
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/FPcQo9u9aaj7M58993sHzUqRZio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.54.0/24
Signature Algorithm: sha256WithRSAEncryption
85:00:5c:79:50:d9:d2:bf:41:e0:dd:3f:dd:e5:aa:d4:54:4d:
5c:76:d1:db:24:4c:36:b7:28:28:04:e0:94:1d:9c:ab:a7:1e:
5b:d3:9a:e5:93:e2:89:4b:b7:90:d1:d9:10:4f:a0:22:49:c2:
18:37:33:ea:29:95:d6:4b:59:54:4c:9d:dd:70:af:af:e7:cc:
c8:03:fc:a2:51:6b:77:4f:c3:a1:27:ce:62:ba:8a:a8:7e:1f:
bd:87:6c:35:32:a2:7c:c0:e8:70:ec:3b:6e:6e:a4:46:91:91:
72:23:b5:b4:75:c0:f0:0a:33:68:60:20:f8:0c:41:f2:78:1e:
a2:d3:5f:d3:38:bf:c0:13:54:01:b8:b4:4f:6d:b7:10:ab:7e:
26:91:4b:24:ba:62:7f:bb:ba:3e:84:80:a4:6f:76:b0:7e:fa:
a8:d8:44:8c:b5:1d:50:48:10:f2:b8:8e:0b:a6:0f:57:4d:1e:
57:8f:e3:5c:14:73:6b:af:54:a4:2c:5d:1f:19:d0:18:18:72:
48:7a:25:18:ac:b2:16:7a:aa:de:75:92:77:b4:ba:be:67:71:
7b:5a:cd:15:fd:ce:8c:99:4a:ef:aa:16:10:49:ed:3a:77:01:
75:34:e2:c1:dd:c8:60:17:ce:05:a7:de:1a:fa:68:fd:63:26:
7c:d9:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:59 2025 by rpki-client